Chris Farhood
03467ec947
chore(irc): remove namespace, now managed by infra repo
...
Security Scan / Checkov IaC Scan (push) Failing after 31s
Best Practices / Polaris PR Review (push) Has been skipped
Best Practices / Kube-score Analysis (push) Failing after 5s
Security Scan / Trivy PR Review (push) Has been skipped
Best Practices / Polaris Audit (push) Failing after 5s
Security Scan / Checkov PR Review (push) Has been skipped
Best Practices / Resource Usage Analysis (push) Successful in 5s
Validate Manifests / YAML Lint (push) Failing after 3s
Validate Manifests / Kubernetes Schema Validation (push) Successful in 6s
Best Practices / PR Summary Report (push) Has been skipped
Validate Manifests / Kustomize Build Test (push) Successful in 7s
Security Scan / Trivy Security Scan (push) Successful in 13s
Co-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com >
2026-05-22 11:17:29 -04:00
Chris Farhood
84ee1fa8b8
refactor: drop istio mesh egress, use cilium FQDN for znc egress filtering
...
Best Practices / Kube-score Analysis (push) Has been cancelled
Best Practices / Polaris Audit (push) Has been cancelled
Best Practices / Resource Usage Analysis (push) Has been cancelled
Best Practices / PR Summary Report (push) Has been cancelled
Best Practices / Polaris PR Review (push) Has been cancelled
Security Scan / Trivy Security Scan (push) Has been cancelled
Security Scan / Trivy PR Review (push) Has been cancelled
Security Scan / Checkov IaC Scan (push) Has been cancelled
Security Scan / Checkov PR Review (push) Has been cancelled
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
Validate Manifests / YAML Lint (push) Has been cancelled
Istio ambient cannot do hostname-based egress filtering without L7
processing (waypoint/sidecar). Cilium FQDN CiliumNetworkPolicy is the
right tool — DNS-aware L3/L4 enforcement.
- Remove waypoint deployment and namespace/service label references
- Move TheLounge HTTPRoute back to Cilium external gateway
- Add CiliumNetworkPolicy for znc: allow DNS + irc.passthepopcorn.me:6697
- Remove orphaned znc/egress.yaml (Istio VirtualService routing)
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com >
2026-05-16 18:03:11 -04:00
Chris Farhood
87c03682c4
feat(irc): add Istio ambient mode, waypoint, and AuthorizationPolicies
...
Best Practices / Polaris Audit (push) Has been cancelled
Best Practices / Resource Usage Analysis (push) Has been cancelled
Best Practices / PR Summary Report (push) Has been cancelled
Best Practices / Polaris PR Review (push) Has been cancelled
Security Scan / Trivy Security Scan (push) Has been cancelled
Security Scan / Trivy PR Review (push) Has been cancelled
Security Scan / Checkov IaC Scan (push) Has been cancelled
Security Scan / Checkov PR Review (push) Has been cancelled
Validate Manifests / YAML Lint (push) Has been cancelled
Validate Manifests / Kustomize Build Test (push) Has been cancelled
Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled
Best Practices / Kube-score Analysis (push) Has been cancelled
- Add namespace.yaml with istio ambient + waypoint labels
- Add waypoint Gateway (istio-waypoint) scoped to irc namespace
- Switch thelounge HTTPRoute from Cilium external to istio-external gateway
- Add AuthorizationPolicy for thelounge (allow inbound from gateway-system only)
- Add AuthorizationPolicy for znc (allow all on port 6501 for IRC clients)
- Add namespace: irc to root kustomization, remove dependency on targetNamespace
Generated with [Claude Code](https://claude.ai/code )
via [Happy](https://happy.engineering )
Co-Authored-By: Claude <noreply@anthropic.com >
Co-Authored-By: Happy <yesreply@happy.engineering >
2026-05-15 21:02:10 -04:00
Chris Farhood
9a6c78680b
fix: correct YAML indentation and add missing newlines
...
- Fix indentation in service.yaml files (thelounge and znc)
- Fix indentation in statefulset.yaml (thelounge)
- Add missing newlines at end of files
- Resolves yamllint errors from CI/CD workflows
Generated with [Claude Code](https://claude.ai/code )
via [Happy](https://happy.engineering )
Co-Authored-By: Claude <noreply@anthropic.com >
Co-Authored-By: Happy <yesreply@happy.engineering >
2026-02-08 10:52:50 -05:00
Chris Farhood
49604641a5
add some future references
2026-01-18 08:36:54 -05:00
Chris Farhood
877696c827
all done?
2026-01-17 12:27:44 -05:00
Chris Farhood
22349645da
try network policy again
2026-01-17 12:11:18 -05:00
Chris Farhood
5494e4125a
remove network policy
2026-01-17 12:04:38 -05:00
Chris Farhood
e22f22a3f8
apply a network policy to stop rfc1918
2026-01-17 11:50:59 -05:00
Chris Farhood
2516f0a47f
adjust security settings
2026-01-17 11:26:10 -05:00
Chris Farhood
504c3cd3c0
add example configmap.yaml
2026-01-17 09:03:19 -05:00
Chris Farhood
6c0c269520
initial commit
2026-01-17 08:40:50 -05:00
Chris Farhood