-
9d7b10730d
chore: upgrade customer tvs to chart 0.1.100
main
lunarfront-manager
2026-04-05 20:38:44 +00:00
-
32e391a47f
chore: upgrade customer tvs to chart 0.1.98
lunarfront-manager
2026-04-05 20:05:48 +00:00
-
188dced6a2
chore: upgrade customer tvs to chart 0.1.94
lunarfront-manager
2026-04-05 19:46:29 +00:00
-
81a4f4fb35
chore: upgrade customer tvs to chart 0.1.91
lunarfront-manager
2026-04-05 17:21:12 +00:00
-
b32d6b70c4
chore: upgrade customer tvs to chart 0.1.87
lunarfront-manager
2026-04-05 16:50:59 +00:00
-
22455e6b76
chore: upgrade customer tvs to chart 0.1.86
lunarfront-manager
2026-04-05 16:39:52 +00:00
-
0aa390fd14
chore: upgrade customer tvs to chart 0.1.78
lunarfront-manager
2026-04-05 16:00:27 +00:00
-
eeac6ecc2b
chore: upgrade customer tvs to chart 0.1.77
lunarfront-manager
2026-04-05 15:53:19 +00:00
-
2075f25f44
fix: add patch verb to manager ArgoCD role for chart upgrades
Ryan Moon
2026-04-05 10:44:45 -05:00
-
c0b2d0a837
fix: align deployment env vars with lunarfront-secrets; add email + encryption env vars
Ryan Moon
2026-04-05 10:28:01 -05:00
-
16331d0dc6
chore: deprovision customer test
lunarfront-manager
2026-04-05 14:39:53 +00:00
-
467acbacd7
feat: provision customer tvs
lunarfront-manager
2026-04-05 14:39:32 +00:00
-
7d859ab6d2
fix: add secrets read/patch to manager dev role for SSH key management
Ryan Moon
2026-04-05 09:36:49 -05:00
-
a677d9c366
fix: add dev namespace role for manager to manage dev pod deployment
Ryan Moon
2026-04-05 09:28:39 -05:00
-
25238ca677
fix: pin manager to 0.12.2, switch image updater to semver tracking
Ryan Moon
2026-04-04 19:18:46 -05:00
-
1ba2f9259b
fix: remove OAuth env vars, auth handled by Cloudflare Access
Ryan Moon
2026-04-04 09:10:45 -05:00
-
4686fb558e
fix: track devpod versioned tags for reliable image updates
Ryan Moon
2026-04-04 09:04:53 -05:00
-
ff19e89d73
fix: set imagePullPolicy Always for devpod to always pull latest
Ryan Moon
2026-04-04 09:02:03 -05:00
-
e8b2115aae
fix: ignore replica diff so dev pod scale is not reverted by ArgoCD
Ryan Moon
2026-04-04 08:49:45 -05:00
-
3fe7985577
fix: mount PVC at /root so home dir persists
Ryan Moon
2026-04-04 08:43:27 -05:00
-
70466b447d
fix: use manager repo with devpod-latest tag for dev pod image
Ryan Moon
2026-04-04 08:36:05 -05:00
-
0a0237d58f
feat: add dev pod chart — code-server + SSH on dedicated node pool
Ryan Moon
2026-04-04 06:56:56 -05:00
-
9658e3126c
chore: deprovision customer music
lunarfront-manager
2026-04-04 03:03:48 +00:00
-
d02dbc2448
chore: upgrade all customers to chart 0.1.28
lunarfront-manager
2026-04-04 02:54:19 +00:00
-
7313af0671
chore: upgrade all customers to chart 0.1.27
lunarfront-manager
2026-04-04 02:48:21 +00:00
-
c82ddf4b24
chore: upgrade all customers to chart 0.1.25
lunarfront-manager
2026-04-04 02:45:08 +00:00
-
6c233ae518
chore: upgrade customer music to chart 0.1.1
lunarfront-manager
2026-04-04 02:31:52 +00:00
-
c514466716
fix: pin music and test to chart 0.0.29
Ryan Moon
2026-04-03 21:20:37 -05:00
-
edfbdaf3a0
feat: provision customer test
lunarfront-manager
2026-04-04 01:49:08 +00:00
-
bf4f867420
feat: provision customer music
lunarfront-manager
2026-04-04 01:45:20 +00:00
-
12290293a8
chore: deprovision customer music
lunarfront-manager
2026-04-04 01:41:49 +00:00
-
f3ac743d1b
feat: add Cloudflare env vars to manager deployment
Ryan Moon
2026-04-03 20:40:39 -05:00
-
8bb6605260
fix: update music ingress host to lunarfront.tech
Ryan Moon
2026-04-03 20:37:04 -05:00
-
c34f43b883
fix: pin music to chart 0.0.29
Ryan Moon
2026-04-03 20:35:49 -05:00
