2025-02-25 - 2026-02-25
Overview
242 Pull requests merged by 1 user
Merged
#244 fix: paas-portal v1.4 — correct status + logs during init
Merged
#243 fix: paas-portal v1.3 — provisioning time text
Merged
#242 fix: Recreate strategy for RWO PVC + cleanup GITEA_ADMIN_TOKEN
Merged
#241 fix: paas-portal v1.2 — remove branch protection toggle
Merged
#240 cleanup: remove tenant-t1 files
Merged
#239 fix: Kyverno egress to Gitea external for registry auth
Merged
#238 fix: update prod env values for paas-portal v1.1
Merged
#237 feat: paas-portal v1.1 with git-deploy pipeline
Merged
#236 fix: ingress-nginx egress port 3000 for Gitea
Merged
#235 feat: expose Gitea externally at git.georgepet.duckdns.org
Merged
#234 chore: remove test tenant-t1
Merged
#233 feat: rename naas-portal to paas-portal
Merged
#232 Add naas-portal Helm chart for K8s deployment
Merged
#231 rbac: extend k8s-audit SA for deep-audit script
Merged
#230 fix: trivy node-collector toleration + argo-rollouts CRD sync
Merged
#229 promote: arch-docs c02fecd to prod
Merged
#228 promote: arch-docs c02fecd to staging
Merged
#227 deploy: arch-docs c02fecd to dev
Merged
#226 feat: add AnalysisTemplate + Feature Flags to web-app chart
Merged
#225 fix: remove ServerSideApply from argo-rollouts
Merged
#224 fix: broaden CRD ignoreDifferences for argo-rollouts sync
Merged
#223 fix: resolve argo-rollouts CRD OutOfSync
Merged
#222 feat: add Argo Rollouts with canary strategy for prod
Merged
#221 promote: arch-docs 03361b1 to prod
Merged
#220 promote: arch-docs 03361b1 to staging
Merged
#219 deploy: arch-docs 03361b1 to dev
Merged
#218 promote: arch-docs 3f2c0b2 to staging
Merged
#217 fix: use pre-installed yamllint from runner-tools
Merged
#216 deploy: arch-docs 3f2c0b2 to dev
Merged
#215 feat: make yamllint and kubeconform strict in CI
Merged
#214 fix: add kubernetes OIDC client to realm config
Merged
#213 root-app: add ignoreDifferences for Application finalizers
Merged
#212 promote: arch-docs e1631f8 to prod
Merged
#211 promote: arch-docs e1631f8 to staging
Merged
#210 deploy: arch-docs e1631f8 to dev
Merged
#209 chore: remove report-generator from all environments
Merged
#208 Staging: memory 4Gi, maxReplicas=3
Merged
#206 Enable HPA on staging for isolation test
Merged
#205 Add nginx proxy timeout 300s for report-generator
Merged
#204 promote: report-generator 8484c29 to prod
Merged
#203 promote: report-generator 8484c29 to staging
Merged
#202 deploy: report-generator 8484c29 to dev
Merged
#201 promote: report-generator 87cce4c to prod
Merged
#200 promote: report-generator 87cce4c to staging
Merged
#199 refactor: remove MinIO from all environments
Merged
#198 deploy: report-generator 87cce4c to dev
Merged
#197 promote: report-generator ea10e3b to prod
Merged
#196 promote: report-generator ea10e3b to staging
Merged
#195 deploy: report-generator ea10e3b to dev
Merged
#194 promote: report-generator e88d8e8 to prod
Merged
#193 promote: report-generator e88d8e8 to staging
Merged
#192 deploy: report-generator e88d8e8 to dev
Merged
#191 promote: report-generator aa09a1c to prod
Merged
#190 fix: increase resource quotas for VM migration
Merged
