207 Commits

Author SHA1 Message Date
claude
7329794605 fix: paas-portal v1.4 — correct app status during init + logs fix
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
2026-02-24 22:19:09 +01:00
claude
e69b996686 fix: bump paas-portal to v1.3 (update provisioning time text)
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-24 22:11:44 +01:00
9cb4bd2391 feat(paas): create tenant t1 (small) 2026-02-24 22:03:51 +01:00
claude
6d97d6edbc fix: bump paas-portal to v1.2 (fix branch protection)
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 4s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
2026-02-24 21:58:42 +01:00
claude
5f6a909910 cleanup: remove tenant-t1 files (tenant deleted)
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-24 21:47:33 +01:00
claude
840bca2354 fix: update prod env values for paas-portal v1.1
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
Update environment-specific values with v1.1 tag and GITEA_EXTERNAL_URL.
The env values file overrides chart defaults and was still at v1.0.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-24 20:59:08 +01:00
65c96c43d6 feat(paas): create tenant t1 (small) 2026-02-24 19:25:07 +01:00
claude
ddc3def7c4 feat: rename naas-portal to paas-portal across all resources
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 13s
- Helm chart: charts/naas-portal → charts/paas-portal
- ArgoCD app: naas-portal → paas-portal
- Environment values: naas-portal → paas-portal
- ClusterRole: naas-manager → paas-manager (operational-rbac)
- Tenant labels: naas.georgepet.duckdns.org → paas.georgepet.duckdns.org
- Secret: naas-portal-secrets → paas-portal-secrets
- Image: claude/naas-portal → claude/paas-portal
2026-02-24 18:24:21 +01:00
root
455250ee79 Add naas-portal Helm chart for K8s deployment
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 12s
Migrate PaaS portal from Docker control-plane to K8s with:
- Dedicated Helm chart (Deployment, Service, Ingress, PVC, RBAC, NetworkPolicy)
- Domain: georgepaas.duckdns.org with TLS via cert-manager
- In-cluster ServiceAccount bound to naas-manager ClusterRole
- Longhorn PVC for SQLite persistence
- ArgoCD auto-sync application
2026-02-24 16:47:58 +01:00
502b59e5aa feat(naas): create tenant t1 (small) 2026-02-24 15:39:54 +01:00
a354fd2679 feat(naas): delete tenant t1 2026-02-24 14:33:39 +01:00
f35f89d0bd feat(naas): create tenant t1 (small) 2026-02-24 13:25:17 +01:00
ffb6769a31 cleanup: delete tenant t1 values 2026-02-24 13:04:41 +01:00
Claude
3dc6b0dd68 phase19: cleanup — remove unused ArgoCD apps, convert arch-docs to Deployment
Remove components not needed for PaaS-focused infrastructure:
- argo-rollouts: only used by arch-docs canary, convert to plain Deployment
- oauth2-proxy: was for dev/staging auth (removed in Phase 18)
- nginx-test: test deployment, not needed
- kube-bench: CIS benchmark scanner, not needed for PaaS
- trivy-operator: vulnerability scanner, not needed for PaaS
- drift-check RBAC: drift-check service being removed

arch-docs-prod: rollout.enabled=false → Helm uses Deployment template
2026-02-24 10:40:13 +01:00
119b812c24 feat(naas): create tenant t1 (small) 2026-02-24 09:05:25 +01:00
4b12e1e98c feat(naas): delete tenant t2 2026-02-24 06:52:43 +01:00
6223258e23 feat(naas): delete tenant t1 2026-02-24 06:52:41 +01:00
42c8681528 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:39 +01:00
b913611e89 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:37 +01:00
21ee692588 feat(naas): create tenant t2 (small) 2026-02-23 21:08:24 +01:00
076437b531 feat(naas): create tenant t1 (small) 2026-02-23 14:43:43 +01:00
a7d467b57f feat(naas): delete tenant t1 2026-02-23 14:43:42 +01:00
342637fcfe feat(naas): create tenant t1 (medium) 2026-02-23 14:42:45 +01:00
e39594613c feat(naas): delete tenant t1 2026-02-23 14:30:24 +01:00
5fbd93ea36 feat(naas): create tenant t1 (small) 2026-02-23 14:03:55 +01:00
530951f977 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:29 +01:00
Promotion Bot
e983cd5a40 promote: arch-docs c02fecd to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-22 22:18:23 +01:00
Promotion Bot
c151e47366 promote: arch-docs c02fecd to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-22 22:14:11 +01:00
CI Bot
a187e0956c deploy: arch-docs c02fecd to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-22 21:09:51 +00:00
root
a9ec853201 feat: add AnalysisTemplate + Feature Flags to web-app chart
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
- AnalysisTemplate: web provider health check on canary /healthz
  (10s interval, 6 checks, 3 failure limit → auto-rollback)
- Feature Flags: ConfigMap → config.js mount via window.__APP_CONFIG__
  pattern for static SPA (annotation hash for auto-restart)
- NetworkPolicy: allow argo-rollouts namespace for analysis HTTP checks
- Prod arch-docs: enable analysis + showBetaFeatures flag

