Add HTTP to HTTPS redirect middleware and IngressRoute
- Create redirect-to-https middleware for permanent redirects - Add catch-all IngressRoute on web entrypoint to redirect all kamocrm.com domains to HTTPS - Fixe...
Remove hostPort from Traefik deployment
- Port 443 is already bound by ingress-nginx via CNI hostPort - Keep standard containerPort configuration
Change Traefik service to LoadBalancer with externalIPs for direct access
- Use LoadBalancer type with externalIPs instead of NodePort - Allows router to forward port 443 directly to service IP - This should bypass ingress-nginx hostP...
Add hostPort to Traefik deployment for direct port access
- Use hostPort 443 for websecure entrypoint to bypass NodePort - Allows router to forward port 443 directly to Traefik - Also set hostPort for web (30080) and a...
Traefik NodePort 서비스에 대한 외부 트래픽 정책 설정
- 라우터에서 외부 트래픽의 적절한 여정을 허용 - 더 나은 로깅을 위한 소스 IP 주소 보존
MediaService 배포에서 TLS 인증서 선택
- 선택 추가 : wildcard-kamocrm-com 비밀 볼륨에 true - cert-converter init 컨테이너를 업데이트하여 누락된 인증서를 안전하게 처리하십시오
Update CockroachDB StatefulSet to use dynamic VPN IP based on node hostname
- Fix advertise-addr to use VPN IP (10.8.1.1 for k1m1, 10.8.2.1 for k2m1) - Update join parameter to use VPN IPs instead of hostnames - Update node certificate ...
K1m1 및 k2m1에 대한 WireGuard 엔드포인트 IP 업데이트
- k1m1: 192.168.1.198 → 192.168.1.201 - k2m1: 192.168.1.169 → 192.168.1.202
Update NATS and MinIO configuration to use new VPN IPs
- Update NATS URLs from old Tailscale IPs (100.64.x.x) to Kubernetes service DNS - Update MinIO IPs from old Tailscale IPs to new VPN IPs (10.8.x.x) - Fixes NAT...
CockroachDB secret 생성에 노드 인증서 추가
- node.crt 및 node.key를 cockroachdb 디렉토리에 추가하십시오. - CI/CD 워크플로우를 업데이트하여 노드 인증서를 생성할 때 *** secret - CockroachDB CrashLoopBackOff 문제 수정
핸들 BackoffLimitExceeded by deleting 실패 일 과 retrying
- 작업이 BackoffLimitExceed 및 pods로 실패하면 정리, 삭제 및 재작업 - 새로운 팟에서 신선한 로그를 얻을 수 있습니다. - Catches 'already initialized' 오류가 재발행
핸들 BackoffLimit지난을 삭제하고 복원 작업
- 작업이 BackoffLimitExceed 및 pods로 실패하면 정리, 삭제 및 재작업 - 클러스터가 이미 초기화되는 경우 재발행 및 성공할 수 있습니다. - transient 실패의 더 나은 취급
Improve cluster connectivity test in CockroachDB init workflow
Improve CockroachDB init job error handling when pods are cleaned up
- Check previous pod logs if current pods are not found - Test cluster connectivity to verify if already initialized - Better handling of failed jobs with clean...
MinIO secret creation from workflow (MinIO is managed manually)
Add automatic *** secret creation
- Create *** secret on both k1m1 and k2m1 - Secret contains MINIO_CURRENT_HOST pointing to k0m1 MinIO instance (http://10.8.0.1:9000) - Fixes kamowssecurity-dep...
Resolve Traefik, NATS, and CockroachDB deployment issues
- Remove hostPort from Traefik deployment (conflicts with NodePort service) - Fix NATS deployment to only deploy server-specific statefulsets (nats-k1m1, nats-k...