Commit Graph

  • 9d7b10730d chore: upgrade customer tvs to chart 0.1.100 main lunarfront-manager 2026-04-05 20:38:44 +00:00
  • 32e391a47f chore: upgrade customer tvs to chart 0.1.98 lunarfront-manager 2026-04-05 20:05:48 +00:00
  • 188dced6a2 chore: upgrade customer tvs to chart 0.1.94 lunarfront-manager 2026-04-05 19:46:29 +00:00
  • 81a4f4fb35 chore: upgrade customer tvs to chart 0.1.91 lunarfront-manager 2026-04-05 17:21:12 +00:00
  • b32d6b70c4 chore: upgrade customer tvs to chart 0.1.87 lunarfront-manager 2026-04-05 16:50:59 +00:00
  • 22455e6b76 chore: upgrade customer tvs to chart 0.1.86 lunarfront-manager 2026-04-05 16:39:52 +00:00
  • 0aa390fd14 chore: upgrade customer tvs to chart 0.1.78 lunarfront-manager 2026-04-05 16:00:27 +00:00
  • eeac6ecc2b chore: upgrade customer tvs to chart 0.1.77 lunarfront-manager 2026-04-05 15:53:19 +00:00
  • 2075f25f44 fix: add patch verb to manager ArgoCD role for chart upgrades Ryan Moon 2026-04-05 10:44:45 -05:00
  • c0b2d0a837 fix: align deployment env vars with lunarfront-secrets; add email + encryption env vars Ryan Moon 2026-04-05 10:28:01 -05:00
  • 16331d0dc6 chore: deprovision customer test lunarfront-manager 2026-04-05 14:39:53 +00:00
  • 467acbacd7 feat: provision customer tvs lunarfront-manager 2026-04-05 14:39:32 +00:00
  • 7d859ab6d2 fix: add secrets read/patch to manager dev role for SSH key management Ryan Moon 2026-04-05 09:36:49 -05:00
  • a677d9c366 fix: add dev namespace role for manager to manage dev pod deployment Ryan Moon 2026-04-05 09:28:39 -05:00
  • 25238ca677 fix: pin manager to 0.12.2, switch image updater to semver tracking Ryan Moon 2026-04-04 19:18:46 -05:00
  • 1ba2f9259b fix: remove OAuth env vars, auth handled by Cloudflare Access Ryan Moon 2026-04-04 09:10:45 -05:00
  • 4686fb558e fix: track devpod versioned tags for reliable image updates Ryan Moon 2026-04-04 09:04:53 -05:00
  • ff19e89d73 fix: set imagePullPolicy Always for devpod to always pull latest Ryan Moon 2026-04-04 09:02:03 -05:00
  • e8b2115aae fix: ignore replica diff so dev pod scale is not reverted by ArgoCD Ryan Moon 2026-04-04 08:49:45 -05:00
  • 3fe7985577 fix: mount PVC at /root so home dir persists Ryan Moon 2026-04-04 08:43:27 -05:00
  • 70466b447d fix: use manager repo with devpod-latest tag for dev pod image Ryan Moon 2026-04-04 08:36:05 -05:00
  • 0a0237d58f feat: add dev pod chart — code-server + SSH on dedicated node pool Ryan Moon 2026-04-04 06:56:56 -05:00
  • 9658e3126c chore: deprovision customer music lunarfront-manager 2026-04-04 03:03:48 +00:00
  • d02dbc2448 chore: upgrade all customers to chart 0.1.28 lunarfront-manager 2026-04-04 02:54:19 +00:00
  • 7313af0671 chore: upgrade all customers to chart 0.1.27 lunarfront-manager 2026-04-04 02:48:21 +00:00
  • c82ddf4b24 chore: upgrade all customers to chart 0.1.25 lunarfront-manager 2026-04-04 02:45:08 +00:00
  • 6c233ae518 chore: upgrade customer music to chart 0.1.1 lunarfront-manager 2026-04-04 02:31:52 +00:00
  • c514466716 fix: pin music and test to chart 0.0.29 Ryan Moon 2026-04-03 21:20:37 -05:00
  • edfbdaf3a0 feat: provision customer test lunarfront-manager 2026-04-04 01:49:08 +00:00
  • bf4f867420 feat: provision customer music lunarfront-manager 2026-04-04 01:45:20 +00:00
  • 12290293a8 chore: deprovision customer music lunarfront-manager 2026-04-04 01:41:49 +00:00
  • f3ac743d1b feat: add Cloudflare env vars to manager deployment Ryan Moon 2026-04-03 20:40:39 -05:00
  • 8bb6605260 fix: update music ingress host to lunarfront.tech Ryan Moon 2026-04-03 20:37:04 -05:00
  • c34f43b883 fix: pin music to chart 0.0.29 Ryan Moon 2026-04-03 20:35:49 -05:00
