568 Commits

Author SHA1 Message Date
42c8681528 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:39 +01:00
b913611e89 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:37 +01:00
cf2c8ed107 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:36 +01:00
ed02e6f8e5 chore: remove dev/staging environment (PaaS transition) 2026-02-24 06:50:34 +01:00
390542f4b7 feat: add default Ingress template to tenant chart
Creates an Ingress resource using the tenant-tls certificate so that
the tenant subdomain works with valid TLS immediately after provisioning.
Points to a placeholder service that can be replaced by the tenant.
2026-02-23 22:44:26 +01:00
dd9e60c6fd fix: allow K8s API server to reach ingress-nginx admission webhook 2026-02-23 22:20:18 +01:00
17baef3e7e feat(naas): create tenant t2 (small) 2026-02-23 21:08:25 +01:00
21ee692588 feat(naas): create tenant t2 (small) 2026-02-23 21:08:24 +01:00
136669db84 feat(netpol): add ports 8085/8089 egress and explicit ingress sources for ingress-nginx 2026-02-23 18:17:35 +01:00
b27c9ff252 feat(netpol): add HTTP-01 self-check port 80 to cert-manager controller egress 2026-02-23 18:16:54 +01:00
cebd7793d1 feat(naas): create tenant t1 (small) 2026-02-23 14:43:43 +01:00
076437b531 feat(naas): create tenant t1 (small) 2026-02-23 14:43:43 +01:00
a7d467b57f feat(naas): delete tenant t1 2026-02-23 14:43:42 +01:00
68e1312bb4 feat(naas): delete tenant t1 2026-02-23 14:43:41 +01:00
5dfff53db6 feat(naas): create tenant t1 (medium) 2026-02-23 14:42:46 +01:00
342637fcfe feat(naas): create tenant t1 (medium) 2026-02-23 14:42:45 +01:00
e39594613c feat(naas): delete tenant t1 2026-02-23 14:30:24 +01:00
c28ae380b0 feat(naas): delete tenant t1 2026-02-23 14:30:24 +01:00
04fb358c23 feat(naas): create tenant t1 (small) 2026-02-23 14:03:56 +01:00
5fbd93ea36 feat(naas): create tenant t1 (small) 2026-02-23 14:03:55 +01:00
91b6e9117f fix: add deployments/scale subresource to tenant Role 2026-02-23 13:38:31 +01:00
61786efd28 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:29 +01:00
530951f977 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:29 +01:00
e44279dbd4 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:28 +01:00
5c78db8da0 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:28 +01:00
acd636b2c9 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:27 +01:00
d3cb52ad88 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:26 +01:00
217a3dbe3c feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:26 +01:00
ef333d3242 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:25 +01:00
75f4058127 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:24 +01:00
37fe00169a feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:24 +01:00
2787255b37 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:23 +01:00
0baffa8f02 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:22 +01:00
ce2a9eeb2d feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:22 +01:00
156fb1b1fa feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:21 +01:00
7082e70c52 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:20 +01:00
8344f8a545 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:20 +01:00
b7361090b6 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:19 +01:00
30e88922c5 feat: add NaaS tenant-namespace Helm chart + test tenant t1 2026-02-23 13:32:18 +01:00
6c760c36b7 Merge pull request 'rbac: extend k8s-audit SA for deep-audit script' (#231) from phase4/audit-rbac-extend into main 2026-02-23 10:29:20 +01:00
Claude
f21106dbad rbac: extend k8s-audit SA for deep-audit script
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
Add PVC, ArgoCD Application, and Deployment read access
so deep-audit.sh can use least-privilege k8s-audit SA
instead of admin-emergency kubeconfig.
2026-02-23 10:28:45 +01:00
9d79db71d9 Merge pull request 'fix: trivy node-collector toleration + argo-rollouts CRD sync' (#230) from fix/cleanup-phase2 into main 2026-02-23 09:21:58 +01:00
Claude
3b6195d698 fix: trivy node-collector toleration + argo-rollouts CRD sync
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
- Add control-plane toleration to trivy nodeCollector so it can
  schedule on k8s-master (was stuck Pending indefinitely)
- Add ignoreDifferences for CRDs + ServerSideApply to argo-rollouts
  to resolve perpetual OutOfSync caused by Helm CRD management gap

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
2026-02-23 09:20:40 +01:00
ddd757d3f4 Merge pull request 'promote: arch-docs c02fecd to prod' (#229) from promote/arch-docs-c02fecd-prod into main 2026-02-22 22:18:40 +01:00
Promotion Bot
e983cd5a40 promote: arch-docs c02fecd to prod
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-22 22:18:23 +01:00
6a1cd0071b Merge pull request 'promote: arch-docs c02fecd to staging' (#228) from promote/arch-docs-c02fecd-staging into main 2026-02-22 22:14:28 +01:00
Promotion Bot
c151e47366 promote: arch-docs c02fecd to staging
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 1s
PR Checks / Validate & Security Scan (pull_request) Successful in 9s
2026-02-22 22:14:11 +01:00
069dbc4df8 Merge pull request 'deploy: arch-docs c02fecd to dev' (#227) from deploy/arch-docs-c02fecd into main 2026-02-22 22:10:08 +01:00
CI Bot
a187e0956c deploy: arch-docs c02fecd to dev
All checks were successful
AI Review / AI Code Review (pull_request) Successful in 2s
PR Checks / Validate & Security Scan (pull_request) Successful in 11s
2026-02-22 21:09:51 +00:00
da71ddaff7 Merge pull request 'feat: add AnalysisTemplate + Feature Flags to web-app chart' (#226) from feat/analysis-template-feature-flags into main 2026-02-22 22:05:49 +01:00