From 2fdbe9b9452f1bd4c3e3e620b671d345b888f5dc Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Wed, 22 Jul 2026 09:25:18 -0500 Subject: [PATCH 01/23] feat(codeowners): keep a list GPE-2599 --- CODEOWNERS | 2 ++ 1 file changed, 2 insertions(+) diff --git a/CODEOWNERS b/CODEOWNERS index de85d8b0e..1dcae0044 100644 --- a/CODEOWNERS +++ b/CODEOWNERS @@ -1,8 +1,10 @@ unfunded/caninedc.org @trevars @beamcb dataguids/dataguids.org @trevars @beamcb unfunded/icgc.bionimbus.org @trevars @beamcb +unfunded/.org @trevars @beamcb unfunded/aids.diseasedatahub.org @beamcb unfunded/tb.diseasedatahub.org @beamcb +unfunded/chicagoland.pandemicresponsecommons.org @trevars @beamcb unfunded/flu.diseasedatahub.org @beamcb unfunded/diseasedatahub.org @beamcb dcf-staging/nci-crdc-staging.datacommons.io @jeffrey-knight From 5a66958a3c6b0ed9d407e1daf6ba3aeff0ca66ef Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Wed, 22 Jul 2026 09:38:10 -0500 Subject: [PATCH 02/23] feat(rename): move prc to unfunded GPE-2599 --- .../Chart.yaml | 0 .../cluster-values-from-covid19prod.yaml | 176 ++++++++++++++++++ .../templates/app.yaml | 0 .../values.yaml | 0 .../values/portal/css/gitops.css | 0 .../values/portal/gitops.json | 0 .../values/portal/logo/gitops-logo.png | Bin .../sponsors/gitops-sponsors/OCC-data.png | Bin .../sponsors/gitops-sponsors/awswhite.png | Bin .../sponsors/gitops-sponsors/covid_gene.svg | 0 .../gitops-sponsors/logo_bioteam_400px.png | Bin .../occHORIZwhitetitleTRANS.png | Bin .../values/values.yaml | 0 unfunded/cluster-values/karpenter.yaml | 24 +++ 14 files changed, 200 insertions(+) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/Chart.yaml (100%) create mode 100644 unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/templates/app.yaml (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values.yaml (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/css/gitops.css (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/gitops.json (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/logo/gitops-logo.png (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/OCC-data.png (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/awswhite.png (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/covid_gene.svg (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/logo_bioteam_400px.png (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/occHORIZwhitetitleTRANS.png (100%) rename {covid19prod => unfunded}/chicagoland.pandemicresponsecommons.org/values/values.yaml (100%) create mode 100644 unfunded/cluster-values/karpenter.yaml diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/Chart.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/Chart.yaml similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/Chart.yaml rename to unfunded/chicagoland.pandemicresponsecommons.org/Chart.yaml diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml new file mode 100644 index 000000000..217e62bfa --- /dev/null +++ b/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml @@ -0,0 +1,176 @@ +cluster: covid19prod +project: covid19 +accountNumber: "236714345101" + +alb-controller: + enabled: true + configuration: + enabled: false + +aws-s3-mountpoint: + enabled: true + configuration: + enabled: false + +calico: + enabled: true + configuration: + enabled: false + +coreDNS: + enabled: true + configuration: + enabled: false + +cert-manager: + enabled: true + +ebs-csi-driver: + enabled: false + configuration: + enabled: false + +external-secrets: + enabled: true + targetRevision: "0.16.2" + configuration: + enabled: false + +fluentd: + enabled: false + configuration: + enabled: false + +kube-state-metrics: + enabled: true + configuration: + enabled: false + +grafana-alloy: + enabled: true + configuration: + enabled: false + +karpenter: + enabled: true + targetRevision: "1.9.0" + +karpenter-crds: + amiSelectorName: "EKS-1-35-x86-x64-AL23*" + enabled: true + selectorTag: covid19prod + migration: true + default: + weight: 90 + disruptionBudget: "80%" + nodeClassRef: + apiVersion: karpenter.k8s.aws/v1 + kind: EC2NodeClass + name: default + amiFamily: AL2023 + consolidationPolicy: "WhenEmptyOrUnderutilized" + consolidateAfter: "1m" + expireAfter: "72h" + volumeSize: 80Gi + requirements: + - key: karpenter.sh/capacity-type + operator: In + values: + - spot + - key: kubernetes.io/arch + operator: In + values: + - amd64 + - key: node.kubernetes.io/instance-type + operator: In + values: + - r8i-flex.large + - r8i-flex.xlarge + - m8i-flex.large + - m8i-flex.xlarge + - r8i.large + - r8i.xlarge + - r8a.medium + - r8a.large + - r8a.xlarge + - r7a.large + - r7a.xlarge + - r7i.large + - r7i.xlarge + - r6a.large + - r6a.xlarge + - r6i.large + - r6i.xlarge + - r5a.large + - r5i.large + - key: karpenter.k8s.aws/instance-memory + operator: Gt + values: + - "4000" + - key: karpenter.k8s.aws/instance-memory + operator: Lt + values: + - "17000" + secondary: + enabled: false + nodeClassRef: + apiVersion: karpenter.k8s.aws/v1 + kind: EC2NodeClass + name: secondary + amiFamily: AL2023 + consolidationPolicy: "WhenEmptyOrUnderutilized" + consolidateAfter: "1m" + expireAfter: "72h" + volumeSize: 80Gi + requirements: + - key: karpenter.sh/capacity-type + operator: In + values: + - on-demand + - key: kubernetes.io/arch + operator: In + values: + - amd64 + - key: node.kubernetes.io/instance-type + operator: In + values: + - r8i-flex.large + - r8i-flex.xlarge + - m8i-flex.large + - m8i-flex.xlarge + - r8i.large + - r8i.xlarge + - r8a.medium + - r8a.large + - r8a.xlarge + - r7a.large + - r7a.xlarge + - r7i.large + - r7i.xlarge + - r6a.large + - r6a.xlarge + - r6i.large + - r6i.xlarge + - r5a.large + - r5i.large + workflow: + nodeClassRef: + apiVersion: karpenter.k8s.aws + kind: EC2NodeClass + name: workflow + amiFamily: AL2023 + volumeSize: 80Gi + jupyter: + nodeClassRef: + apiVersion: karpenter.k8s.aws + kind: EC2NodeClass + name: jupyter + amiFamily: AL2023 + volumeSize: 80Gi + +vpc-cni: + enabled: true + configuration: + enabled: false +kube-proxy: + enabled: true diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/templates/app.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/templates/app.yaml rename to unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values.yaml similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values.yaml rename to unfunded/chicagoland.pandemicresponsecommons.org/values.yaml diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/css/gitops.css b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/css/gitops.css similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/css/gitops.css rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/css/gitops.css diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/gitops.json b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/gitops.json similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/gitops.json rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/gitops.json diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/logo/gitops-logo.png b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/logo/gitops-logo.png similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/logo/gitops-logo.png rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/logo/gitops-logo.png diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/OCC-data.png b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/OCC-data.png similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/OCC-data.png rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/OCC-data.png diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/awswhite.png b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/awswhite.png similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/awswhite.png rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/awswhite.png diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/covid_gene.svg b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/covid_gene.svg similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/covid_gene.svg rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/covid_gene.svg diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/logo_bioteam_400px.png b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/logo_bioteam_400px.png similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/logo_bioteam_400px.png rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/logo_bioteam_400px.png diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/occHORIZwhitetitleTRANS.png b/unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/occHORIZwhitetitleTRANS.png similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/occHORIZwhitetitleTRANS.png rename to unfunded/chicagoland.pandemicresponsecommons.org/values/portal/sponsors/gitops-sponsors/occHORIZwhitetitleTRANS.png diff --git a/covid19prod/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml similarity index 100% rename from covid19prod/chicagoland.pandemicresponsecommons.org/values/values.yaml rename to unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml diff --git a/unfunded/cluster-values/karpenter.yaml b/unfunded/cluster-values/karpenter.yaml new file mode 100644 index 000000000..4362348cf --- /dev/null +++ b/unfunded/cluster-values/karpenter.yaml @@ -0,0 +1,24 @@ +skipCrds: true +serviceAccount: + name: karpenter + create: true + annotations: + eks.amazonaws.com/role-arn: "arn:aws:iam::236714345101:role/covid19prod-karpenter-sa" +settings: + clusterName: covid19prod + featureGates: + spotToSpotConsolidation: true +controller: + env: + - name: AWS_REGION + value: us-east-1 + resources: + requests: + memory: 1Gi + cpu: 1 + limits: + memory: 1Gi + cpu: 1 +webhook: + enabled: false +dnsPolicy: Default From 3d3bbbd9b04ecaa632fd5008bceca622fb176440 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 23 Jul 2026 09:14:31 -0500 Subject: [PATCH 03/23] fix(sa): was tied to specific service account --- unfunded/cluster-values/karpenter.yaml | 24 ------------------------ 1 file changed, 24 deletions(-) delete mode 100644 unfunded/cluster-values/karpenter.yaml diff --git a/unfunded/cluster-values/karpenter.yaml b/unfunded/cluster-values/karpenter.yaml deleted file mode 100644 index 4362348cf..000000000 --- a/unfunded/cluster-values/karpenter.yaml +++ /dev/null @@ -1,24 +0,0 @@ -skipCrds: true -serviceAccount: - name: karpenter - create: true - annotations: - eks.amazonaws.com/role-arn: "arn:aws:iam::236714345101:role/covid19prod-karpenter-sa" -settings: - clusterName: covid19prod - featureGates: - spotToSpotConsolidation: true -controller: - env: - - name: AWS_REGION - value: us-east-1 - resources: - requests: - memory: 1Gi - cpu: 1 - limits: - memory: 1Gi - cpu: 1 -webhook: - enabled: false -dnsPolicy: Default From fee736fe62fc0af5e0ab9d29184d6896387aa54f Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Fri, 24 Jul 2026 10:08:36 -0500 Subject: [PATCH 04/23] fix(calico): cilium already deployed --- unfunded/cluster-values/cluster-values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/cluster-values/cluster-values.yaml b/unfunded/cluster-values/cluster-values.yaml index 6f59e498a..91b5dfc06 100644 --- a/unfunded/cluster-values/cluster-values.yaml +++ b/unfunded/cluster-values/cluster-values.yaml @@ -15,7 +15,7 @@ aws-s3-mountpoint: enabled: false calico: - enabled: true + enabled: false configuration: enabled: false From ba3e7cf9b5a024a24ac1af9f081fb24efdb7f3a0 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Fri, 24 Jul 2026 10:28:27 -0500 Subject: [PATCH 05/23] feat(unfunded): move things to unfunded not sure on hatchery --- .../values/values.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index fd8458996..8c8a8f9be 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -450,16 +450,18 @@ fluentd: global: pdb: true aws: - account: '236714345101' - awsEsProxyRole: covid19prod--covid19prod-helm--es-access + awsEsProxyRoleArn: aws:iam::662843554732:role/gen3-service/unfunded-esproxy-sa enabled: true - hatchery_role: covid19prod--covid19prod-helm--hatchery-sa + useLocalSecret: + enable: false + localSecretName: external-secrets-covid19-secret secretStoreServiceAccount: enabled: true roleArn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--external-secrets-sa wafv2: enabled: true - wafAclArn: arn:aws:wafv2:us-east-1:236714345101:regional/webacl/covid19prod-waf/0ca854eb-0058-49ee-86b5-749c6630ea99 + wafAclArn: arn:aws:wafv2:us-east-1:662843554732:regional/webacl/unfunded-waf/e10ae423-8e4e-48ba-9a0e-52b43f28f6d4 + hatchery_role: covid19prod--covid19prod-helm--hatchery-sa dev: false dictionaryUrl: https://s3.amazonaws.com/dictionary-artifacts/covid19-datadictionary/3.9.2/schema.json dispatcherJobNum: '10' From e8f0606a97cc4b39e65c673acdaa77b7f0c9576b Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Fri, 24 Jul 2026 10:32:44 -0500 Subject: [PATCH 06/23] feat(cluster_values): consolidate cluster values --- .../cluster-values-from-covid19prod.yaml | 176 ------------------ unfunded/cluster-values/cluster-values.yaml | 1 + 2 files changed, 1 insertion(+), 176 deletions(-) delete mode 100644 unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml deleted file mode 100644 index 217e62bfa..000000000 --- a/unfunded/chicagoland.pandemicresponsecommons.org/cluster-values-from-covid19prod.yaml +++ /dev/null @@ -1,176 +0,0 @@ -cluster: covid19prod -project: covid19 -accountNumber: "236714345101" - -alb-controller: - enabled: true - configuration: - enabled: false - -aws-s3-mountpoint: - enabled: true - configuration: - enabled: false - -calico: - enabled: true - configuration: - enabled: false - -coreDNS: - enabled: true - configuration: - enabled: false - -cert-manager: - enabled: true - -ebs-csi-driver: - enabled: false - configuration: - enabled: false - -external-secrets: - enabled: true - targetRevision: "0.16.2" - configuration: - enabled: false - -fluentd: - enabled: false - configuration: - enabled: false - -kube-state-metrics: - enabled: true - configuration: - enabled: false - -grafana-alloy: - enabled: true - configuration: - enabled: false - -karpenter: - enabled: true - targetRevision: "1.9.0" - -karpenter-crds: - amiSelectorName: "EKS-1-35-x86-x64-AL23*" - enabled: true - selectorTag: covid19prod - migration: true - default: - weight: 90 - disruptionBudget: "80%" - nodeClassRef: - apiVersion: karpenter.k8s.aws/v1 - kind: EC2NodeClass - name: default - amiFamily: AL2023 - consolidationPolicy: "WhenEmptyOrUnderutilized" - consolidateAfter: "1m" - expireAfter: "72h" - volumeSize: 80Gi - requirements: - - key: karpenter.sh/capacity-type - operator: In - values: - - spot - - key: kubernetes.io/arch - operator: In - values: - - amd64 - - key: node.kubernetes.io/instance-type - operator: In - values: - - r8i-flex.large - - r8i-flex.xlarge - - m8i-flex.large - - m8i-flex.xlarge - - r8i.large - - r8i.xlarge - - r8a.medium - - r8a.large - - r8a.xlarge - - r7a.large - - r7a.xlarge - - r7i.large - - r7i.xlarge - - r6a.large - - r6a.xlarge - - r6i.large - - r6i.xlarge - - r5a.large - - r5i.large - - key: karpenter.k8s.aws/instance-memory - operator: Gt - values: - - "4000" - - key: karpenter.k8s.aws/instance-memory - operator: Lt - values: - - "17000" - secondary: - enabled: false - nodeClassRef: - apiVersion: karpenter.k8s.aws/v1 - kind: EC2NodeClass - name: secondary - amiFamily: AL2023 - consolidationPolicy: "WhenEmptyOrUnderutilized" - consolidateAfter: "1m" - expireAfter: "72h" - volumeSize: 80Gi - requirements: - - key: karpenter.sh/capacity-type - operator: In - values: - - on-demand - - key: kubernetes.io/arch - operator: In - values: - - amd64 - - key: node.kubernetes.io/instance-type - operator: In - values: - - r8i-flex.large - - r8i-flex.xlarge - - m8i-flex.large - - m8i-flex.xlarge - - r8i.large - - r8i.xlarge - - r8a.medium - - r8a.large - - r8a.xlarge - - r7a.large - - r7a.xlarge - - r7i.large - - r7i.xlarge - - r6a.large - - r6a.xlarge - - r6i.large - - r6i.xlarge - - r5a.large - - r5i.large - workflow: - nodeClassRef: - apiVersion: karpenter.k8s.aws - kind: EC2NodeClass - name: workflow - amiFamily: AL2023 - volumeSize: 80Gi - jupyter: - nodeClassRef: - apiVersion: karpenter.k8s.aws - kind: EC2NodeClass - name: jupyter - amiFamily: AL2023 - volumeSize: 80Gi - -vpc-cni: - enabled: true - configuration: - enabled: false -kube-proxy: - enabled: true diff --git a/unfunded/cluster-values/cluster-values.yaml b/unfunded/cluster-values/cluster-values.yaml index 91b5dfc06..3eb19cdb5 100644 --- a/unfunded/cluster-values/cluster-values.yaml +++ b/unfunded/cluster-values/cluster-values.yaml @@ -97,6 +97,7 @@ vpc-cni: enabled: false configuration: enabled: false + kube-proxy: enabled: false