Commit Graph
6 Commits
Author SHA1 Message Date
Admin Bot e1ab49dcdc fix: allow egress to authentik pod port 9000, not service port 80
CI / Vet, test, build (push) Successful in 3m46s
CI / Build and push image (push) Successful in 1m15s
2026-09-03 20:58:27 -07:00
Admin Bot a11a609985 fix: allow egress to iam namespace for JWKS validation
CI / Vet, test, build (push) Successful in 3m44s
CI / Build and push image (push) Successful in 1m16s
2026-09-03 20:43:55 -07:00
Admin Bot 8ba4e0facc fix: allow portfolio namespace to reach api-gateway for LLM chat
CI / Vet, test, build (push) Successful in 3m52s
CI / Build and push image (push) Successful in 1m17s
2026-09-01 11:15:23 -07:00
Admin Bot de34a6c8cc fix(network): allow poimen namespace to access api-gateway
CI / Vet, test, build (push) Canceled after 2m38s
CI / Build and push image (push) Canceled after 0s
Enable Poimen orchestrator and worker pods to reach the LLM API gateway
in the api namespace.

The api-gateway NetworkPolicy was only allowing traffic from:
- ingress-nginx (external ingress)
- monitoring (Prometheus scraping)

Added new ingress rule to allow:
- poimen namespace (orchestrator-job and worker pods)
- Port 8080 (api-gateway service port)

This fixes the DNS resolution error where orchestrator pods couldn't
reach http://api-gateway.api:8080/health from within the cluster.

Managed via ArgoCD in homelab/k8s/argocd/apps/55-api-gateway.yaml
which syncs from this repo's k8s/ directory.
2026-08-31 14:59:29 -07:00
Story Crater Bot 500eb74577 fix: match namespaces by kubernetes.io/metadata.name in netpol egress
kube-system and llm-serving carry only the automatic label, so DNS and
upstream egress matched nothing and every dispatch failed with 502.
2026-08-20 00:04:17 -07:00
Story Crater BotandClaude Opus 5 058f11cf2b chore: initial commit of Go API gateway
CI / Test (push) Canceled after 0s
CI / Vet (push) Canceled after 0s
CI / Build (push) Canceled after 0s
CI / Security (govulncheck) (push) Canceled after 0s
Baseline for the Kong replacement on api.riotpiao.com. Brings the working
tree under version control for the first time: gateway source, the task
board that drives the agent runs, test fixtures, and K8s manifests.

Anchor the gateway ignore rule to the repo root. Unanchored, "gateway"
also matched the cmd/gateway/ source directory, so the program entrypoint
was excluded from every commit.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>
2026-08-19 20:54:34 -07:00