From e1b8ccd6a4f12bdc0a9eadbe60e9e155490db1fa Mon Sep 17 00:00:00 2001
From: jordan <jordan.washburn@gmail.com>
Date: Sat, 31 Jan 2026 10:53:22 -0700
Subject: [PATCH] release: v0.10.22 - fix: Reduce CI activation retry from 15
 to 5 attempts to stay under proxy timeout

---
 changelog/v0.10.22.md              | 11 +++++++
 deployments/k8s/base/rdev-api.yaml | 49 +++++++++++++++++++++++++++++-
 2 files changed, 59 insertions(+), 1 deletion(-)
 create mode 100644 changelog/v0.10.22.md

diff --git a/changelog/v0.10.22.md b/changelog/v0.10.22.md
new file mode 100644
index 0000000..2e2f2a0
--- /dev/null
+++ b/changelog/v0.10.22.md
@@ -0,0 +1,11 @@
+# v0.10.22
+
+**Released:** 2026-01-31
+
+## Changes
+
+fix: Reduce CI activation retry from 15 to 5 attempts to stay under proxy timeout
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.22`
diff --git a/deployments/k8s/base/rdev-api.yaml b/deployments/k8s/base/rdev-api.yaml
index a0c01fb..2232388 100644
--- a/deployments/k8s/base/rdev-api.yaml
+++ b/deployments/k8s/base/rdev-api.yaml
@@ -24,7 +24,7 @@ spec:
       serviceAccountName: rdev-api
       containers:
         - name: rdev-api
-          image: ghcr.io/orchard9/rdev-api:v0.10.21
+          image: ghcr.io/orchard9/rdev-api:v0.10.22
           imagePullPolicy: Always
 
           ports:
@@ -121,6 +121,25 @@ spec:
                 secretKeyRef:
                   name: rdev-credentials
                   key: WOODPECKER_API_TOKEN
+            # CockroachDB for project database provisioning
+            - name: CRDB_HOST
+              value: "cockroachdb-public.databases.svc"
+            - name: CRDB_PORT
+              value: "26257"
+            - name: CRDB_USER
+              value: "root"
+            - name: CRDB_SSL_MODE
+              value: "disable"
+            # Redis for project cache provisioning
+            - name: REDIS_HOST
+              value: "redis.databases.svc"
+            - name: REDIS_PORT
+              value: "6379"
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: redis-credentials
+                  key: REDIS_PASSWORD
 
       imagePullSecrets:
         - name: ghcr-secret
@@ -229,3 +248,31 @@ roleRef:
   kind: ClusterRole
   name: rdev-api-deployer
   apiGroup: rbac.authorization.k8s.io
+---
+# Ingress for rdev-api
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: rdev-api
+  namespace: rdev
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: rdev.masq-ops.orchard9.ai
+    http:
+      paths:
+      - backend:
+          service:
+            name: rdev-api
+            port:
+              number: 8080
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - rdev.masq-ops.orchard9.ai
+    secretName: rdev-api-tls