bfd96d0009
Merge pull request 'fix: paas-portal v1.4 — correct status + logs during init' ( #244 ) from fix/paas-portal-v1.4 into main
2026-02-24 22:19:37 +01:00
claude
7329794605
fix: paas-portal v1.4 — correct app status during init + logs fix
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
2026-02-24 22:19:09 +01:00
822f78a1b8
Merge pull request 'fix: paas-portal v1.3 — provisioning time text' ( #243 ) from fix/paas-portal-v1.3 into main
2026-02-24 22:11:57 +01:00
claude
e69b996686
fix: bump paas-portal to v1.3 (update provisioning time text)
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-24 22:11:44 +01:00
d3a8cfe3ae
feat(paas): create tenant t1 (small)
2026-02-24 22:03:52 +01:00
9cb4bd2391
feat(paas): create tenant t1 (small)
2026-02-24 22:03:51 +01:00
4fc2ccdaa2
Merge pull request 'fix: Recreate strategy for RWO PVC + cleanup GITEA_ADMIN_TOKEN' ( #242 ) from fix/paas-portal-recreate-strategy into main
2026-02-24 22:02:06 +01:00
claude
400d3c0443
fix: use Recreate strategy + remove unused GITEA_ADMIN_TOKEN
AI Review / AI Code Review (pull_request) Successful in 3s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
2026-02-24 22:01:52 +01:00
b61938fd92
Merge pull request 'fix: paas-portal v1.2 — remove branch protection toggle' ( #241 ) from fix/paas-portal-v1.2 into main
2026-02-24 21:59:04 +01:00
claude
6d97d6edbc
fix: bump paas-portal to v1.2 (fix branch protection)
AI Review / AI Code Review (pull_request) Successful in 4s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
2026-02-24 21:58:42 +01:00
e45c97ac2d
Merge pull request 'cleanup: remove tenant-t1 files' ( #240 ) from cleanup/remove-tenant-t1 into main
2026-02-24 21:47:54 +01:00
claude
5f6a909910
cleanup: remove tenant-t1 files (tenant deleted)
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-24 21:47:33 +01:00
bf35719ce9
Merge pull request 'fix: Kyverno egress to Gitea external for registry auth' ( #239 ) from fix/kyverno-gitea-external-egress into main
2026-02-24 21:29:36 +01:00
claude
17e55ae0c9
fix: allow Kyverno egress to Gitea external for registry token exchange
...
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
After changing Gitea ROOT_URL to https://git.georgepet.duckdns.org ,
the registry V2 auth challenge redirects to the external URL.
Kyverno needs to reach 185.47.204.231:443 for token exchange.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 21:29:00 +01:00
cd49407c75
Merge pull request 'fix: update prod env values for paas-portal v1.1' ( #238 ) from fix/paas-portal-env-values into main
2026-02-24 20:59:24 +01:00
claude
840bca2354
fix: update prod env values for paas-portal v1.1
...
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
Update environment-specific values with v1.1 tag and GITEA_EXTERNAL_URL.
The env values file overrides chart defaults and was still at v1.0.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 20:59:08 +01:00
aa466268fc
Merge pull request 'feat: paas-portal v1.1 with git-deploy pipeline' ( #237 ) from feat/paas-portal-v1.1 into main
2026-02-24 20:53:45 +01:00
claude
6f7bcc3214
feat: upgrade paas-portal to v1.1 with git-deploy support
...
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
Add GITEA_EXTERNAL_URL env var and GITEA_ADMIN_USER_TOKEN secret ref
for the new git-based deploy pipeline. Bump image tag to v1.1.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 20:53:28 +01:00
0a4873bb9f
Merge pull request 'fix: ingress-nginx egress port 3000 for Gitea' ( #236 ) from fix/ingress-nginx-egress-3000 into main
2026-02-24 20:19:00 +01:00
claude
d670d880af
fix: allow ingress-nginx egress to port 3000 (Gitea)
...
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
Required for git.georgepet.duckdns.org ingress to reach Gitea backend.
2026-02-24 20:18:44 +01:00
b806355a61
Merge pull request 'feat: expose Gitea externally at git.georgepet.duckdns.org' ( #235 ) from feature/gitea-external into main
2026-02-24 20:10:04 +01:00
claude
b9a84c674f
feat: expose Gitea externally at git.georgepet.duckdns.org
...
AI Review / AI Code Review (pull_request) Successful in 3s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
Service+Endpoints pointing to 10.10.10.1:3000, Ingress with TLS.
Phase 22: Git-based PaaS deploy pipeline.