#189 promote: report-generator aa09a1c to staging
Merged
#188 feat: migrate PG/MinIO to external VM 202
Merged
#187 deploy: report-generator aa09a1c to dev
Merged
#186 promote: report-generator 4f202c9 to prod
Merged
#185 promote: report-generator 4f202c9 to staging
Merged
#184 deploy: report-generator 4f202c9 to dev
Merged
#183 fix: rewrite seed job to avoid PL/pgSQL $$ blocks
Merged
#182 fix: correct NetworkPolicy labels for report-generator
Merged
#181 deploy: report-generator f4f9666 to dev
Merged
#180 feat: add report-generator app (Go + PostgreSQL + MinIO)
Merged
#179 fix(keycloak): proper passwords + fix config-cli import
Merged
#178 fix: override KC_HOSTNAME to clear Bitnami default
Merged
#177 fix: remove KC_HOSTNAME for NodePort OAuth
Merged
#176 fix: KC_HOSTNAME_STRICT=false for NodePort access
Merged
#175 Add Helm unit tests for web-app chart
Merged
#174 fix: PostgreSQL NodePort in valid range
Merged
#173 Phase 16: fine-grained RBAC + DB rotation prep
Merged
#172 promote: arch-docs bc507aa to prod
Merged
#171 promote: arch-docs bc507aa to staging
Merged
#170 deploy: arch-docs bc507aa to dev
Merged
#169 Add OIDC RBAC for Keycloak groups (Phase 15)
Merged
#167 deploy: arch-docs c40b145 to dev
Merged
#166 promote: arch-docs f1b8c43 to prod
Merged
#165 promote: arch-docs f1b8c43 to staging
Merged
#164 deploy: arch-docs f1b8c43 to dev
Merged
#163 deploy: arch-docs aed4ad6 to dev
Merged
#162 deploy: arch-docs 24903e4 to dev
Merged
#161 promote: arch-docs dfbd4e7 to prod
Merged
#160 promote: arch-docs dfbd4e7 to staging
Merged
#159 fix: allow ingress-nginx egress to oauth2-proxy port 4180
Merged
#158 deploy: arch-docs dfbd4e7 to dev
Merged
#157 feat: switch Kyverno to Enforce mode
Merged
#156 deploy: arch-docs 0b36f23 to dev
Merged
#155 fix: add gitea DNS for Kyverno signature verification
Merged
#154 fix: skip Rekor tlog verification in Kyverno policy
Merged
#153 deploy: arch-docs 2d487ec to dev
Merged
#152 fix: set mutateDigest=false for Kyverno Audit policy
Merged
#151 fix: add ServerSideApply for Kyverno CRDs
Merged
#150 feat: Kyverno + cosign image verification
Merged
#149 feat: NetworkPolicy for cert-manager & ingress-nginx
Merged
#148 feat: operational RBAC — scoped ServiceAccounts
Merged
#147 promote: arch-docs ea0480c to prod
Merged
#146 promote: arch-docs ea0480c to staging
Merged
#145 deploy: arch-docs ea0480c to dev
Merged
#144 promote: arch-docs 038eed9 to prod
Merged
#143 promote: arch-docs 038eed9 to staging
Merged
#142 promote: arch-docs 0b39796 to prod
Merged
#141 deploy: arch-docs 038eed9 to dev
Merged
#140 promote: arch-docs 0b39796 to staging
Merged
#139 deploy: arch-docs 0b39796 to dev
Merged
#138 promote: arch-docs e2e05af to prod
Merged
#137 promote: arch-docs e2e05af to staging
Merged
#136 deploy: arch-docs e2e05af to dev
Merged
#135 deploy: arch-docs 674f25f to dev
Merged
#134 fix(keycloak): use HmacSHA1 for TOTP
Merged
#133 feat(keycloak): enable mandatory TOTP MFA for all users
Merged
#132 fix: pod-cleanup image bitnami/kubectl:1.35 → bitnamilegacy/kubectl:1.33
Merged
#131 promote: arch-docs b307959 to prod
Merged
#130 promote: arch-docs b307959 to staging
Merged
#129 deploy: arch-docs b307959 to dev
