Files
zeekay 48eda27ea0 deploy: pin :latest → semver across image refs
Replaces all ghcr.io/hanzoai/<svc>:latest pins with the latest published
semver tag for each service. Per CLAUDE.md auto-bump policy: mutable
branch tags (:latest, :main, :dev) are deprecated for cluster pins —
only immutable semver permitted.

Bulk update across services with published v* tags. Services without a
published semver remain on :latest until their release pipeline cuts a
v* tag.
2026-05-07 08:33:49 -07:00

103 lines
2.2 KiB
YAML

---
kind: Namespace
apiVersion: v1
metadata:
name: ingress
---
kind: ServiceAccount
apiVersion: v1
metadata:
name: ingress
namespace: ingress
---
kind: Deployment
apiVersion: apps/v1
metadata:
name: ingress
namespace: ingress
labels:
app: ingress
spec:
replicas: 1
selector:
matchLabels:
app: ingress
template:
metadata:
labels:
app: ingress
spec:
serviceAccountName: ingress
containers:
- name: ingress
image: ghcr.io/hanzoai/ingress:1.7.41
imagePullPolicy: Never
args:
- --api.insecure
- --log.level=debug
- --entrypoints.pweb.address=:80
- --entrypoints.pwebsecure.address=:443
- --entrypoints.privweb.address=:8080
- --entrypoints.privwebsecure.address=:4443
- --entrypoints.ingress.address=:9000
- --experimental.knative
- --providers.knative.publicEntrypoints=pweb,pwebsecure
- --providers.knative.publicService.namespace=ingress
- --providers.knative.publicService.name=ingress
- --providers.knative.privateEntrypoints=privweb,privwebsecure
- --providers.knative.privateService.namespace=ingress
- --providers.knative.privateService.name=privingress
- --providers.knative.throttleduration=2s
ports:
- name: pweb
containerPort: 80
- name: pwebsecure
containerPort: 443
- name: privweb
containerPort: 8080
- name: privwebsecure
containerPort: 4443
- name: ingress
containerPort: 9000
---
apiVersion: v1
kind: Service
metadata:
name: ingress
namespace: ingress
spec:
type: LoadBalancer
selector:
app: ingress
ports:
- port: 80
name: web
targetPort: pweb
- port: 443
name: websecure
targetPort: pwebsecure
- port: 9000
name: ingress
targetPort: ingress
---
apiVersion: v1
kind: Service
metadata:
name: privingress
namespace: ingress
spec:
selector:
app: ingress
ports:
- port: 80
name: web
targetPort: privweb
- port: 443
name: websecure
targetPort: privwebsecure