5 Commits

Include renames

Author	SHA1	Message	Date
Admin Bot	f199724b0a	fix: copy CA certs into distroless image for k8s API TLS	2026-08-26 16:09:35 -07:00
Admin Bot	fbc197b471	fix: replace client-go informer with REST loader, drop k8s deps ... Informer cache sync timed out due to transient 429 from API server. REST loader does one GET + retry, polls every 30s. Zero new deps. go.mod back to 1.25.4, CI back to golang:1.25-bookworm.	2026-08-26 15:49:34 -07:00
Admin Bot	eaeeb97b2a	feat: k8s informer for ServiceAdapter CRDs, bump CI to go1.26 ... - Add dynamic-client informer to watch ServiceAdapter CRs in-cluster - Remove typed scheme registration (dynamic client needs no DeepCopy) - Bump Dockerfile + CI images from golang:1.25 to golang:1.26 (k8s.io/[email protected] requires go>=1.26) - Wire informer into main.go startup with graceful fallback	2026-08-26 14:38:12 -07:00
Story Crater Bot	818c9881be	build: cross-compile the image to the target arch ... Build stage pinned to BUILDPLATFORM and GOARCH driven by TARGETARCH, so an amd64 image builds natively from an arm64 workstation instead of running the Go toolchain under QEMU. TARGETARCH defaults to amd64 — every cluster node is amd64, and a plain docker build on arm64 would otherwise produce an image the nodes cannot run.	2026-08-19 22:18:40 -07:00
Story Crater Bot	b0ce2fb67c	feat: build and publish the gateway image via Forgejo Actions ... - Dockerfile: multi-stage, distroless nonroot, CGO_ENABLED=0 static, commit SHA stamped via VERSION build arg. - .forgejo/workflows/ci.yaml: Forgejo reads .forgejo/, not .github/, and the runner declares only the "docker" label. Verify job on every push; image build and push gated to main. - Drop .github/workflows/ci.yml — this remote is Forgejo, so it never ran. - deployment.yaml: image from the Forgejo registry, forgejo-registry pull secret, runAsUser 65532 to match distroless nonroot. - kustomization.yaml: pin the tag in one place. Promoting a build is a one-line newTag bump, never :latest.	2026-08-19 21:48:11 -07:00