release: v0.10.22 - fix: Reduce CI activation retry from 15 to 5 attempts to stay under proxy timeout

changelog/v0.10.22.md

@@ -0,0 +1,11 @@
+# v0.10.22
+
+**Released:** 2026-01-31
+
+## Changes
+
+fix: Reduce CI activation retry from 15 to 5 attempts to stay under proxy timeout
+
+---
+
+**Image:** `ghcr.io/orchard9/rdev-api:v0.10.22`

deployments/k8s/base/rdev-api.yaml

@@ -24,7 +24,7 @@ spec:
       serviceAccountName: rdev-api
       containers:
         - name: rdev-api
-          image: ghcr.io/orchard9/rdev-api:v0.10.21
+          image: ghcr.io/orchard9/rdev-api:v0.10.22
           imagePullPolicy: Always
 
           ports:
@@ -121,6 +121,25 @@ spec:
                 secretKeyRef:
                   name: rdev-credentials
                   key: WOODPECKER_API_TOKEN
+            # CockroachDB for project database provisioning
+            - name: CRDB_HOST
+              value: "cockroachdb-public.databases.svc"
+            - name: CRDB_PORT
+              value: "26257"
+            - name: CRDB_USER
+              value: "root"
+            - name: CRDB_SSL_MODE
+              value: "disable"
+            # Redis for project cache provisioning
+            - name: REDIS_HOST
+              value: "redis.databases.svc"
+            - name: REDIS_PORT
+              value: "6379"
+            - name: REDIS_PASSWORD
+              valueFrom:
+                secretKeyRef:
+                  name: redis-credentials
+                  key: REDIS_PASSWORD
 
       imagePullSecrets:
         - name: ghcr-secret
@@ -229,3 +248,31 @@ roleRef:
   kind: ClusterRole
   name: rdev-api-deployer
   apiGroup: rbac.authorization.k8s.io
+---
+# Ingress for rdev-api
+apiVersion: networking.k8s.io/v1
+kind: Ingress
+metadata:
+  name: rdev-api
+  namespace: rdev
+  annotations:
+    cert-manager.io/cluster-issuer: letsencrypt-prod
+    traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.tls: "true"
+spec:
+  ingressClassName: traefik
+  rules:
+  - host: rdev.masq-ops.orchard9.ai
+    http:
+      paths:
+      - backend:
+          service:
+            name: rdev-api
+            port:
+              number: 8080
+        path: /
+        pathType: Prefix
+  tls:
+  - hosts:
+    - rdev.masq-ops.orchard9.ai
+    secretName: rdev-api-tls