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 22:05:24 +01:00
root
465a9859b7 feat: add Argo Rollouts with canary strategy for prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
- Install Argo Rollouts via ArgoCD (Helm chart 2.39.1)
- Add Rollout template with nginx traffic routing
- Add canary Service for traffic splitting
- Enable canary for prod arch-docs (20% → 60s → 50% → 60s → 100%)
- Dev/staging remain standard Deployment (1 replica, canary not useful)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-22 19:36:11 +01:00
Promotion Bot
b7fc7e2dd4 promote: arch-docs 03361b1 to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-22 17:27:56 +01:00
Promotion Bot
09c015fe71 promote: arch-docs 03361b1 to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-22 17:17:33 +01:00
CI Bot
3987c67411 deploy: arch-docs 03361b1 to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-22 15:50:15 +00:00
Promotion Bot
50f0e94358 promote: arch-docs 3f2c0b2 to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 3s
PR Checks / Validate & Security Scan (pull_request) Successful in 14s
2026-02-22 16:19:58 +01:00
CI Bot
9f1a0c52b1 deploy: arch-docs 3f2c0b2 to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 13s
2026-02-22 13:12:10 +00:00
Promotion Bot
01942540b3 promote: arch-docs e1631f8 to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-21 11:37:08 +01:00
Promotion Bot
939415d478 promote: arch-docs e1631f8 to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
2026-02-21 11:34:03 +01:00
CI Bot
bf8c10a79a deploy: arch-docs e1631f8 to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-21 10:31:08 +00:00
root
9acb62e515 chore: remove report-generator from all environments
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
Report-generator was a load testing application. Decommissioning:
- Remove ArgoCD app definitions (6 apps)
- Remove infra manifests (networkpolicy, secrets, seed-jobs)
- Remove Helm values (dev/staging/prod)

K8s resources already deleted via ArgoCD cascade delete.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 09:43:02 +01:00
Claude
c9605d09ee Staging: memory 4Gi, maxReplicas=3 (fix OOMKilled)
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
Yearly report needs ~2.7GB RAM. With 2Gi limit, pod OOMKilled.
3 replicas × (2 CPU, 4Gi) = 6 CPU, 12Gi — fits staging-quota.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 08:28:15 +01:00
Claude
f163ef8020 Enable HPA on staging for isolation load test
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
maxReplicas=4 (fills staging-quota limits.cpu=8, 4×2=8)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-21 08:14:17 +01:00
Claude
232d2bdd97 Add nginx proxy timeout 300s for report-generator
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 8s
Yearly reports take ~160s (bootstrap resampling of 1.7M rows).
Default nginx timeout of 60s causes 504 Gateway Timeout.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-20 22:52:06 +01:00
Promotion Bot
da7a5376e8 promote: report-generator 8484c29 to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-20 20:56:37 +01:00
Promotion Bot
db67309a9e promote: report-generator 8484c29 to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-20 20:51:38 +01:00
CI Bot
ea7bb822a8 deploy: report-generator 8484c29 to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-20 19:35:12 +00:00
Promotion Bot
c2c73f248f promote: report-generator 87cce4c to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-20 18:04:35 +01:00
Promotion Bot
bdbab150c8 promote: report-generator 87cce4c to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 13s
2026-02-20 17:59:54 +01:00
3b5bf8e851 Merge pull request 'refactor: remove MinIO from all environments' (#199) from refactor/remove-minio into main 2026-02-20 17:59:51 +01:00
Claude
c25bc6c9ce refactor: remove MinIO from all environments
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 10s
- Remove MINIO_* env vars from dev/staging/prod values
- Remove minio-access-key and minio-secret-key from secrets
- Remove port 9000 from NetworkPolicy egress rules
- PDF stored in PostgreSQL BYTEA, MinIO no longer needed

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-20 17:57:32 +01:00