Commit Graph

Select branches

Hide Pull Requests

chore/remove-network-policies

feat/gitea-actions-standardization

fix/httproute-gateway-namespace

fix/znc-container-crash

main

Mono Color

• 1c5bc1115a Delete .gitea/workflows/best-practices.yaml main Chris Farhood 2026-05-22 15:40:07 +00:00
• fc753ea5ca Delete .gitea/workflows/security.yaml Chris Farhood 2026-05-22 15:40:00 +00:00
• 9dbac86289 Delete .gitea/workflows/validate.yaml Chris Farhood 2026-05-22 15:39:55 +00:00
• 060ac76748 feat(irc): migrate from Cilium to Istio AuthorizationPolicies Chris Farhood 2026-05-22 11:31:28 -04:00
• 03467ec947 chore(irc): remove namespace, now managed by infra repo Chris Farhood 2026-05-22 11:17:29 -04:00
• 2308e1103a fix(thelounge): allow ingress from cilium gateway entity Chris Farhood 2026-05-21 10:15:19 -04:00
• 19b175dcf2 feat(irc): restrict ingress to gateway and thelounge Chris Farhood 2026-05-17 08:17:20 -04:00
• ee93aca3b8 fix(irc): remove namespace from istio ambient mode Chris Farhood 2026-05-17 08:13:26 -04:00
• 2992d7d326 feat(thelounge): add cilium egress filtering Chris Farhood 2026-05-16 18:18:40 -04:00
• 84ee1fa8b8 refactor: drop istio mesh egress, use cilium FQDN for znc egress filtering Chris Farhood 2026-05-16 18:03:11 -04:00
• 31e6864a2a fix(irc): switch AuthorizationPolicies to selector-based for ztunnel L4 enforcement Chris Farhood 2026-05-15 22:53:56 -04:00
• 0614d6b91a fix(irc): bind services to waypoint for AuthorizationPolicy enforcement Chris Farhood 2026-05-15 22:46:21 -04:00
• 605002f58a feat(thelounge): add config.js with LDAP, reverseProxy, and sqlite storage Chris Farhood 2026-05-15 22:31:32 -04:00
• f577121ea7 chore: remove Happy Engineering commit annotation Chris Farhood 2026-05-15 22:18:43 -04:00
• 87c03682c4 feat(irc): add Istio ambient mode, waypoint, and AuthorizationPolicies Chris Farhood 2026-05-15 21:02:10 -04:00
• 8a9cf61137 fix(storage): migrate znc from block-truenas to ceph-block Chris Farhood 2026-04-17 23:30:34 -04:00
• 927bd66811 fix(irc): add init container to fix thelounge volume permissions Chris Farhood 2026-02-26 22:48:53 -05:00
• 37cb7b9a14 fix(irc): revert thelounge to ceph-block Chris Farhood 2026-02-26 22:46:54 -05:00
• be697980d5 chore(irc): migrate thelounge and znc storage to block-truenas Chris Farhood 2026-02-26 22:09:16 -05:00
• 64a658ce9e Merge pull request 'chore: remove NetworkPolicy resources for IRC apps' (#6) from chore/remove-network-policies into main Chris Farhood 2026-02-10 13:05:24 -05:00
• a0df6cd978 chore: remove NetworkPolicy resources for IRC apps chore/remove-network-policies Chris Farhood 2026-02-10 12:48:09 -05:00
• 0f4cf77ec3 Merge pull request 'fix: correct HTTPRoute gateway namespace to gateway-system' (#5) from fix/httproute-gateway-namespace into main Chris Farhood 2026-02-10 12:41:48 -05:00
• 91d790b651 fix: correct HTTPRoute gateway namespace to gateway-system fix/httproute-gateway-namespace Chris Farhood 2026-02-10 12:40:24 -05:00
• 976a758d10 Merge pull request 'chore: add comprehensive CI/CD exemptions for ZNC' (#4) from fix/znc-container-crash into main Chris Farhood 2026-02-10 12:32:45 -05:00
• 89e6bd7d99 fix: allow all ingress traffic to IRC apps fix/znc-container-crash Chris Farhood 2026-02-10 12:31:11 -05:00
• 92c2de75c9 chore: add additional kube-score ignores for privilege/probe tests Chris Farhood 2026-02-08 19:44:51 -05:00
• c88e6a745a chore: add comprehensive exemptions without lowering score threshold Chris Farhood 2026-02-08 19:40:00 -05:00
• 991b1f4407 chore: add notReadOnlyRootFilesystem exemption and lower Polaris threshold Chris Farhood 2026-02-08 19:38:48 -05:00
• 99f9ec453d chore: add comprehensive CI/CD exemptions for ZNC Chris Farhood 2026-02-08 19:32:37 -05:00
• 9af4b27510 Merge pull request 'fix: remove PUID/PGID env vars from ZNC container' (#2) from fix/znc-container-crash into main Chris Farhood 2026-02-08 14:38:01 -05:00
