farhoodliquor/irc

Archived

Author	SHA1	Message	Date
Chris Farhood	060ac76748	feat(irc): migrate from Cilium to Istio AuthorizationPolicies Best Practices / Kube-score Analysis (push) Failing after 6s Details Security Scan / Trivy PR Review (push) Has been skipped Details Best Practices / Polaris PR Review (push) Has been skipped Details Security Scan / Checkov PR Review (push) Has been skipped Details Validate Manifests / YAML Lint (push) Successful in 4s Details Validate Manifests / Kustomize Build Test (push) Successful in 3s Details Security Scan / Trivy Security Scan (push) Successful in 12s Details Best Practices / Polaris Audit (push) Failing after 9s Details Best Practices / Resource Usage Analysis (push) Successful in 5s Details Best Practices / PR Summary Report (push) Has been skipped Details Validate Manifests / Kubernetes Schema Validation (push) Successful in 6s Details Security Scan / Checkov IaC Scan (push) Failing after 52s Details Replace CiliumNetworkPolicies with Istio AuthorizationPolicies, point the thelounge HTTPRoute at the istio-external gateway, and give each workload a dedicated ServiceAccount for precise mTLS identity. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-22 11:31:28 -04:00
Chris Farhood	84ee1fa8b8	refactor: drop istio mesh egress, use cilium FQDN for znc egress filtering Best Practices / Kube-score Analysis (push) Has been cancelled Details Best Practices / Polaris Audit (push) Has been cancelled Details Best Practices / Resource Usage Analysis (push) Has been cancelled Details Best Practices / PR Summary Report (push) Has been cancelled Details Best Practices / Polaris PR Review (push) Has been cancelled Details Security Scan / Trivy Security Scan (push) Has been cancelled Details Security Scan / Trivy PR Review (push) Has been cancelled Details Security Scan / Checkov IaC Scan (push) Has been cancelled Details Security Scan / Checkov PR Review (push) Has been cancelled Details Validate Manifests / Kustomize Build Test (push) Has been cancelled Details Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled Details Validate Manifests / YAML Lint (push) Has been cancelled Details Istio ambient cannot do hostname-based egress filtering without L7 processing (waypoint/sidecar). Cilium FQDN CiliumNetworkPolicy is the right tool — DNS-aware L3/L4 enforcement. - Remove waypoint deployment and namespace/service label references - Move TheLounge HTTPRoute back to Cilium external gateway - Add CiliumNetworkPolicy for znc: allow DNS + irc.passthepopcorn.me:6697 - Remove orphaned znc/egress.yaml (Istio VirtualService routing) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>	2026-05-16 18:03:11 -04:00
Chris Farhood	87c03682c4	feat(irc): add Istio ambient mode, waypoint, and AuthorizationPolicies Best Practices / Polaris Audit (push) Has been cancelled Details Best Practices / Resource Usage Analysis (push) Has been cancelled Details Best Practices / PR Summary Report (push) Has been cancelled Details Best Practices / Polaris PR Review (push) Has been cancelled Details Security Scan / Trivy Security Scan (push) Has been cancelled Details Security Scan / Trivy PR Review (push) Has been cancelled Details Security Scan / Checkov IaC Scan (push) Has been cancelled Details Security Scan / Checkov PR Review (push) Has been cancelled Details Validate Manifests / YAML Lint (push) Has been cancelled Details Validate Manifests / Kustomize Build Test (push) Has been cancelled Details Validate Manifests / Kubernetes Schema Validation (push) Has been cancelled Details Best Practices / Kube-score Analysis (push) Has been cancelled Details - Add namespace.yaml with istio ambient + waypoint labels - Add waypoint Gateway (istio-waypoint) scoped to irc namespace - Switch thelounge HTTPRoute from Cilium external to istio-external gateway - Add AuthorizationPolicy for thelounge (allow inbound from gateway-system only) - Add AuthorizationPolicy for znc (allow all on port 6501 for IRC clients) - Add namespace: irc to root kustomization, remove dependency on targetNamespace Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>	2026-05-15 21:02:10 -04:00
Chris Farhood	91d790b651	fix: correct HTTPRoute gateway namespace to gateway-system	2026-02-10 12:41:27 -05:00
Chris Farhood	9a6c78680b	fix: correct YAML indentation and add missing newlines - Fix indentation in service.yaml files (thelounge and znc) - Fix indentation in statefulset.yaml (thelounge) - Add missing newlines at end of files - Resolves yamllint errors from CI/CD workflows Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>	2026-02-08 10:52:50 -05:00
Chris Farhood	6c0c269520	initial commit	2026-01-17 08:40:50 -05:00

6 Commits