2026-02-24 20:09:28 +01:00
3058bf59c0
feat(paas): create tenant t1 (small)
2026-02-24 19:25:08 +01:00
65c96c43d6
feat(paas): create tenant t1 (small)
2026-02-24 19:25:07 +01:00
3e8ed47ef7
Merge pull request 'chore: remove test tenant-t1' ( #234 ) from cleanup/remove-tenant-t1 into main
2026-02-24 18:56:17 +01:00
claude
0599b4c3ee
chore: remove test tenant-t1 ArgoCD app
...
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 13s
Test tenant created during PaaS Portal testing. User and namespace already cleaned up.
2026-02-24 18:55:54 +01:00
a09c82e039
Merge pull request 'feat: rename naas-portal to paas-portal' ( #233 ) from rename-naas-to-paas into main
2026-02-24 18:24:49 +01:00
claude
ddc3def7c4
feat: rename naas-portal to paas-portal across all resources
...
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 13s
- Helm chart: charts/naas-portal → charts/paas-portal
- ArgoCD app: naas-portal → paas-portal
- Environment values: naas-portal → paas-portal
- ClusterRole: naas-manager → paas-manager (operational-rbac)
- Tenant labels: naas.georgepet.duckdns.org → paas.georgepet.duckdns.org
- Secret: naas-portal-secrets → paas-portal-secrets
- Image: claude/naas-portal → claude/paas-portal
2026-02-24 18:24:21 +01:00
046bdac3f0
Merge pull request 'Add naas-portal Helm chart for K8s deployment' ( #232 ) from naas-portal-k8s into main
2026-02-24 16:51:36 +01:00
root
455250ee79
Add naas-portal Helm chart for K8s deployment
...
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 12s
Migrate PaaS portal from Docker control-plane to K8s with:
- Dedicated Helm chart (Deployment, Service, Ingress, PVC, RBAC, NetworkPolicy)
- Domain: georgepaas.duckdns.org with TLS via cert-manager
- In-cluster ServiceAccount bound to naas-manager ClusterRole
- Longhorn PVC for SQLite persistence
- ArgoCD auto-sync application
2026-02-24 16:47:58 +01:00
4b22483d57
feat(naas): create tenant t1 (small)
2026-02-24 15:39:55 +01:00
502b59e5aa
feat(naas): create tenant t1 (small)
2026-02-24 15:39:54 +01:00
a354fd2679
feat(naas): delete tenant t1
2026-02-24 14:33:39 +01:00
69bc2425ec
feat(naas): delete tenant t1
2026-02-24 14:33:39 +01:00
9c2b508890
fix: remove invalid ingress template (no rules/defaultBackend)
2026-02-24 14:05:42 +01:00
e091267db7
feat(naas): create tenant t1 (small)
2026-02-24 13:25:18 +01:00
f35f89d0bd
feat(naas): create tenant t1 (small)
2026-02-24 13:25:17 +01:00
ffb6769a31
cleanup: delete tenant t1 values
2026-02-24 13:04:41 +01:00
6b593e3d49
cleanup: delete tenant t1 ArgoCD app
2026-02-24 13:03:30 +01:00
Claude
3dc6b0dd68
phase19: cleanup — remove unused ArgoCD apps, convert arch-docs to Deployment
...
Remove components not needed for PaaS-focused infrastructure:
- argo-rollouts: only used by arch-docs canary, convert to plain Deployment
- oauth2-proxy: was for dev/staging auth (removed in Phase 18)
- nginx-test: test deployment, not needed
- kube-bench: CIS benchmark scanner, not needed for PaaS
- trivy-operator: vulnerability scanner, not needed for PaaS
- drift-check RBAC: drift-check service being removed
arch-docs-prod: rollout.enabled=false → Helm uses Deployment template
2026-02-24 10:40:13 +01:00
cf51494a08
feat(naas): create tenant t1 (small)
2026-02-24 09:05:25 +01:00
119b812c24
feat(naas): create tenant t1 (small)
2026-02-24 09:05:25 +01:00
a0f1ca8a9a
refactor: simplify tenant ingress to TLS-only (rules managed by NaaS portal PaaS)
2026-02-24 06:56:14 +01:00
08f4f56a21
feat: expand naas-manager RBAC for PaaS (deployments, services, ingresses, pod logs)
2026-02-24 06:56:03 +01:00
4b12e1e98c
feat(naas): delete tenant t2
2026-02-24 06:52:43 +01:00
741cd6359b
feat(naas): delete tenant t2
2026-02-24 06:52:42 +01:00
6223258e23
feat(naas): delete tenant t1
2026-02-24 06:52:41 +01:00
c93d6b0ca1
feat(naas): delete tenant t1
2026-02-24 06:52:41 +01:00
5d7051cec7
cleanup: remove oauth2-proxy-ingress.yaml
2026-02-24 06:52:02 +01:00
80ce5ba4fd
refactor: keep only prod namespace in manifests.yaml
2026-02-24 06:51:58 +01:00
