8 Commits

Author	SHA1	Message	Date
jordan	a9ad3d8304	chore: accumulated platform hardening and CI fixes ... CI / Woodpecker: - Add explicit depends_on to all .woodpecker.yml steps (rdev + templates) - Fix skip_tls_verify -> skip-tls-verify (correct Kaniko flag name) - Add replicasets get/list to deployer RBAC for rollout status - Skeleton template: add failure:ignore on docs steps, Traefik TLS annotations on ingress, depends_on on verify step Component templates: - Fix container name in deploy steps (PROJECT_NAME-COMPONENT_NAME) - Replace kubectl scale with kubectl patch for replicas - Add post-deploy image verification and rollout status checks - Applied consistently across all 5 component templates Adapters: - gitea: Add HTTP client timeout (30s), context cancellation checks, handle 404 on GetRepo/DeleteRepo - zot: Add retry with exponential backoff (doWithRetry), limit response body reads to 10MB - cockroach: Use net.JoinHostPort for IPv6-safe DSN construction - woodpecker: Fix error wrapping (%v -> %w) - redis: Fix error wrapping (%v -> %w) - deployer: Add context cancellation checks Services: - apikey_service: Fix error wrapping (%v -> %w) - component_deploy: Fix error wrapping (%v -> %w) - project_infra: Fix error wrapping (%v -> %w) - webhook/dispatcher: Fix error wrapping (%v -> %w) Other: - CLAUDE.md: Add guide links for Gitea, Go 1.25, Woodpecker v3, Traefik v3, Zot registry - circuitbreaker: Add test for error wrapping - docs: Update deployment, troubleshooting, and runbook docs - health: Fix error wrapping (%v -> %w) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-10 23:16:56 -07:00
jordan	28ab98df0f	fix(ci): re-enable claudebox Kaniko cache after registry cleanup ... Registry was full (29.4GB/30GB) causing DIGEST_INVALID on all image pushes. Cleaned old test project repos, expanded PVC from 30Gi to 80Gi, re-enabled cache. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-09 20:55:13 -07:00
jordan	4a7fbe8faa	fix(ci): disable kaniko cache for claudebox to fix DIGEST_INVALID ... Corrupt cache blobs in rdev/claudebox/cache cause DIGEST_INVALID on push. Disable cache temporarily to force a clean build. Can re-enable once a good image is pushed and the cache is rebuilt. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-09 20:21:22 -07:00
jordan	2fd52dcfed	ci: fix container names in deploy step ... - Use 'worker' and 'claudebox' container names for rdev-worker deployment - Update both containers in rdev-worker deployment in single command Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 23:44:05 -07:00
jordan	60f98f3c18	ci: use woodpecker kaniko plugin instead of direct executor ... Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 23:26:39 -07:00
jordan	219ccf23d0	ci: fix Go version to 1.25 for tests ... Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 22:37:11 -07:00
jordan	e76567d84d	ci: trigger initial Woodpecker build ... Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 20:05:27 -07:00
jordan	dc00921703	ci: add Woodpecker CI for self-hosted builds ... - Add .woodpecker.yml with build steps for api, worker, claudebox - Update K8s manifests to use registry.threesix.ai/rdev/* - Remove ghcr-secret imagePullSecrets (Zot is unauthenticated) Builds will run on Woodpecker using kaniko, pushing to our internal Zot registry. This eliminates the QEMU cross-compilation issues on Apple Silicon. Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>	2026-02-05 19:26:44 -07:00