Commit Graph

4 Commits

Author SHA1 Message Date
claw 25545ee7ca fix(k8s): rename deployment/service/ingress to news-site
Align new manifest names with the live deployment so CI replaces
the existing news-site deployment instead of creating a parallel
signalledger one.

Changes:
- deployment name: signalledger -> news-site
- service name: signalledger -> news-site
- ingress name: signalledger -> news-site
- selector labels: app.kubernetes.io/name -> app: news-site
- ingress backend service: signalledger -> news-site
- ingress hosts: add news.claw.jopdorp.nl, keep signalledger.nl + www
- TLS secret: signalledger-tls -> news-site-tls (existing live secret)
- CI rollout target: deployment/signalledger -> deployment/news-site
2026-06-01 07:35:40 +00:00
claw 24d0ab736c fix(ingress): migrate from nginx to Traefik ingress controller
- Change ingressClassName from nginx to traefik
- Replace nginx configuration-snippet annotations with Traefik router annotations
- Extract security headers into dedicated Traefik Middleware CRD
- Update CI/CD pipeline to apply middleware manifest
- Document migration decision and deployment steps in README

ADR-002: Ingress Controller Migration (nginx → Traefik)
Migration strategy: in-place update
2026-05-31 16:25:41 +00:00
claw d5f59da076 security: add security headers via nginx ingress annotations
Build and Deploy / build-and-test (push) Successful in 18s
Build and Deploy / build-image (push) Failing after 25s
Build and Deploy / deploy (push) Has been skipped
Adds the following headers via configuration-snippet:
- Strict-Transport-Security (HSTS) with preload
- X-Frame-Options: DENY
- X-Content-Type-Options: nosniff
- Referrer-Policy: strict-origin-when-cross-origin
- Content-Security-Policy (AdSense-compatible)
- X-XSS-Protection
- Permissions-Policy

Closes t_31f12d65
2026-05-31 13:42:48 +00:00
claw abf29e61de feat: initial CI/CD pipeline, Dockerfile, K8s manifests, build+test scripts
Build and Deploy / build-and-test (push) Failing after 3m37s
Build and Deploy / build-image (push) Has been skipped
Build and Deploy / deploy (push) Has been skipped
2026-05-31 13:31:56 +00:00