infra/stacks/kms
Viktor Barzin c5e4b1ea71 kms: add /diag anonymous telemetry collector behind Anubis carve-out
The PowerShell activation scripts POST small JSON diagnostics to
/diag so script execution errors are captured. The collector
(python:3.12-alpine, ConfigMap-mounted) prints each event to stdout
as a KMSDIAG line; the cluster's Loki scrapes pod stdout, making
events searchable in Grafana (Loki only — no Slack, no Prometheus).

Like /scripts, /diag needs a second ingress_factory carve-out with
full_host="kms.viktorbarzin.me" so it bypasses the Anubis PoW
challenge that PowerShell/curl can't solve. Without full_host the
factory would derive kms-diag.viktorbarzin.me and the carve-out
would never match.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-06-01 19:50:41 +00:00
..
files kms: add /diag anonymous telemetry collector behind Anubis carve-out 2026-06-01 19:50:41 +00:00
.terraform.lock.hcl Woodpecker CI deploy [CI SKIP] 2026-06-01 10:36:49 +00:00
backend.tf Woodpecker CI deploy [CI SKIP] 2026-06-01 10:36:49 +00:00
main.tf kms: add /diag anonymous telemetry collector behind Anubis carve-out 2026-06-01 19:50:41 +00:00
providers.tf Woodpecker CI deploy [CI SKIP] 2026-06-01 10:36:49 +00:00
secrets [ci skip] Move Terraform modules into stack directories 2026-02-22 14:38:14 +00:00
terragrunt.hcl [ci skip] Phase 3: Create 66 service stacks and migrate state 2026-02-22 13:56:34 +00:00
variables.tf kms: replace inline ConfigMap nginx with custom Hugo image 2026-05-07 23:33:26 +00:00