feat: deploy to Frostmoln production #203

Merged
argoyle merged 1 commits from feat/deploy-prod-frostmoln into master 2026-10-16 08:32:47 +00:00
Owner

Part of the dancefinder.unbound.se cutover to Frostmoln Production (infra: unboundsoftware/infra#1896, already applied).

  • Replaces the AWS deploy-prod job (failing since CI left AWS) with deploy-prod-frostmoln (deploy prod-frostmoln -n dancefinder), as schemas did.
  • Restricted securityContext (runAsNonRoot, drop ALL, seccomp RuntimeDefault) and imagePullSecrets: oci-registry (Platform registry).
  • Runs as uid 65534. The Frostmoln CronJob is suspended by hand after its first deploy and resumed by migrate-db.sh dancefinder --cutover (not in the manifest, so later deploys don't re-suspend it).

Merging deploys to Frostmoln only; DNS still points at AWS until the cutover.

🤖 Generated with Claude Code

https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi

Part of the dancefinder.unbound.se cutover to Frostmoln Production (infra: unboundsoftware/infra#1896, already applied). - Replaces the AWS `deploy-prod` job (failing since CI left AWS) with `deploy-prod-frostmoln` (`deploy prod-frostmoln -n dancefinder`), as schemas did. - Restricted securityContext (runAsNonRoot, drop ALL, seccomp RuntimeDefault) and `imagePullSecrets: oci-registry` (Platform registry). - Runs as uid 65534. The Frostmoln CronJob is suspended by hand after its first deploy and resumed by `migrate-db.sh dancefinder --cutover` (not in the manifest, so later deploys don't re-suspend it). Merging deploys to Frostmoln only; DNS still points at AWS until the cutover. 🤖 Generated with [Claude Code](https://claude.com/claude-code) https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi
argoyle added 1 commit 2026-10-16 08:23:22 +00:00
feat: deploy to Frostmoln production
dancefetcher / build (pull_request) Successful in 2m37s
dancefetcher / deploy-prod-frostmoln (pull_request) Skipped
b970bee95c
Replace the AWS deploy-prod job (failing since CI left AWS) with deploy-prod-frostmoln, and run under the restricted Pod Security profile with the namespace's oci-registry pull secret.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01H6eVuR4Yt3m7TbDTDwyZJi
argoyle merged commit 3630bfa380 into master 2026-10-16 08:32:47 +00:00
Sign in to join this conversation.