• 31673ea837 chore: add Checkov exemptions for ZNC root container Chris Farhood 2026-02-08 11:15:59 -05:00
• 5a5cfb2847 fix: remove PUID/PGID env vars from ZNC container Chris Farhood 2026-02-08 11:12:00 -05:00
• a569047275 fix: revert ZNC security hardening for LinuxServer container Chris Farhood 2026-02-08 11:07:21 -05:00
• 9a6c78680b fix: correct YAML indentation and add missing newlines Chris Farhood 2026-02-08 10:52:50 -05:00
• eb95639158 Merge pull request 'feat/gitea-actions-standardization' (#1) from feat/gitea-actions-standardization into main Chris Farhood 2026-02-08 10:45:37 -05:00
• 6eca981e17 fix: remove serviceName from StatefulSets (not needed) feat/gitea-actions-standardization Chris Farhood 2026-02-08 10:40:34 -05:00
• 956c39c1c5 fix: add remaining kube-score ignores for valid patterns Chris Farhood 2026-02-08 10:34:35 -05:00
• 4705c39523 docs: enhance README with architecture and development details Chris Farhood 2026-02-08 10:10:05 -05:00
• a8e16c93ee fix: remove Flux validation and fix YAML linting Chris Farhood 2026-02-08 10:09:28 -05:00
• 9c70b82fb3 security: implement proper security hardening Chris Farhood 2026-02-08 10:06:36 -05:00
• 43d6bab89e docs: add critical Flux CD deployment notes Chris Farhood 2026-02-08 10:03:47 -05:00
• c8ee58c67f fix: preserve Flux variable substitution in HTTPRoute Chris Farhood 2026-02-08 10:03:04 -05:00
• 344de6f4d2 fix: resolve CI/CD workflow failures and add CLAUDE.md Chris Farhood 2026-02-08 10:00:56 -05:00
• 7e66e879a4 feat: add polaris approve/deny pr review workflow Chris Farhood 2026-02-08 09:37:13 -05:00
• 18cb3aa7ed feat: Add Gitea Actions workflows for validation and security Chris Farhood 2026-02-08 09:29:33 -05:00
• 49604641a5 add some future references Chris Farhood 2026-01-18 08:36:54 -05:00
• 03f99cae2e adjust policy for dns Chris Farhood 2026-01-17 20:33:50 -05:00
• f4e0053b56 fix dns? Chris Farhood 2026-01-17 20:22:39 -05:00
• 2df30dfca8 add health checks Chris Farhood 2026-01-17 20:20:06 -05:00
• 2808c51108 fix indentation Chris Farhood 2026-01-17 20:14:59 -05:00
• 3b69cb6384 deploy with instance labels Chris Farhood 2026-01-17 20:14:22 -05:00
• 36eb6e1ef0 removing unneeded namespace tag Chris Farhood 2026-01-17 20:10:47 -05:00
• 531fe04ffe networkpolicy correction Chris Farhood 2026-01-17 12:29:03 -05:00
• 877696c827 all done? Chris Farhood 2026-01-17 12:27:44 -05:00
• ef4a0c19ef hrm Chris Farhood 2026-01-17 12:25:42 -05:00
• c0e374bd65 fix api v Chris Farhood 2026-01-17 12:22:21 -05:00
• c55fc7fa47 adjust policy for polaris Chris Farhood 2026-01-17 12:15:33 -05:00
• 22349645da try network policy again Chris Farhood 2026-01-17 12:11:18 -05:00
• 5494e4125a remove network policy Chris Farhood 2026-01-17 12:04:38 -05:00
• 2f5e80dd31 allow all ingress Chris Farhood 2026-01-17 12:02:43 -05:00
• 8e8386b1fe backward Chris Farhood 2026-01-17 11:58:42 -05:00
• 1b75746642 allow lan Chris Farhood 2026-01-17 11:57:40 -05:00
• f95d0f7cf0 try again Chris Farhood 2026-01-17 11:54:55 -05:00
• e22f22a3f8 apply a network policy to stop rfc1918 Chris Farhood 2026-01-17 11:50:59 -05:00
• b08326169f cleanup network access Chris Farhood 2026-01-17 11:49:12 -05:00
• 1850c12905 again Chris Farhood 2026-01-17 11:43:19 -05:00
• d939b88fe4 rollback Chris Farhood 2026-01-17 11:42:21 -05:00
• d9d18a71f7 cant add label to pod Chris Farhood 2026-01-17 11:40:51 -05:00
• 71907f24dd try dropping privs for znc Chris Farhood 2026-01-17 11:39:03 -05:00
• a685eca1f5 more polaris findings Chris Farhood 2026-01-17 11:34:39 -05:00
• c77b0aa065 roll some back Chris Farhood 2026-01-17 11:28:10 -05:00
• 2516f0a47f adjust security settings Chris Farhood 2026-01-17 11:26:10 -05:00
• e2cf8ff1b0 adding kustomizations to force declaration of manifests Chris Farhood 2026-01-17 09:12:48 -05:00
• 504c3cd3c0 add example configmap.yaml Chris Farhood 2026-01-17 09:03:19 -05:00
• 6c0c269520 initial commit Chris Farhood 2026-01-17 08:40:50 -05:00
• 6eae4c6fa1 Initial commit Chris Farhood 2026-01-17 13:36:02 +00:00