Nick SzaunigandClaude Opus 5.5
c01a38835a
Platform backbone (plan 2026-10-13-plattform-rueckgrat), reviewed tasks: - run roles api/worker/job/all with shared startup checks (Task 1) - schema and migration for DomainEvent, deliveries, JobRun, ThrottlerHit (Task 2) - audit, notifications and domain events written in the same transaction (Task 3) - dispatcher with SKIP LOCKED claims, retries and stale release (Task 4) - worker building blocks: tick, LISTEN/NOTIFY wake-up, health (Task 5) - worker process and entry points (Task 6) - throttler counters in Postgres (Task 19) - separate keys per purpose with key ring (Task 20) - public origin page without exact location (Task 22) - shop keys split into read and write (Task 23) - Kustomize base, components, overlay encry, CI validation (Task 26) Field capture T3 (plan 2026-10-13-t3-erfassung-am-stand), reviewed tasks: - brood frames, read endpoints, apiary overview and offline pack - network basics, offline queue v3, navigation sheets, form building blocks - new inspection with last-time hints and weather, varroa per day, treatment prefill, apiary page with round - inspection photo (Task 10) is implemented, review pending Not rolled out. Remaining tasks follow in later commits. Co-Authored-By: Claude Opus 5.5 (1M context) <[email protected]>
31 lines
1.1 KiB
YAML
31 lines
1.1 KiB
YAML
apiVersion: networking.k8s.io/v1
|
|
kind: Ingress
|
|
metadata:
|
|
name: apicore-frontend
|
|
annotations:
|
|
# Requires cert-manager with a ClusterIssuer named "letsencrypt-prod"
|
|
# (or swap for whatever issuer/cert mechanism the cluster already uses).
|
|
cert-manager.io/cluster-issuer: letsencrypt-prod
|
|
# Nur Traffic ueber Cloudflare zulassen. Die Middleware liegt im Repo
|
|
# rke2-cluster (security/cloudflare-only-middlewares.yaml). Sie schuetzt vor
|
|
# Direktzugriff am Origin vorbei, nicht vor fremden Cloudflare-Zonen.
|
|
traefik.ingress.kubernetes.io/router.middlewares: apicore-cloudflare-only@kubernetescrd
|
|
spec:
|
|
# Der Cluster (RKE2) nutzt Traefik; nur damit wirkt die Middleware-Annotation oben.
|
|
ingressClassName: traefik
|
|
tls:
|
|
- hosts:
|
|
- apicore.example.com
|
|
secretName: apicore-frontend-tls
|
|
rules:
|
|
- host: apicore.example.com
|
|
http:
|
|
paths:
|
|
- path: /
|
|
pathType: Prefix
|
|
backend:
|
|
service:
|
|
name: apicore-frontend
|
|
port:
|
|
number: 80
|