feat: deploy to Frostmoln production #3100

2026-10-16T08:23:18Z

argoyle commented

2026-10-16 08:23:18 +00:00

Part of the dancefinder.unbound.se cutover to Frostmoln Production (infra: unboundsoftware/infra#1896, already applied).

Replaces the AWS deploy-prod job (failing since CI left AWS) with deploy-prod-frostmoln (deploy prod-frostmoln -n dancefinder), as schemas did.
Restricted securityContext (runAsNonRoot, drop ALL, seccomp RuntimeDefault) and imagePullSecrets: oci-registry (Platform registry).
Switches to nginxinc/nginx-unprivileged (same pin as schemas-app), listening on 8080 as uid 101; the Service keeps port 80. Traefik Ingress for /, PDB, HPA moved to -prod-frostmoln; ALB Ingress dropped; Service ClusterIP.

Merging deploys to Frostmoln only; DNS still points at AWS until the cutover.

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi

Part of the dancefinder.unbound.se cutover to Frostmoln Production (infra: unboundsoftware/infra#1896, already applied). - Replaces the AWS `deploy-prod` job (failing since CI left AWS) with `deploy-prod-frostmoln` (`deploy prod-frostmoln -n dancefinder`), as schemas did. - Restricted securityContext (runAsNonRoot, drop ALL, seccomp RuntimeDefault) and `imagePullSecrets: oci-registry` (Platform registry). - Switches to `nginxinc/nginx-unprivileged` (same pin as schemas-app), listening on 8080 as uid 101; the Service keeps port 80. Traefik Ingress for `/`, PDB, HPA moved to `-prod-frostmoln`; ALB Ingress dropped; Service ClusterIP. Merging deploys to Frostmoln only; DNS still points at AWS until the cutover. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi

argoyle added 1 commit 2026-10-16 08:23:19 +00:00

feat: deploy to Frostmoln production

dancefinder-app / build (pull_request) Successful in 1m42s

Details

dancefinder-app / deploy-prod-frostmoln (pull_request) Skipped

Details

ddbceeb7b5

Replace the AWS deploy-prod job (failing since CI left AWS) with deploy-prod-frostmoln, and run under the restricted Pod Security profile with the namespace's oci-registry pull secret.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi

argoyle merged commit 2abfd08018 into main

2026-10-16 08:32:03 +00:00

argoyle deleted branch feat/deploy-prod-frostmoln

2026-10-16 08:32:03 +00:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: dancefinder/dancefinder-app#3100