Ryan Moon
|
2af2ceb91c
|
feat: pin all system workloads to system node pool
|
2026-04-03 07:12:15 -05:00 |
|
Ryan Moon
|
c82a533c61
|
feat: add manager db to pgbouncer
|
2026-04-03 06:51:55 -05:00 |
|
Ryan Moon
|
899dc7980f
|
feat: add manager deployment manifests
|
2026-04-03 06:49:58 -05:00 |
|
Ryan Moon
|
bda73afa18
|
fix: add hostAliases for git.lunarfront.tech so dind can reach registry via nginx
|
2026-04-03 06:48:35 -05:00 |
|
Ryan Moon
|
705dab6e49
|
fix: add init container to wait for dind before starting runner
|
2026-04-03 06:37:57 -05:00 |
|
Ryan Moon
|
fd5be2805f
|
fix: use internal Gitea service URL to avoid LB hairpin on gRPC
|
2026-04-03 06:36:39 -05:00 |
|
Ryan Moon
|
285ae3665c
|
fix: route runner to nginx ClusterIP to avoid DO LB hairpin
|
2026-04-03 06:33:08 -05:00 |
|
Ryan Moon
|
87c0ed0931
|
chore: remove windmill pgbouncer config and values
|
2026-04-03 06:16:21 -05:00 |
|
Ryan Moon
|
9f3abebf32
|
chore: remove windmill
|
2026-04-03 06:15:15 -05:00 |
|
Ryan Moon
|
07899caa9c
|
fix: increase windmill pool size to 10 to prevent query_wait_timeout
|
2026-04-03 06:13:37 -05:00 |
|
Ryan Moon
|
b0037459ee
|
fix: use session pooling for windmill (prepared statements incompatible with transaction mode)
|
2026-04-02 22:29:58 -05:00 |
|
Ryan Moon
|
1cd7e9a818
|
fix: use session pooling for gitea (prepared statements incompatible with transaction mode)
|
2026-04-02 22:27:46 -05:00 |
|
Ryan Moon
|
969948691f
|
fix: reduce pool size to 3, add server_reset_query for transaction mode
|
2026-04-02 22:26:17 -05:00 |
|
Ryan Moon
|
9858867bae
|
fix: disable SSL for gitea→pgbouncer connection (pgbouncer handles TLS to DO)
|
2026-04-02 22:21:10 -05:00 |
|
Ryan Moon
|
964ddad2d0
|
feat: switch gitea+windmill to shared pgbouncer, disable windmill's built-in
|
2026-04-02 22:19:17 -05:00 |
|
Ryan Moon
|
1ba206283e
|
fix: use correct pgbouncer binary path /opt/pgbouncer/pgbouncer
|
2026-04-02 22:17:28 -05:00 |
|
Ryan Moon
|
e85afcbe7a
|
fix: override pgbouncer entrypoint to use config file directly
|
2026-04-02 22:16:21 -05:00 |
|
Ryan Moon
|
46c78cc11f
|
fix: use pgbouncer/pgbouncer:latest image tag
|
2026-04-02 22:14:41 -05:00 |
|
Ryan Moon
|
54591c43ef
|
feat: add shared PgBouncer deployment
|
2026-04-02 22:13:34 -05:00 |
|
Ryan Moon
|
ed98974c91
|
fix: enable PgBouncer to manage Postgres connection pool
|
2026-04-02 22:00:58 -05:00 |
|
Ryan Moon
|
ba667b9edd
|
fix: use baseDomain/baseProtocol instead of baseUrl for Windmill ingress
|
2026-04-02 22:00:10 -05:00 |
|
Ryan Moon
|
951b9c15a7
|
fix: remove manual hosts from ingress, let chart derive from baseUrl
|
2026-04-02 21:58:25 -05:00 |
|
Ryan Moon
|
683f01213a
|
fix: set 1 replica per worker group, lower resource requests
|
2026-04-02 21:56:16 -05:00 |
|
Ryan Moon
|
68ad0a744f
|
fix: reduce Windmill worker resource requests
|
2026-04-02 21:52:12 -05:00 |
|
Ryan Moon
|
67def0a249
|
fix: correct Windmill helm chart repo URL
