|
|
16e8c6c865
|
ci: upgrade Helm to v4.1.4, switch images to Alpine 3.23, disable backup cron
Release / release (push) Successful in 5m28s
- release.yml: bump Helm v3.16.2 → v4.1.4; replace --wait with
--rollback-on-failure (Helm 4 rename, implies --wait)
- Dockerfile: backend builder rust:1.95-slim-bookworm → rust:1.95-alpine3.23
(adds cmake/g++/perl/nasm/sqlite-dev for aws-lc-rs + sqlx); runtime
debian:trixie-slim → alpine:3.23 (adds sqlite-libs, uses adduser -D)
- cronjob-backup: gate on backup.enabled, pin image to alpine:3.23
- values.yaml: backup.enabled default true
- values_override.yaml: backup.enabled: false (disabled until tested)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
|
2026-05-06 15:29:51 +02:00 |
|
|
|
03a1e70df3
|
fix(deploy): correct HTTPRoute parentRefs, cert-manager annotation, imagePullSecrets
Release / release (push) Failing after 56s
- httproute.yaml: name=default namespace=nginx-gateway (was: itsh-gateway, no namespace)
- httproute.yaml: add cert-manager.io/cluster-issuer annotation for TLS cert issuance
- httproute.yaml: parameterise sectionNames and parentRefs through values
- deployment.yaml: render imagePullSecrets from values (itsh-registry pull secret)
- values.yaml: add parentRefs, annotations, httpRedirectSectionName, imagePullSecrets
|
2026-04-29 21:24:13 +02:00 |
|
Claude
|
e01f7808a0
|
Overhaul build pipeline: pnpm, non-root image, Helm chart, CI+release workflows
CI / test (push) Failing after 1m35s
CI / test (pull_request) Failing after 1m34s
- db.rs: fix fresh-PVC startup crash by using SqliteConnectOptions with
create_if_missing(true) and foreign_keys(true); drops after_connect
- Dockerfile: switch to Node 22 + pnpm (corepack), run pnpm check before
build, copy backend/demo/ for TT_TEST_MODE support, non-root app user,
add HEALTHCHECK, remove baked-in JWT_SECRET
- .dockerignore: exclude node_modules, build artifacts, data/, logs
- deploy/: new Helm chart replacing k8s/ — Deployment, Service, HTTPRoute
(Gateway API), PVC (hcloud-volumes), CronJob backup, ServiceAccount, VPA;
JWT_SECRET sourced from pre-provisioned K8s Secret
- k8s/: removed (superseded by deploy/)
- ci.yml: replaces test.yml — Node 20->22, same test steps, adds no-push
Docker build; triggers on non-main pushes and PRs
- release.yml: new tag-driven workflow (v*.*.*) — runs tests, pushes image
to registry.itsh.dev/s0wlz/tutortool, deploys via helm upgrade
https://claude.ai/code/session_01N1kWaQJkz1fC7mUippdQR5
|
2026-04-29 19:11:29 +00:00 |
|