Merged
#128 deploy: arch-docs 9b617a8 to dev
Merged
#127 fix: accept group name with/without slash
Merged
#126 fix: use public Keycloak URLs for oauth2-proxy token exchange
Merged
#125 fix: remove server-snippet from keycloak ingress
Merged
#124 feat: expose Keycloak externally via ingress
Merged
#123 deploy: arch-docs 55dfc56 to dev
Merged
#122 fix: add healthz ingress for smoke test bypass
Merged
#121 fix: oauth2-proxy ingress port 4180 → 80
Merged
#120 feat(keycloak): move to localhost:30880 via SSH tunnel
Merged
#119 feat(arch-docs): replace basic auth with oauth2-proxy SSO
Merged
#118 fix(keycloak): remove openid from defaultDefaultClientScopes
Merged
#117 fix(keycloak): use bitnamilegacy images
Merged
#116 fix(keycloak): replace deprecated proxy: edge with proxyHeaders
Merged
#115 feat: Keycloak SSO + oauth2-proxy + ArgoCD OIDC
Merged
#114 promote: arch-docs 1d383eb to prod
Merged
#113 promote: arch-docs 1d383eb to staging
Merged
#112 deploy: arch-docs 1d383eb to dev
Merged
#111 feat: Longhorn S3 backup to MinIO
Merged
#110 fix: update pod-cleanup kubectl image to 1.35
Merged
#109 upgrade: Longhorn 1.10.1 → 1.11.0 (final)
Merged
#108 upgrade: Longhorn 1.9.0 → 1.10.1 (step 3/4)
Merged
#107 upgrade: Longhorn 1.8.1 → 1.9.0 (step 2/4)
Merged
#106 upgrade: Longhorn 1.7.2 → 1.8.1 (step 1/4)
Merged
#105 upgrade: ingress-nginx, metrics-server, cert-manager
Merged
#104 promote: arch-docs 07e55a5 to prod
Merged
#103 promote: arch-docs 07e55a5 to staging
Merged
#102 deploy: arch-docs 07e55a5 to dev
Merged
#101 deploy: arch-docs 733f81f to dev
Merged
#100 promote: arch-docs 798ecfc to prod
Merged
#99 promote: arch-docs 798ecfc to staging
Merged
#98 deploy: arch-docs 798ecfc to dev
Merged
#97 deploy: arch-docs 97d0853 to dev
Merged
#96 promote: arch-docs 58d548e to prod
Merged
#95 promote: arch-docs 58d548e to staging
Merged
#94 deploy: arch-docs 58d548e to dev
Merged
#93 promote: arch-docs a8824e7 to prod
Merged
#92 promote: arch-docs a8824e7 to staging
Merged
#91 deploy: arch-docs a8824e7 to dev
Merged
#90 deploy: arch-docs 8e272df to dev
Merged
#89 promote: arch-docs 5a54ccd to prod
Merged
#88 promote: arch-docs c484764 to prod
Merged
#87 promote: arch-docs 5a54ccd to staging
Merged
#86 deploy: arch-docs 5a54ccd to dev
Merged
#85 promote: arch-docs 1e5df0f to prod
Merged
#84 promote: arch-docs 1e5df0f to staging
Merged
#83 deploy: arch-docs 1e5df0f to dev
Merged
#82 deploy: arch-docs efefcc7 to dev
Merged
#81 deploy: arch-docs c0c6f06 to dev
Merged
#80 promote: arch-docs 0796e97 to prod
Merged
#79 promote: arch-docs 0796e97 to staging
Merged
#78 deploy: arch-docs 0796e97 to dev
Merged
#77 feat: domain georgepet.duckdns.org + per-env auth
Merged
#76 deploy: arch-docs abc5098 to dev
Merged
#75 deploy: arch-docs 7584c4e to dev
Merged
#74 deploy: arch-docs c22b960 to dev
Merged
#73 deploy: arch-docs dd16920 to dev
Merged
#72 deploy: arch-docs 2787570 to dev
Merged
#71 promote: arch-docs 4473212 to prod
Merged
#70 promote: arch-docs 4473212 to staging
Merged
#69 deploy: arch-docs 4473212 to dev
Merged
#68 promote: arch-docs fd3e738 to prod
Merged
#67 promote: arch-docs fd3e738 to staging
Merged