From e43fb0b1fc3df0930d71526c00ddbc71f4842cf5 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Mon, 27 Jul 2026 10:19:26 -0500 Subject: [PATCH 07/23] feat(argo): update template for argo app --- .../templates/app.yaml | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml index 92ce6854a..56b4ef77a 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/templates/app.yaml @@ -10,13 +10,13 @@ spec: sources: - path: helm/gen3 repoURL: https://github.com/uc-cdis/gen3-helm - targetRevision: feat/deployment-canary + targetRevision: master helm: releaseName: gen3-covid19prod valueFiles: - - $values/covid19prod/chicagoland.pandemicresponsecommons.org/values/values.yaml + - $values/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml - repoURL: 'https://github.com/uc-cdis/gen3-gitops.git' - targetRevision: master + targetRevision: feat/prc_unfunded ref: values destination: server: "https://kubernetes.default.svc" From 987fcdf4974b24e0c4e2bdb186e5e3bb44d64745 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Mon, 27 Jul 2026 12:29:20 -0500 Subject: [PATCH 08/23] feat(roles): use the irsa roles just made during focus hours --- .../values/values.yaml | 12 ++++++------ 1 file changed, 6 insertions(+), 6 deletions(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 8c8a8f9be..5714901d0 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -58,7 +58,7 @@ dashboard: tag: '2026.08' serviceAccount: annotations: - eks.amazonaws.com/role-arn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--dashboard-access + eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--dashboard-access etl: esEndpoint: elasticsearch etlMapping: @@ -433,7 +433,7 @@ fence: userYamlS3Path: s3://cdis-gen3-users/covid19/user.yaml serviceAccount: annotations: - eks.amazonaws.com/role-arn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--audit-sqs-sender + eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--audit-sqs-sender enabled: true externalSecrets: createK8sGoogleAppSecrets: true @@ -457,11 +457,11 @@ global: localSecretName: external-secrets-covid19-secret secretStoreServiceAccount: enabled: true - roleArn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--external-secrets-sa + roleArn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--external-secrets-sa wafv2: enabled: true wafAclArn: arn:aws:wafv2:us-east-1:662843554732:regional/webacl/unfunded-waf/e10ae423-8e4e-48ba-9a0e-52b43f28f6d4 - hatchery_role: covid19prod--covid19prod-helm--hatchery-sa + hatchery_role: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--hatchery-sa dev: false dictionaryUrl: https://s3.amazonaws.com/dictionary-artifacts/covid19-datadictionary/3.9.2/schema.json dispatcherJobNum: '10' @@ -483,7 +483,7 @@ global: portalApp: gitops postgres: dbCreate: false - revproxyArn: arn:aws:acm:us-east-1:236714345101:certificate/e5edf56f-4003-4ee3-9ecd-162aaf19c058 + revproxyArn: arn:aws:acm:us-east-1:662843554732:certificate/86eca425-c2c3-4911-a49f-20beca8c7e99 guppy: replicaCount: 2 authFilterField: auth_resource_path @@ -637,7 +637,7 @@ manifestservice: tag: '2026.08' serviceAccount: annotations: - eks.amazonaws.com/role-arn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--manifest-service-sa + eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--manifest-service-sa metadata: replicaCount: 2 enabled: true From b51974a34979c1974d3852e511901582699bc588 Mon Sep 17 00:00:00 2001 From: Ajo Augustine Date: Wed, 29 Jul 2026 17:11:27 -0500 Subject: [PATCH 09/23] Update esEndpoint Update esEndpoint --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 5714901d0..f9871b7fd 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -26,7 +26,7 @@ auspice: aws-sigv4-proxy: replicaCount: 2 enabled: true - esEndpoint: vpc-covid19prod-gen3-metadata-2-kd46ogc4c4lcwpmvkxwsprqgn4.us-east-1.es.amazonaws.com + esEndpoint: vpc-unfunded-gen3-metadata-2-tf3gyjftzrgm5asaxuvqxxwv2m.us-east-1.es.amazonaws.com awshelper: enabled: true image: From ae900768c7922f29237e62d231dda9fa28a23631 Mon Sep 17 00:00:00 2001 From: Ajo Augustine Date: Wed, 29 Jul 2026 18:26:45 -0500 Subject: [PATCH 10/23] Update values.yaml --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index