|
2026-04-02 21:42:22 -05:00 |
|
Ryan Moon
|
e3fe6bac3e
|
feat: add Windmill deployment
|
2026-04-02 21:39:54 -05:00 |
|
Ryan Moon
|
6d73a50065
|
feat: add cert-manager-config ArgoCD app
|
2026-04-02 21:32:45 -05:00 |
|
Ryan Moon
|
4963f26cfc
|
fix: use DNS-01 Cloudflare solver for cert-manager
|
2026-04-02 21:30:11 -05:00 |
|
Ryan Moon
|
2c2f18bb25
|
feat: switch to Let's Encrypt cert via cert-manager
|
2026-04-02 21:24:10 -05:00 |
|
Ryan Moon
|
e91187cb89
|
fix: revert to HTTPS for runner, removed git from WAF
|
2026-04-02 21:11:44 -05:00 |
|
Ryan Moon
|
c385c80cf3
|
fix: enable Gitea Actions explicitly in config
|
2026-04-02 21:02:41 -05:00 |
|
Ryan Moon
|
f7a92e1237
|
fix: use internal cluster URL for runner to bypass Cloudflare WAF
|
2026-04-02 20:56:47 -05:00 |
|
Ryan Moon
|
da841f37e9
|
fix: use SSH URL for ArgoCD app sources to match deploy key credential
|
2026-04-02 20:49:59 -05:00 |
|
Ryan Moon
|
d3e1b398c6
|
feat: rename git2/registry to git.lunarfront.tech
|
2026-04-02 20:43:00 -05:00 |
|
Ryan Moon
|
73f77b2f9a
|
fix: remove nginx body size limit for container registry pushes
|
2026-04-02 20:30:35 -05:00 |
|
Ryan Moon
|
a938a3dcea
|
fix: add PVC for runner state to persist registration across restarts
|
2026-04-02 19:57:07 -05:00 |
|
Ryan Moon
|
07dbdb5f39
|
fix: revert to plain act_runner:latest, let dind sidecar handle docker
|
2026-04-02 19:20:50 -05:00 |
|
Ryan Moon
|
17e0ffacea
|
fix: use catthehacker docker images for runner labels (host mode lacks node)
|
2026-04-02 19:18:40 -05:00 |
|
Ryan Moon
|
2614b7adcf
|
fix: use dind-rootless runner image for docker socket access
|
2026-04-02 19:16:54 -05:00 |
|
Ryan Moon
|
7ca7dacdaf
|
fix: run CI jobs on host to avoid nested Docker container issues
|
2026-04-02 19:06:42 -05:00 |
|
Ryan Moon
|
9c209ee88b
|
fix: add runner config to pass docker_host to job containers
|
2026-04-02 19:04:15 -05:00 |
|
Ryan Moon
|
48961e4af8
|
fix: set Gitea SSH service to ClusterIP with explicit clusterIP: None
|
2026-04-02 18:40:12 -05:00 |
|
Ryan Moon
|
644e5240b4
|
fix: update ArgoCD apps to use HTTPS URL for lunarfront-charts
|
2026-04-02 18:37:03 -05:00 |
|
Ryan Moon
|
f7786f3e19
|
fix: route Gitea SSH through nginx ingress LB instead of separate LoadBalancer
|
2026-04-02 18:34:29 -05:00 |
|
Ryan Moon
|
3a27ccfe8d
|
feat: add external-dns service source and git2-ssh hostname annotation
|
2026-04-02 18:32:17 -05:00 |
|
Ryan Moon
|
c917cedbbb
|
fix: pin Gitea chart to version 12.5.0
|
2026-04-02 18:27:17 -05:00 |
|
Ryan Moon
|
34779b4f29
|
feat: add ArgoCD Application for gitea runner
|
2026-04-02 18:25:57 -05:00 |
|
Ryan Moon
|
89e5437876
|
feat: add Gitea runner deployment with dind and resource limits
|
2026-04-02 18:24:10 -05:00 |
|
Ryan Moon
|
6876f62eac
|
fix: ignore PVC label diff in ArgoCD sync
|
2026-04-02 18:13:32 -05:00 |
|
Ryan Moon
|
01cf18ac55
|
feat: add ArgoCD Application for Gitea
|
2026-04-02 18:10:28 -05:00 |
|