-
68afe929bb
feat: provision customer music
lunarfront-manager
2026-04-04 01:26:11 +00:00
-
7aff9f31ec
feat: add SPACES_KEY and SPACES_SECRET to manager deployment
Ryan Moon
2026-04-03 20:22:00 -05:00
-
54e726c7cc
chore: deprovision customer music
lunarfront-manager
2026-04-04 01:18:12 +00:00
-
d9292aeab8
feat: add pods list permission to manager ClusterRole
Ryan Moon
2026-04-03 20:07:26 -05:00
-
986c30a694
feat: add MANAGED_VALKEY_URL env var to manager deployment
Ryan Moon
2026-04-03 19:48:27 -05:00
-
aa58dbcc17
fix: use semver constraint for music customer chart revision
Ryan Moon
2026-04-03 19:43:13 -05:00
-
e74c05e423
feat: provision customer music
lunarfront-manager
2026-04-04 00:39:29 +00:00
-
d0cb06c9df
feat: add ClusterRole for customer provisioning, register DOCR helm repo, remove stale test customer
Ryan Moon
2026-04-03 18:53:11 -05:00
-
ea926e1972
feat: add App of Apps to auto-deploy customers from customers/ dir
Ryan Moon
2026-04-03 18:41:28 -05:00
-
655146d6b8
feat: provision customer test
lunarfront-manager
2026-04-03 23:37:46 +00:00
-
6ff42ebe88
chore: deprovision customer test
lunarfront-manager
2026-04-03 23:33:05 +00:00
-
4635853af6
feat: provision customer test
lunarfront-manager
2026-04-03 23:14:23 +00:00
-
3191f697b5
feat: add kustomization for image updater support
Ryan Moon
2026-04-03 15:33:25 -05:00
-
8badd440ed
feat: use ArgoCD Image Updater for manager auto-deploy
Ryan Moon
2026-04-03 15:31:45 -05:00
-
2b59d7733f
chore: update manager image to v0.2.1
lunarfront-bot
2026-04-03 20:28:37 +00:00
-
26170018e7
chore: pin manager image tag for auto-update
Ryan Moon
2026-04-03 15:27:19 -05:00
-
e5d7bf35b9
fix: update manager image path to match DOCR repo
Ryan Moon
2026-04-03 15:22:11 -05:00
-
7c590daa75
fix: remove nginx IP whitelist, access controlled by Cloudflare and JWT
Ryan Moon
2026-04-03 15:07:20 -05:00
-
0680d89474
feat: pull manager image from DOCR
Ryan Moon
2026-04-03 08:40:19 -05:00
-
8d53a603b0
fix: run haproxy as root to bind port 443
Ryan Moon
2026-04-03 08:04:10 -05:00
-
46fda1f393
fix: add NET_BIND_SERVICE capability to haproxy for port 443
Ryan Moon
2026-04-03 08:02:14 -05:00
-
0d18d36d18
fix: increase haproxy memory limit to 128Mi
Ryan Moon
2026-04-03 08:01:16 -05:00
-
0737bf0e69
fix: add haproxy sidecar to prepend PROXY protocol for registry pushes
Ryan Moon
2026-04-03 07:59:25 -05:00
-
78e2a36859
feat: add JWT_SECRET env var to manager deployment
Ryan Moon
2026-04-03 07:41:40 -05:00
-
56cb7ce6dc
fix: auto-register runner if .runner file missing, store state in /data
Ryan Moon
2026-04-03 07:32:18 -05:00
-
a6926c4b04
fix: use nc TCP check for dind readiness instead of docker info
Ryan Moon
2026-04-03 07:30:01 -05:00
-
f82fc1252c
fix: move dind wait into runner container command to fix init deadlock
Ryan Moon
2026-04-03 07:23:43 -05:00
-
a7facce892
fix: use Recreate strategy for single-replica RWO PVC workloads (gitea, runner)
Ryan Moon
2026-04-03 07:17:49 -05:00
-
2af2ceb91c
feat: pin all system workloads to system node pool
Ryan Moon
2026-04-03 07:12:15 -05:00
-
c82a533c61
feat: add manager db to pgbouncer
Ryan Moon
2026-04-03 06:51:55 -05:00
-
899dc7980f
feat: add manager deployment manifests
Ryan Moon
2026-04-03 06:49:58 -05:00
-
bda73afa18
fix: add hostAliases for git.lunarfront.tech so dind can reach registry via nginx
Ryan Moon
2026-04-03 06:48:35 -05:00
-
705dab6e49
fix: add init container to wait for dind before starting runner
Ryan Moon
2026-04-03 06:37:57 -05:00
-
fd5be2805f
fix: use internal Gitea service URL to avoid LB hairpin on gRPC