f9871b7fd..76363be86 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -27,6 +27,8 @@ aws-sigv4-proxy: replicaCount: 2 enabled: true esEndpoint: vpc-unfunded-gen3-metadata-2-tf3gyjftzrgm5asaxuvqxxwv2m.us-east-1.es.amazonaws.com + externalSecrets: + awsCreds: covid19-aws-es-proxy-creds awshelper: enabled: true image: From d4bf296947b4f0c2940fb783dfa8778a61c47198 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 30 Jul 2026 11:48:19 -0500 Subject: [PATCH 11/23] fix(hatcheryRole): looks like a bad copy pasta --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 76363be86..b11517104 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -463,7 +463,7 @@ global: wafv2: enabled: true wafAclArn: arn:aws:wafv2:us-east-1:662843554732:regional/webacl/unfunded-waf/e10ae423-8e4e-48ba-9a0e-52b43f28f6d4 - hatchery_role: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--hatchery-sa + hatchery_role: unfunded--covid19prod-helm--hatchery-sa dev: false dictionaryUrl: https://s3.amazonaws.com/dictionary-artifacts/covid19-datadictionary/3.9.2/schema.json dispatcherJobNum: '10' From fef29a4c39638332b8279be51f7ada953d2238a9 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 30 Jul 2026 12:16:23 -0500 Subject: [PATCH 12/23] fix(key): externalSecretAwsCreds I think --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index b11517104..4e490346f 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -28,7 +28,7 @@ aws-sigv4-proxy: enabled: true esEndpoint: vpc-unfunded-gen3-metadata-2-tf3gyjftzrgm5asaxuvqxxwv2m.us-east-1.es.amazonaws.com externalSecrets: - awsCreds: covid19-aws-es-proxy-creds + externalSecretAwsCreds: covid19-aws-es-proxy-creds awshelper: enabled: true image: From 578547421da0036ab43d7c831c48f65133ebc956 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 30 Jul 2026 12:24:43 -0500 Subject: [PATCH 13/23] fix(arn): let the es-access not sa which it assumes --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 4e490346f..92998fd32 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -452,7 +452,7 @@ fluentd: global: pdb: true aws: - awsEsProxyRoleArn: aws:iam::662843554732:role/gen3-service/unfunded-esproxy-sa + awsEsProxyRoleArn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--es-access enabled: true useLocalSecret: enable: false From 2c22c06b04eccf525da3f9aedb3f6fb213c77ada Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 30 Jul 2026 12:52:31 -0500 Subject: [PATCH 14/23] fix(audit): wrong role --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 92998fd32..73ae5e5c2 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -16,7 +16,7 @@ audit: tag: '2026.08' serviceAccount: annotations: - eks.amazonaws.com/role-arn: arn:aws:iam::236714345101:role/covid19prod--covid19prod-helm--audit-sqs-receiver + eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--audit-sqs-receiver auspice: replicaCount: 2 enabled: true From 17e11222d3acb490ccddb7850dd2910b1fda0ed3 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 30 Jul 2026 13:13:19 -0500 Subject: [PATCH 15/23] fix(dashboard): disable it says unneeded in the doc --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 73ae5e5c2..d87e38fd8 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -54,7 +54,7 @@ dashboard: dashboardConfig: bucket: dashboard-236714345101-covid19-prod-gen3 prefix: chicagoland.pandemicresponsecommons.org - enabled: true + enabled: false image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/gen3-statics tag: '2026.08' From 07cd8be182c52b74383811187a9fa172d153f688 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Mon, 3 Aug 2026 14:44:31 -0500 Subject: [PATCH 16/23] feat(mutating): turn on mutating webhook for the host records hopefully --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index d87e38fd8..252fc5898 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -650,7 +650,7 @@ metadata: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/metadata-service tag: '2026.08' mutatingWebhook: - enabled: false + enabled: true peregrine: replicaCount: 2 enabled: true From 3920ec4bf9c30d93906f7137db48c6bdd8bfc26f Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Tue, 4 Aug 