Commit Graph

15 Commits

Author SHA1 Message Date
f49be83f7e Enable Forgejo Actions and Recreate deployment strategy
Actions are required for CI runners. Recreate avoids leveldb queue lock
contention on the shared PVC during Helm upgrades.
2026-07-03 21:44:57 +02:00
75698636c6 Deploy Forgejo on railiance01 using gitea-charts/gitea 12.5.0
Pin chart to 12.5.0 because 12.6+ calls `gitea config edit-ini`, which
Forgejo 11 lacks. Ingress targets forgejo-gitea-http (Helm release naming).
Smoke test uses GET for /v2/ registry challenge (HEAD returns 405).
2026-07-03 21:28:37 +02:00
c7d49d3102 Handle app deployment guardrail suggestions 2026-06-15 22:07:03 +02:00
b859530fcf Add reuse service landing page 2026-06-15 15:40:57 +02:00
4c8a12a8a0 Bump reuse-surface image to cb7a6e4 (schema packaging fix) 2026-06-15 10:13:52 +02:00
083e242230 Fix reuse-surface deploy: disable service links, pin image ae41395 2026-06-15 10:09:30 +02:00
25d6a2484e Rename reuse deployment to coulomb.social conventions
Chart charts/reuse-surface, namespace reuse, host reuse.coulomb.social,
image gitea.coulomb.social/coulomb/reuse-surface, secret reuse-surface-env.
Makefile targets reuse-dry-run/deploy/status/logs.
2026-06-15 09:02:02 +02:00
3dfa75d789 Add RAILIANCE-WP-0007: reuse-surface hub Helm chart on railiance01
Companion to reuse-surface REUSE-WP-0011. Scaffold charts/reuse-surface-hub
with PVC, ingress template, values file, and Makefile deploy targets.
2026-06-15 08:48:16 +02:00
1bd852d177 feat(inter-hub): add Railiance app chart handoff 2026-06-14 16:47:36 +02:00
421c09e902 chore(consistency): sync task status from DB [auto]
Updated by fix-consistency on 2026-06-05:
  - update .custodian-brief.md for railiance-apps
2026-06-05 13:14:50 +02:00
934770cb68 Implement app deployment improvements 2026-05-22 22:25:40 +02:00
962c5a1b36 RAILIANCE-WP-0002 T05+T06 done: vergabe-teilnahme is live at https://vergabe-teilnahme.whywhynot.de
Thin Helm chart in charts/vergabe-teilnahme (Deployment + Service), plain values overlay in helm/vergabe-teilnahme-values.yaml, ingress + cert-manager TLS in manifests/vergabe-teilnahme-ingress.yaml. Makefile targets vergabe-dry-run|deploy|ingress-deploy|status|migrate|seed|superuser|logs. Secrets stay in K8s (vergabe-app-credentials + vergabe-teilnahme-env) — no SOPS needed.

Live: pod Running 1/1, /health/ 200 ok, /ausschreibungen/dashboard/ renders Übersicht, /admin/login/ renders Django admin (German). cert-manager issued vergabe-teilnahme-tls in ~35s.

Workplan T07 (migrate+seed+smoke) marked in_progress; migrate completed inline (10+ apps migrated) so the dashboard would render.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-19 19:46:49 +02:00
8d7f77ac2a Finish Gitea container registry workplan 2026-05-19 01:50:22 +02:00
065d1b02f1 feat(gitea): update Helm values with external DB/cache config and add SOPS policy
Restores the newer local gitea-values.sops.yaml (2026-03-27) over the
upstream scaffold (2026-03-10). Adds database, cache, session, and queue
sections pointing to external PostgreSQL/Valkey (S3 platform services),
and disables bundled postgresql/redis/valkey sub-charts.

Also adds .sops.yaml encryption policy for railiance-apps.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-31 11:52:54 +00:00
89b777bf6c feat(gitea): take ownership of Gitea Helm values (T06)
Receive gitea-values.sops.yaml from railiance-cluster — S5 now
owns the Gitea deployment lifecycle per ADR-003 boundary rules.

Add gitea-deploy and gitea-status Makefile targets. Update
SCOPE.md to reflect boundary violation resolved.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-03-27 13:23:53 +01:00