  • 68afe929bb feat: provision customer music lunarfront-manager 2026-04-04 01:26:11 +00:00
  • 7aff9f31ec feat: add SPACES_KEY and SPACES_SECRET to manager deployment Ryan Moon 2026-04-03 20:22:00 -05:00
  • 54e726c7cc chore: deprovision customer music lunarfront-manager 2026-04-04 01:18:12 +00:00
  • d9292aeab8 feat: add pods list permission to manager ClusterRole Ryan Moon 2026-04-03 20:07:26 -05:00
  • 986c30a694 feat: add MANAGED_VALKEY_URL env var to manager deployment Ryan Moon 2026-04-03 19:48:27 -05:00
  • aa58dbcc17 fix: use semver constraint for music customer chart revision Ryan Moon 2026-04-03 19:43:13 -05:00
  • e74c05e423 feat: provision customer music lunarfront-manager 2026-04-04 00:39:29 +00:00
  • d0cb06c9df feat: add ClusterRole for customer provisioning, register DOCR helm repo, remove stale test customer Ryan Moon 2026-04-03 18:53:11 -05:00
  • ea926e1972 feat: add App of Apps to auto-deploy customers from customers/ dir Ryan Moon 2026-04-03 18:41:28 -05:00
  • 655146d6b8 feat: provision customer test lunarfront-manager 2026-04-03 23:37:46 +00:00
  • 6ff42ebe88 chore: deprovision customer test lunarfront-manager 2026-04-03 23:33:05 +00:00
  • 4635853af6 feat: provision customer test lunarfront-manager 2026-04-03 23:14:23 +00:00
  • 3191f697b5 feat: add kustomization for image updater support Ryan Moon 2026-04-03 15:33:25 -05:00
  • 8badd440ed feat: use ArgoCD Image Updater for manager auto-deploy Ryan Moon 2026-04-03 15:31:45 -05:00
  • 2b59d7733f chore: update manager image to v0.2.1 lunarfront-bot 2026-04-03 20:28:37 +00:00
  • 26170018e7 chore: pin manager image tag for auto-update Ryan Moon 2026-04-03 15:27:19 -05:00
  • e5d7bf35b9 fix: update manager image path to match DOCR repo Ryan Moon 2026-04-03 15:22:11 -05:00
  • 7c590daa75 fix: remove nginx IP whitelist, access controlled by Cloudflare and JWT Ryan Moon 2026-04-03 15:07:20 -05:00
  • 0680d89474 feat: pull manager image from DOCR Ryan Moon 2026-04-03 08:40:19 -05:00
  • 8d53a603b0 fix: run haproxy as root to bind port 443 Ryan Moon 2026-04-03 08:04:10 -05:00
  • 46fda1f393 fix: add NET_BIND_SERVICE capability to haproxy for port 443 Ryan Moon 2026-04-03 08:02:14 -05:00
  • 0d18d36d18 fix: increase haproxy memory limit to 128Mi Ryan Moon 2026-04-03 08:01:16 -05:00
  • 0737bf0e69 fix: add haproxy sidecar to prepend PROXY protocol for registry pushes Ryan Moon 2026-04-03 07:59:25 -05:00
  • 78e2a36859 feat: add JWT_SECRET env var to manager deployment Ryan Moon 2026-04-03 07:41:40 -05:00
  • 56cb7ce6dc fix: auto-register runner if .runner file missing, store state in /data Ryan Moon 2026-04-03 07:32:18 -05:00
  • a6926c4b04 fix: use nc TCP check for dind readiness instead of docker info Ryan Moon 2026-04-03 07:30:01 -05:00
  • f82fc1252c fix: move dind wait into runner container command to fix init deadlock Ryan Moon 2026-04-03 07:23:43 -05:00
  • a7facce892 fix: use Recreate strategy for single-replica RWO PVC workloads (gitea, runner) Ryan Moon 2026-04-03 07:17:49 -05:00
  • 2af2ceb91c feat: pin all system workloads to system node pool Ryan Moon 2026-04-03 07:12:15 -05:00
  • c82a533c61 feat: add manager db to pgbouncer Ryan Moon 2026-04-03 06:51:55 -05:00
  • 899dc7980f feat: add manager deployment manifests Ryan Moon 2026-04-03 06:49:58 -05:00
  • bda73afa18 fix: add hostAliases for git.lunarfront.tech so dind can reach registry via nginx Ryan Moon 2026-04-03 06:48:35 -05:00
  • 705dab6e49 fix: add init container to wait for dind before starting runner Ryan Moon 2026-04-03 06:37:57 -05:00
  • fd5be2805f fix: use internal Gitea service URL to avoid LB hairpin on gRPC Ryan Moon 2026-04-03 06:36:39 -05:00
