claude 17e55ae0c9 fix: allow Kyverno egress to Gitea external for registry token exchange ...

After changing Gitea ROOT_URL to https://git.georgepet.duckdns.org,
the registry V2 auth challenge redirects to the external URL.
Kyverno needs to reach 185.47.204.231:443 for token exchange.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-24 21:29:00 +01:00

..

argocd-config

Phase 16: fine-grained RBAC (infra-operators) + DB rotation prep

2026-02-19 15:33:23 +01:00

gitea-external

feat: expose Gitea externally at git.georgepet.duckdns.org

2026-02-24 20:09:28 +01:00

infra-network-policies

fix: allow Kyverno egress to Gitea external for registry token exchange

2026-02-24 21:29:00 +01:00

keycloak

cleanup: remove oauth2-proxy-ingress.yaml

2026-02-24 06:52:02 +01:00

kyverno-policies

feat: switch Kyverno image verification to Enforce mode

2026-02-18 10:11:26 +01:00

longhorn-backup

feat: Longhorn S3 backup to MinIO (daily, retain 7)

2026-02-16 16:19:24 +01:00

namespaces

refactor: keep only prod namespace in manifests.yaml

2026-02-24 06:51:58 +01:00

operational-rbac

feat: rename naas-portal to paas-portal across all resources

2026-02-24 18:24:21 +01:00

pod-cleanup

fix: pod-cleanup image bitnami/kubectl:1.35 → bitnamilegacy/kubectl:1.33

2026-02-17 10:28:34 +01:00

policies

Enterprise: NetworkPolicy default-deny + LimitRange + ResourceQuota

2026-02-14 10:09:08 +01:00