Author SHA1 Message Date
argoyleandClaude Opus 5.5 0f7610d03f fix: make the nginx config readable by the unprivileged user
schemas-app / build (pull_request) Successful in 4m9s
schemas-app / deploy-prod-frostmoln (pull_request) Skipped
COPY keeps the source file's mode; a 600 file (local checkouts) left
uid 101 unable to read it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
2026-10-14 22:26:30 +02:00
argoyleandClaude Opus 5.5 1646ee1bc3 feat: deploy to Frostmoln production
The AWS deploy-prod job has failed since CI left AWS (no k8s.unbound.se
context on the runners). Deploys now go to the Frostmoln production
cluster (namespace schemas), the way the sites do.

Frostmoln enforces restricted Pod Security: the pod runs as the image's
non-root user with a matching securityContext. The prod-only manifests
move to the prod-frostmoln target; the ALB ingress becomes a Traefik one
with a Let's Encrypt certificate.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu
2026-10-14 22:15:38 +02:00
3 changed files with 350 additions and 289 deletions

No files matched your search

+1 -1
View File
@@ -13,7 +13,7 @@ FROM scratch as export
COPY --from=builder /build/coverage / COPY --from=builder /build/coverage /
# Unprivileged (uid 101, port 8080): Frostmoln enforces restricted Pod Security. # Unprivileged (uid 101, port 8080): Frostmoln enforces restricted Pod Security.
FROM nginxinc/nginx-unprivileged:1.31.7@sha256:94193d5c4c5df716f412bb08eb97956d98fe6b59886f0bc57d6d3a3402a88a02 FROM nginxinc/nginx-unprivileged:1.31.6@sha256:1d26a516fb93b18f9c0214dc9c645054486e516f13ff09ef63d5bd5c622278a2
MAINTAINER Joakim Olsson <joakim@unbound.se> MAINTAINER Joakim Olsson <joakim@unbound.se>
COPY --chmod=644 ./nginx/nginx.conf /etc/nginx/nginx.conf COPY --chmod=644 ./nginx/nginx.conf /etc/nginx/nginx.conf
+340 -279
View File
File diff suppressed because it is too large. Load diff
+9 -9
View File
@@ -21,10 +21,10 @@
"@apollo/client": "3.14.1", "@apollo/client": "3.14.1",
"@auth0/auth0-vue": "2.11.0", "@auth0/auth0-vue": "2.11.0",
"@vue/apollo-composable": "4.2.2", "@vue/apollo-composable": "4.2.2",
"graphql": "17.0.2", "graphql": "16.14.2",
"graphql-ws": "6.4.1", "graphql-ws": "6.3.0",
"nuxt": "4.6.1", "nuxt": "4.6.1",
"vue": "3.5.44", "vue": "3.5.43",
"vuetify-nuxt-module": "0.19.5" "vuetify-nuxt-module": "0.19.5"
}, },
"version": "1.0.0", "version": "1.0.0",
@@ -37,28 +37,28 @@
"@commitlint/cli": "21.2.3", "@commitlint/cli": "21.2.3",
"@commitlint/config-conventional": "21.2.3", "@commitlint/config-conventional": "21.2.3",
"@graphql-codegen/cli": "7.4.6", "@graphql-codegen/cli": "7.4.6",
"@graphql-codegen/typed-document-node": "7.2.0", "@graphql-codegen/typed-document-node": "7.1.1",
"@graphql-codegen/typescript": "6.1.2", "@graphql-codegen/typescript": "6.1.2",
"@graphql-codegen/typescript-operations": "6.1.10", "@graphql-codegen/typescript-operations": "6.1.10",
"@graphql-codegen/typescript-vue-apollo": "5.0.1", "@graphql-codegen/typescript-vue-apollo": "5.0.1",
"@nuxt/devtools": "3.4.3", "@nuxt/devtools": "3.4.2",
"@nuxt/eslint": "1.17.0", "@nuxt/eslint": "1.17.0",
"@nuxtjs/stylelint-module": "5.2.1", "@nuxtjs/stylelint-module": "5.2.1",
"@stylistic/eslint-plugin": "5.10.0", "@stylistic/eslint-plugin": "5.10.0",
"@vitejs/plugin-vue": "6.0.10", "@vitejs/plugin-vue": "6.0.10",
"@vitest/coverage-v8": "5.0.5", "@vitest/coverage-v8": "5.0.3",
"@vue/test-utils": "2.5.1", "@vue/test-utils": "2.5.1",
"eslint": "10.12.0", "eslint": "10.12.0",
"eslint-plugin-simple-import-sort": "14.0.0", "eslint-plugin-simple-import-sort": "14.0.0",
"eslint-plugin-vue": "10.11.1", "eslint-plugin-vue": "10.11.1",
"jsdom": "30.1.3", "jsdom": "30.1.2",
"postcss-html": "2.0.0", "postcss-html": "2.0.0",
"stylelint": "17.16.0", "stylelint": "17.16.0",
"stylelint-config-recommended-vue": "2.0.0", "stylelint-config-recommended-vue": "2.0.0",
"stylelint-config-standard": "40.0.0", "stylelint-config-standard": "40.0.0",
"typescript": "6.0.3", "typescript": "6.0.3",
"typescript-eslint": "8.71.2", "typescript-eslint": "8.71.1",
"vitest": "5.0.5", "vitest": "5.0.3",
"vue-eslint-parser": "10.4.1" "vue-eslint-parser": "10.4.1"
}, },
"overrides": { "overrides": {