Ryan Moon
2026-04-03 06:36:39 -05:00
-
285ae3665c
fix: route runner to nginx ClusterIP to avoid DO LB hairpin
Ryan Moon
2026-04-03 06:33:08 -05:00
-
87c0ed0931
chore: remove windmill pgbouncer config and values
Ryan Moon
2026-04-03 06:16:21 -05:00
-
9f3abebf32
chore: remove windmill
Ryan Moon
2026-04-03 06:15:15 -05:00
-
07899caa9c
fix: increase windmill pool size to 10 to prevent query_wait_timeout
Ryan Moon
2026-04-03 06:13:37 -05:00
-
b0037459ee
fix: use session pooling for windmill (prepared statements incompatible with transaction mode)
Ryan Moon
2026-04-02 22:29:58 -05:00
-
1cd7e9a818
fix: use session pooling for gitea (prepared statements incompatible with transaction mode)
Ryan Moon
2026-04-02 22:27:46 -05:00
-
969948691f
fix: reduce pool size to 3, add server_reset_query for transaction mode
Ryan Moon
2026-04-02 22:26:17 -05:00
-
9858867bae
fix: disable SSL for gitea→pgbouncer connection (pgbouncer handles TLS to DO)
Ryan Moon
2026-04-02 22:21:10 -05:00
-
964ddad2d0
feat: switch gitea+windmill to shared pgbouncer, disable windmill's built-in
Ryan Moon
2026-04-02 22:19:17 -05:00
-
1ba206283e
fix: use correct pgbouncer binary path /opt/pgbouncer/pgbouncer
Ryan Moon
2026-04-02 22:17:28 -05:00
-
e85afcbe7a
fix: override pgbouncer entrypoint to use config file directly
Ryan Moon
2026-04-02 22:16:21 -05:00
-
46c78cc11f
fix: use pgbouncer/pgbouncer:latest image tag
Ryan Moon
2026-04-02 22:14:41 -05:00
-
54591c43ef
feat: add shared PgBouncer deployment
Ryan Moon
2026-04-02 22:13:34 -05:00
-
ed98974c91
fix: enable PgBouncer to manage Postgres connection pool
Ryan Moon
2026-04-02 22:00:58 -05:00
-
ba667b9edd
fix: use baseDomain/baseProtocol instead of baseUrl for Windmill ingress
Ryan Moon
2026-04-02 22:00:10 -05:00
-
951b9c15a7
fix: remove manual hosts from ingress, let chart derive from baseUrl
Ryan Moon
2026-04-02 21:58:25 -05:00
-
683f01213a
fix: set 1 replica per worker group, lower resource requests
Ryan Moon
2026-04-02 21:56:16 -05:00
-
68ad0a744f
fix: reduce Windmill worker resource requests
Ryan Moon
2026-04-02 21:52:12 -05:00
-
67def0a249
fix: correct Windmill helm chart repo URL
Ryan Moon
2026-04-02 21:42:22 -05:00
-
e3fe6bac3e
feat: add Windmill deployment
Ryan Moon
2026-04-02 21:39:54 -05:00
-
6d73a50065
feat: add cert-manager-config ArgoCD app
Ryan Moon
2026-04-02 21:32:45 -05:00
-
4963f26cfc
fix: use DNS-01 Cloudflare solver for cert-manager
Ryan Moon
2026-04-02 21:30:11 -05:00
-
2c2f18bb25
feat: switch to Let's Encrypt cert via cert-manager
Ryan Moon
2026-04-02 21:24:10 -05:00
-
e91187cb89
fix: revert to HTTPS for runner, removed git from WAF
Ryan Moon
2026-04-02 21:11:44 -05:00
-
c385c80cf3
fix: enable Gitea Actions explicitly in config
Ryan Moon
2026-04-02 21:02:41 -05:00
-
f7a92e1237
fix: use internal cluster URL for runner to bypass Cloudflare WAF
Ryan Moon
2026-04-02 20:56:47 -05:00
-
da841f37e9
fix: use SSH URL for ArgoCD app sources to match deploy key credential
Ryan Moon
2026-04-02 20:49:59 -05:00
-
d3e1b398c6
feat: rename git2/registry to git.lunarfront.tech
Ryan Moon
2026-04-02 20:43:00 -05:00
-
73f77b2f9a
fix: remove nginx body size limit for container registry pushes
Ryan Moon
2026-04-02 20:30:35 -05:00
-
a938a3dcea
fix: add PVC for runner state to persist registration across restarts
Ryan Moon
2026-04-02 19:57:07 -05:00
-
07dbdb5f39
fix: revert to plain act_runner:latest, let dind sidecar handle docker
Ryan Moon
2026-04-02 19:20:50 -05:00
-
17e0ffacea
fix: use catthehacker docker images for runner labels (host mode lacks node)
Ryan Moon
2026-04-02 19:18:40 -05:00