20b3364786
chore: ignore RUSTSEC-2023-0071 in cargo audit (no fixed upgrade available)
Release / release (push) Failing after 2m38s
2026-05-02 21:15:43 +02:00
968f7d0691
fix: resolve cargo audit command failure in CI/CD pipelines
Release / release (push) Failing after 2m13s
2026-05-02 21:10:34 +02:00
6ca42d10e6
fix: resolve unit test failures caused by rate limiting and fix mod.rs router passing
Release / release (push) Failing after 2m10s
2026-05-02 21:04:31 +02:00
32e7dc5ac1
deploy: bump image tag to v0.1.11
Release / release (push) Failing after 1m26s
2026-05-02 20:56:22 +02:00
dec92509ff
deploy: bump image tag to v0.1.10
Release / release (push) Failing after 53s
2026-05-02 20:48:56 +02:00
31f8ef74fe
chore: remediate code audit findings and fix CI pipeline failures
...
- Security: Add Secure flag to checkin identity cookie, implement rate limiting on login, and harden Helm security context.
- Security: Add cargo-audit to CI and Release pipelines for dependency vulnerability scanning.
- Backend: Enable SQLite WAL mode and fix AppState initialization in tests.
- Frontend: Fully type the API client, fix importStudents FormData handling, and pin dependency versions.
- Frontend: Add auto-logout on 401 and resolve authentication initialization race conditions.
- CI/CD: Pin pnpm version in release workflow and include lint/audit quality gates.
2026-05-02 20:40:05 +02:00
536638b594
deploy: bump image tag to v0.1.9
Release / release (push) Failing after 1m16s
2026-05-02 05:28:30 +02:00
66eed29c71
deploy: bump image tag to v0.1.8
Release / release (push) Failing after 2m31s
2026-05-02 03:22:29 +02:00
7cafc7e119
deploy: pin image tag to v0.1.7
2026-05-01 18:41:21 +02:00
0e7df590ca
tutortool: set successfulJobsHistoryLimit=1 on backup CronJob
...
Completed pods were showing 0/1 Ready and triggering false-positive
monitoring alerts.
2026-05-01 18:39:25 +02:00
a2b41b5131
feat: enable DEMO seed via values_override
Release / release (push) Successful in 3m23s
2026-04-30 00:50:17 +02:00
cffb97ff76
fix: use Recreate strategy so SQLite + RWO PVC redeploy fits tenant CPU quota
Release / release (push) Successful in 3m31s
2026-04-30 00:42:55 +02:00
58248897db
fix: lower CPU limit to 200m to fit rolling update within tenant quota
Release / release (push) Failing after 7m23s
2026-04-30 00:19:18 +02:00
b42ded93f6
feat: add DEMO env var to seed demo data on startup
Release / release (push) Failing after 7m24s
2026-04-29 23:05:05 +02:00
dcb4a92afd
fix(deploy): use generic 'http' sectionName for HTTP→HTTPS redirect route
2026-04-29 22:19:51 +02:00
03a1e70df3
fix(deploy): correct HTTPRoute parentRefs, cert-manager annotation, imagePullSecrets
...
Release / release (push) Failing after 56s
- httproute.yaml: name=default namespace=nginx-gateway (was: itsh-gateway, no namespace)
- httproute.yaml: add cert-manager.io/cluster-issuer annotation for TLS cert issuance
- httproute.yaml: parameterise sectionNames and parentRefs through values
- deployment.yaml: render imagePullSecrets from values (itsh-registry pull secret)
- values.yaml: add parentRefs, annotations, httpRedirectSectionName, imagePullSecrets
2026-04-29 21:24:13 +02:00
Claude
e01f7808a0
Overhaul build pipeline: pnpm, non-root image, Helm chart, CI+release workflows
...
CI / test (push) Failing after 1m35s
CI / test (pull_request) Failing after 1m34s
- db.rs: fix fresh-PVC startup crash by using SqliteConnectOptions with
create_if_missing(true) and foreign_keys(true); drops after_connect
- Dockerfile: switch to Node 22 + pnpm (corepack), run pnpm check before
build, copy backend/demo/ for TT_TEST_MODE support, non-root app user,
add HEALTHCHECK, remove baked-in JWT_SECRET
- .dockerignore: exclude node_modules, build artifacts, data/, logs
- deploy/: new Helm chart replacing k8s/ — Deployment, Service, HTTPRoute
(Gateway API), PVC (hcloud-volumes), CronJob backup, ServiceAccount, VPA;
JWT_SECRET sourced from pre-provisioned K8s Secret
- k8s/: removed (superseded by deploy/)
- ci.yml: replaces test.yml — Node 20->22, same test steps, adds no-push
Docker build; triggers on non-main pushes and PRs
- release.yml: new tag-driven workflow (v*.*.*) — runs tests, pushes image
to registry.itsh.dev/s0wlz/tutortool, deploys via helm upgrade
https://claude.ai/code/session_01N1kWaQJkz1fC7mUippdQR5
2026-04-29 19:11:29 +00:00
