ryan
0 Followers · 0 Following
  • Joined on 2026-04-02
Repositories
4
 Projects Packages Public Activity Starred Repositories
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 20:07:22 +00:00
7c590daa75 fix: remove nginx IP whitelist, access controlled by Cloudflare and JWT
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 13:40:21 +00:00
0680d89474 feat: pull manager image from DOCR
ryan pushed to main at ryan/lunarfront-manager 2026-04-03 13:40:12 +00:00
2264ecc2f6 feat: push to DOCR instead of Gitea registry
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 13:04:13 +00:00
8d53a603b0 fix: run haproxy as root to bind port 443
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 13:02:16 +00:00
46fda1f393 fix: add NET_BIND_SERVICE capability to haproxy for port 443
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 13:01:19 +00:00
0d18d36d18 fix: increase haproxy memory limit to 128Mi
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:59:27 +00:00
0737bf0e69 fix: add haproxy sidecar to prepend PROXY protocol for registry pushes
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:41:48 +00:00
78e2a36859 feat: add JWT_SECRET env var to manager deployment
ryan pushed to main at ryan/lunarfront-manager 2026-04-03 12:41:47 +00:00
4bd1918e3b feat: add JWT auth with db-backed users
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:32:20 +00:00
56cb7ce6dc fix: auto-register runner if .runner file missing, store state in /data
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:30:06 +00:00
a6926c4b04 fix: use nc TCP check for dind readiness instead of docker info
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:23:45 +00:00
f82fc1252c fix: move dind wait into runner container command to fix init deadlock
ryan pushed to main at ryan/lunarfront-infra 2026-04-03 12:20:58 +00:00
911bc3eb76 fix: ignore default node_pool in cluster lifecycle to prevent recreation
ryan pushed to main at ryan/lunarfront-infra 2026-04-03 12:20:03 +00:00
35b78f672c feat: add system and customer node pools, scale default workers to 0
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:17:52 +00:00
a7facce892 fix: use Recreate strategy for single-replica RWO PVC workloads (gitea, runner)
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 12:13:26 +00:00
2af2ceb91c feat: pin all system workloads to system node pool
ryan pushed to main at ryan/lunarfront-manager 2026-04-03 11:52:17 +00:00
8dbfb5810f fix: add /health endpoint for k8s probes
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 11:51:57 +00:00
c82a533c61 feat: add manager db to pgbouncer
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 11:50:00 +00:00
899dc7980f feat: add manager deployment manifests
ryan pushed to main at ryan/lunarfront-charts 2026-04-03 11:48:39 +00:00
bda73afa18 fix: add hostAliases for git.lunarfront.tech so dind can reach registry via nginx