568 Commits

Author SHA1 Message Date
root
81c7a8a46a feat: add AI code review workflow (Phase 8.1)
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 12s
2026-02-14 18:36:09 +01:00
CI Bot
74d54866b9 deploy: demo-app 1a3f0c5 to dev 2026-02-14 16:52:57 +00:00
e10c2fe4bc Merge pull request 'feat: Add PR checks workflow (Phase 8.0)' (#1) from feature/security-scanning into main 2026-02-14 17:52:49 +01:00
Claude AI
a879357971 fix: add --break-system-packages for pip3 in CI (PEP 668)
All checks were successful
PR Checks / Validate & Security Scan (pull_request) Successful in 25s
2026-02-14 17:19:01 +01:00
Claude AI
6b8fcaeb66 ci: trigger fresh PR checks
Some checks failed
PR Checks / Validate & Security Scan (pull_request) Failing after 4s
2026-02-14 17:08:52 +01:00
Claude AI
de2fc834b3 feat: add PR checks workflow (Phase 8.0)
Some checks failed
PR Checks / Validate & Security Scan (pull_request) Failing after 5s
- Add pr-checks.yaml: yamllint, kubeconform, gitleaks, trivy config scan
- Use standard runner image with tool installation steps
2026-02-14 16:54:17 +01:00
root
c9b7dfc989 feat: staging/prod environments + promotion script 2026-02-14 16:01:54 +01:00
root
404087e7f9 fix: add imagePullSecrets for Gitea registry + Helm chart support 2026-02-14 15:58:00 +01:00
CI Bot
9264f1c9d8 deploy: demo-app c16090c to dev 2026-02-14 14:51:06 +00:00
root
e4a08e724d Add generic web-app Helm chart + demo-app dev environment
- charts/web-app/: PSS restricted, Ingress with TLS, NetworkPolicy, HPA
- environments/dev/demo-app.yaml: dev values for demo-app
- argocd-apps/demo-app-dev.yaml: ArgoCD Application for dev deployment
2026-02-14 15:11:07 +01:00
root
a3970deb24 Add app-of-apps: declarative Application definitions + root app
- argocd-apps/ directory with 7 Application YAMLs matching current specs
- root-app.yaml to manage all Applications from git
- Finalizers added for proper cleanup on deletion
2026-02-14 15:06:02 +01:00
root
6cf51236dc Add NetworkPolicy: allow nginx-ingress + cert-manager HTTP-01 solver
- allow-ingress-from-nginx: permit traffic from ingress-nginx namespace
- allow-cert-manager-http01: permit solver pod ingress (8089) and egress
- Applied to dev, staging, prod namespaces
2026-02-14 14:32:25 +01:00
601bfac348 Add dev/staging/prod namespaces with ResourceQuota + NetworkPolicy 2026-02-14 12:44:11 +01:00
d137b5bdf2 Enterprise: NetworkPolicy default-deny + LimitRange + ResourceQuota 2026-02-14 10:09:08 +01:00
6f4505c977 Enterprise: secure nginx deployment (PSS restricted, resource limits, read-only rootfs) 2026-02-14 10:08:53 +01:00
87b729cdc5 Scale nginx-test to 3 replicas 2026-02-14 08:49:07 +01:00
506d5df47f Add nginx-test deployment + service 2026-02-14 08:47:09 +01:00
0c54bb2c76 Initial commit 2026-02-14 08:46:58 +01:00