2026 14:26:41 -0500 Subject: [PATCH 17/23] fix(cert): new cert for the correct domain --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 252fc5898..79a1f2029 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -485,7 +485,7 @@ global: portalApp: gitops postgres: dbCreate: false - revproxyArn: arn:aws:acm:us-east-1:662843554732:certificate/86eca425-c2c3-4911-a49f-20beca8c7e99 + revproxyArn: arn:aws:acm:us-east-1:662843554732:certificate/843a0993-4bea-4cf1-87b2-49d7c2d75a80 guppy: replicaCount: 2 authFilterField: auth_resource_path From 0084fd07a43391d14915f7b57688a02575e32e0c Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Tue, 4 Aug 2026 14:44:52 -0500 Subject: [PATCH 18/23] fix(namespace): dont collide with other unfunded in the same jupyter-pods namespace --- .../values/values.yaml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 79a1f2029..cfa17786c 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -1,5 +1,5 @@ ambassador: - jupyterNamespace: jupyter-pods + jupyterNamespace: jupyter-pods-covid19prod-helm arborist: replicaCount: 2 enabled: true @@ -515,7 +515,7 @@ hatchery: hatchery: json: |- { - "user-namespace": "jupyter-pods", + "user-namespace": "jupyter-pods-covid19prod-helm", "sub-dir": "/lw-workspace", "user-volume-size": "10Gi", "sidecar": { From 0f126d2acad45d043f914134dc4faa8200730298 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Wed, 5 Aug 2026 14:27:26 -0500 Subject: [PATCH 19/23] cost: reduce all service replicas from 2 to 1 Reduce replicaCount from 2 to 1 for all 17 services: arborist, audit, auspice, aws-sigv4-proxy, dashboard, fence, guppy, hatchery, indexd, manifestservice, metadata, peregrine, portal, revproxy, sheepdog, sower, ssjdispatcher, wts The gen3-helm defaults for all services are replicaCount: 1. Running with single replicas cuts compute costs roughly in half for these workloads. --- .../values/values.yaml | 36 +++++++++---------- 1 file changed, 18 insertions(+), 18 deletions(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index cfa17786c..81fefdf35 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -1,13 +1,13 @@ ambassador: jupyterNamespace: jupyter-pods-covid19prod-helm arborist: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/arborist tag: '2026.08' audit: - replicaCount: 2 + replicaCount: 1 enabled: true externalSecrets: auditG3auto: covid19prod-audit-g3auto @@ -18,13 +18,13 @@ audit: annotations: eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--audit-sqs-receiver auspice: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/gen3-auspice tag: v2.25.gen3.2.15 aws-sigv4-proxy: - replicaCount: 2 + replicaCount: 1 enabled: true esEndpoint: vpc-unfunded-gen3-metadata-2-tf3gyjftzrgm5asaxuvqxxwv2m.us-east-1.es.amazonaws.com externalSecrets: @@ -50,7 +50,7 @@ covid19-notebook-etl: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/covid19-notebook-etl tag: 5.1.6 dashboard: - replicaCount: 2 + replicaCount: 1 dashboardConfig: bucket: dashboard-236714345101-covid19-prod-gen3 prefix: chicagoland.pandemicresponsecommons.org @@ -429,7 +429,7 @@ etl: spark: tag: '2026.08' fence: - replicaCount: 2 + replicaCount: 1 usersync: usersync: true userYamlS3Path: s3://cdis-gen3-users/covid19/user.yaml @@ -487,7 +487,7 @@ global: dbCreate: false revproxyArn: arn:aws:acm:us-east-1:662843554732:certificate/843a0993-4bea-4cf1-87b2-49d7c2d75a80 guppy: - replicaCount: 2 + replicaCount: 1 authFilterField: auth_resource_path configIndex: covid19_array-config enabled: true @@ -507,7 +507,7 @@ guppy: - index: covid19_dataset type: dataset hatchery: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/hatchery @@ -621,7 +621,7 @@ hatchery: ] } indexd: - replicaCount: 2 + replicaCount: 1 defaultPrefix: dg.63D5/ enabled: true externalSecrets: @@ -630,7 +630,7 @@ indexd: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/indexd tag: '2026.08' manifestservice: - replicaCount: 2 + replicaCount: 1 enabled: true externalSecrets: manifestserviceG3auto: covid19prod-manifestservice-g3auto @@ -641,7 +641,7 @@ manifestservice: annotations: eks.amazonaws.com/role-arn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--manifest-service-sa metadata: - replicaCount: 2 + replicaCount: 1 enabled: true esEndpoint: http://elasticsearch:9200 externalSecrets: @@ -652,13 +652,13 @@ metadata: mutatingWebhook: enabled: true peregrine: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/peregrine tag: '2026.08' portal: - replicaCount: 2 + replicaCount: 1 enabled: true resources: requests: @@ -674,7 +674,7 @@ portal: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/data-portal tag: '2026.08' revproxy: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/nginx @@ -683,13 +683,13 @@ revproxy: aws: group: covid19prod sheepdog: - replicaCount: 2 + replicaCount: 1 enabled: true image: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/sheepdog tag: '2026.08' sower: - replicaCount: 2 + replicaCount: 1 enabled: true externalSecrets: createK8sPelicanServiceSecret: true @@ -760,7 +760,7 @@ spark: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/gen3-spark tag: '2026.05' ssjdispatcher: - replicaCount: 2 + replicaCount: 1 enabled: true externalSecrets: credsFile: covid19prod-ssjdispatcher-creds @@ -774,7 +774,7 @@ tube: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/tube tag: '2026.05' wts: - replicaCount: 2 + replicaCount: 1 enabled: true externalSecrets: createWtsOidcClientSecret: false From ee9e16209960d33dd076bec35851215a3cf4faaf Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Wed, 5 Aug 2026 14:27:34 -0500 Subject: [PATCH 20/23] cost: disable pod disruption budgets (pdb) Set global.pdb to false. PDBs only apply when replicaCount > 1, and with single-replica deployments they serve no purpose. This avoids unnecessary resource reservations during node maintenance. --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 81fefdf35..4aa6f0c7f 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -450,7 +450,7 @@ fluentd: repository: fluent/fluentd-kubernetes-daemonset tag: v1.15.3-debian-cloudwatch-1.0 global: - pdb: true + pdb: false aws: awsEsProxyRoleArn: arn:aws:iam::662843554732:role/unfunded--covid19prod-helm--es-access enabled: true From cbe46c74762dded6fb481459153fffa8078a5d33 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Fri, 7 Aug 2026 11:11:00 -0500 Subject: [PATCH 21/23] feat(external): use external secrets for mapbox --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 1 + 1 file changed, 1 insertion(+) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 4aa6f0c7f..a2f758ab8 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -472,6 +472,7 @@ global: deploy: true createSlackWebhookSecret: true slackWebhookSecretName: covid19prod-slack-webhook + mapBoxTokenSecretName: covid19prod-mapbox-token hostname: chicagoland.pandemicresponsecommons.org fenceURL: https://chicagoland.pandemicresponsecommons.org/user publicDataSets: true From e34cfb7b6c4396aa7fcf779a472fb0239cde6932 Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 13 Aug 2026 12:44:36 -0500 Subject: [PATCH 22/23] fix(cap): ooof mapbox not mapBox --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index a2f758ab8..64459f90e 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -472,7 +472,7 @@ global: deploy: true createSlackWebhookSecret: true slackWebhookSecretName: covid19prod-slack-webhook - mapBoxTokenSecretName: covid19prod-mapbox-token + mapboxTokenSecretName: covid19prod-mapbox-token hostname: chicagoland.pandemicresponsecommons.org fenceURL: https://chicagoland.pandemicresponsecommons.org/user publicDataSets: true From 6c8d1a4ab9df128a032b31efc6551b921b0c3f6f Mon Sep 17 00:00:00 2001 From: Justin Barnowski Date: Thu, 13 Aug 2026 16:45:54 -0500 Subject: [PATCH 23/23] fix(hosthack): remove mutatingwebhook that injects hostnames its time to swap it over --- .../chicagoland.pandemicresponsecommons.org/values/values.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml index 64459f90e..0c806800c 100644 --- a/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml +++ b/unfunded/chicagoland.pandemicresponsecommons.org/values/values.yaml @@ -651,7 +651,7 @@ metadata: repository: 707767160287.dkr.ecr.us-east-1.amazonaws.com/gen3/metadata-service tag: '2026.08' mutatingWebhook: - enabled: true + enabled: false peregrine: replicaCount: 1 enabled: true