#66 deploy: arch-docs fd3e738 to dev
Merged
#65 promote: arch-docs d623b70 to prod
Merged
#64 promote: arch-docs d623b70 to staging
Merged
#63 deploy: arch-docs d623b70 to dev
Merged
#62 promote: arch-docs 35f8af0 to prod
Merged
#61 promote: arch-docs 35f8af0 to staging
Merged
#60 deploy: arch-docs 35f8af0 to dev
Merged
#59 deploy: arch-docs c6294f3 to dev
Merged
#58 deploy: arch-docs 5fb06e7 to dev
Merged
#57 deploy: arch-docs 7a86611 to dev
Merged
#56 deploy: arch-docs 497e06d to dev
Merged
#55 deploy: arch-docs acf867f to dev
Merged
#54 Remove visual test infrastructure
Merged
#53 deploy: arch-docs cbdd012 to dev
Merged
#52 promote: arch-docs 6cfba0e to staging
Merged
#51 deploy: arch-docs cytoscape migration (dev)
Merged
#50 deploy: arch-docs 6cfba0e to dev
Merged
#49 promote: arch-docs 745c398 to staging
Merged
#48 deploy: arch-docs 745c398 to dev
Merged
#47 promote: arch-docs e52a4e0 to staging
Merged
#46 deploy: arch-docs e52a4e0 to dev
Merged
#45 promote: arch-docs c484764 to staging
Merged
#44 deploy: arch-docs c484764 to dev
Merged
#43 promote: arch-docs 2d830f6 to staging
Merged
#42 deploy: arch-docs 2d830f6 to dev
Merged
#41 deploy: arch-docs d48eef4 to dev
Merged
#40 promote: arch-docs 842f4a3 to staging
Merged
#39 deploy: arch-docs 842f4a3 to dev
Merged
#38 promote: arch-docs eea7b67 to staging
Merged
#37 deploy: arch-docs eea7b67 to dev
Merged
#36 feat: Visual test NetworkPolicy support
Merged
#35 promote: arch-docs da3bea9 to staging
Merged
#34 deploy: arch-docs da3bea9 to dev
Merged
#33 deploy: arch-docs 61a10be to dev
Merged
#32 deploy: arch-docs 7582809 to dev
Merged
#31 deploy: arch-docs 19892ad to dev
Merged
#30 deploy: arch-docs d4ce7ee to dev
Merged
#29 deploy: arch-docs d2fbba3 to dev
Merged
#28 deploy: arch-docs e60bcab to dev
Merged
#27 deploy: arch-docs 5faf77b to dev
Merged
#26 promote: arch-docs 0f2b932 to prod
Merged
#25 promote: arch-docs 0f2b932 to staging
Merged
#24 deploy: arch-docs 0f2b932 to dev
Merged
#23 cleanup: remove demo-app and obsolete promote.sh
Merged
#22 feat: migrate arch-docs to subdomain-based routing
Merged
#21 promote: arch-docs fa8f2f7 to prod
Merged
#20 promote: arch-docs fa8f2f7 to staging
Merged
#19 deploy: arch-docs fa8f2f7 to dev
Merged
#18 promote: arch-docs 11c3092 to prod
Merged
#17 promote: arch-docs 11c3092 to staging
Merged
#16 deploy: arch-docs 11c3092 to dev
Merged
#15 deploy: arch-docs 63815aa to dev
Merged
#14 deploy: arch-docs e764b90 to dev
Merged
#13 deploy: arch-docs 2c04dd9 to dev
Merged
#12 feat: add staging/prod environments for arch-docs
Merged
#11 deploy: arch-docs 0db85f1 to dev
Merged
#10 deploy: arch-docs a02665f to dev
Merged
#9 fix: remove GitHub downloads from CI (pre-installed in runner)
Merged
#8 deploy: arch-docs 1152292 to dev (footer update)
Merged
#7 feat: deploy arch-docs to dev namespace
Merged
#6 feat: Helm chart extensibility (extraVolumes, ingress path)
Merged
#5 feat: Add pod-cleanup CronJob (Phase 8.4)
Merged
#4 feat: Add Trivy Operator + kube-bench (Phase 8.3)
Merged
#3 feat: Add PR template (Phase 8.2)
Merged
#2 feat: Add AI code review workflow (Phase 8.1)
Merged
#1 feat: Add PR checks workflow (Phase 8.0)