  • 285ae3665c fix: route runner to nginx ClusterIP to avoid DO LB hairpin Ryan Moon 2026-04-03 06:33:08 -05:00
  • 87c0ed0931 chore: remove windmill pgbouncer config and values Ryan Moon 2026-04-03 06:16:21 -05:00
  • 9f3abebf32 chore: remove windmill Ryan Moon 2026-04-03 06:15:15 -05:00
  • 07899caa9c fix: increase windmill pool size to 10 to prevent query_wait_timeout Ryan Moon 2026-04-03 06:13:37 -05:00
  • b0037459ee fix: use session pooling for windmill (prepared statements incompatible with transaction mode) Ryan Moon 2026-04-02 22:29:58 -05:00
  • 1cd7e9a818 fix: use session pooling for gitea (prepared statements incompatible with transaction mode) Ryan Moon 2026-04-02 22:27:46 -05:00
  • 969948691f fix: reduce pool size to 3, add server_reset_query for transaction mode Ryan Moon 2026-04-02 22:26:17 -05:00
  • 9858867bae fix: disable SSL for gitea→pgbouncer connection (pgbouncer handles TLS to DO) Ryan Moon 2026-04-02 22:21:10 -05:00
  • 964ddad2d0 feat: switch gitea+windmill to shared pgbouncer, disable windmill's built-in Ryan Moon 2026-04-02 22:19:17 -05:00
  • 1ba206283e fix: use correct pgbouncer binary path /opt/pgbouncer/pgbouncer Ryan Moon 2026-04-02 22:17:28 -05:00
  • e85afcbe7a fix: override pgbouncer entrypoint to use config file directly Ryan Moon 2026-04-02 22:16:21 -05:00
  • 46c78cc11f fix: use pgbouncer/pgbouncer:latest image tag Ryan Moon 2026-04-02 22:14:41 -05:00
  • 54591c43ef feat: add shared PgBouncer deployment Ryan Moon 2026-04-02 22:13:34 -05:00
  • ed98974c91 fix: enable PgBouncer to manage Postgres connection pool Ryan Moon 2026-04-02 22:00:58 -05:00
  • ba667b9edd fix: use baseDomain/baseProtocol instead of baseUrl for Windmill ingress Ryan Moon 2026-04-02 22:00:10 -05:00
  • 951b9c15a7 fix: remove manual hosts from ingress, let chart derive from baseUrl Ryan Moon 2026-04-02 21:58:25 -05:00
  • 683f01213a fix: set 1 replica per worker group, lower resource requests Ryan Moon 2026-04-02 21:56:16 -05:00
  • 68ad0a744f fix: reduce Windmill worker resource requests Ryan Moon 2026-04-02 21:52:12 -05:00
  • 67def0a249 fix: correct Windmill helm chart repo URL Ryan Moon 2026-04-02 21:42:22 -05:00
  • e3fe6bac3e feat: add Windmill deployment Ryan Moon 2026-04-02 21:39:54 -05:00
  • 6d73a50065 feat: add cert-manager-config ArgoCD app Ryan Moon 2026-04-02 21:32:45 -05:00
  • 4963f26cfc fix: use DNS-01 Cloudflare solver for cert-manager Ryan Moon 2026-04-02 21:30:11 -05:00
  • 2c2f18bb25 feat: switch to Let's Encrypt cert via cert-manager Ryan Moon 2026-04-02 21:24:10 -05:00
  • e91187cb89 fix: revert to HTTPS for runner, removed git from WAF Ryan Moon 2026-04-02 21:11:44 -05:00
  • c385c80cf3 fix: enable Gitea Actions explicitly in config Ryan Moon 2026-04-02 21:02:41 -05:00
  • f7a92e1237 fix: use internal cluster URL for runner to bypass Cloudflare WAF Ryan Moon 2026-04-02 20:56:47 -05:00
  • da841f37e9 fix: use SSH URL for ArgoCD app sources to match deploy key credential Ryan Moon 2026-04-02 20:49:59 -05:00
  • d3e1b398c6 feat: rename git2/registry to git.lunarfront.tech Ryan Moon 2026-04-02 20:43:00 -05:00
  • 73f77b2f9a fix: remove nginx body size limit for container registry pushes Ryan Moon 2026-04-02 20:30:35 -05:00
  • a938a3dcea fix: add PVC for runner state to persist registration across restarts Ryan Moon 2026-04-02 19:57:07 -05:00
  • 07dbdb5f39 fix: revert to plain act_runner:latest, let dind sidecar handle docker Ryan Moon 2026-04-02 19:20:50 -05:00
  • 17e0ffacea fix: use catthehacker docker images for runner labels (host mode lacks node) Ryan Moon 2026-04-02 19:18:40 -05:00