Commit Graph

1025 Commits

Author SHA1 Message Date
bd5afb438d Merge pull request 'devops support AKV' (#73) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/73
2025-08-18 10:07:06 +00:00
Nicolas
ca97023409 devops support AKV 2025-08-18 18:06:26 +08:00
b6cbe38dbe Merge pull request 'Enable the content service to support akv' (#72) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/72
2025-08-18 09:54:03 +00:00
Nicolas
0d7dc1a81a Enable the content service to support akv 2025-08-18 17:53:35 +08:00
9a53b1f8c3 Merge pull request 'The production environment of the authentication service also fully supports AKV.' (#71) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/71
2025-08-18 09:44:44 +00:00
Nicolas
86f989e405 The production environment of the authentication service also fully supports AKV. 2025-08-18 17:44:17 +08:00
cd2a0f3963 Merge pull request 'Changed the secret configuration of central storage' (#70) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/70
2025-08-18 09:39:37 +00:00
Nicolas
cd9f42e143 Changed the secret configuration of central storage 2025-08-18 17:38:47 +08:00
dc84dacdf5 Merge pull request 'modified: freeleaps/helm-pkg/chat/templates/chat/deployment.yaml' (#69) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/69
2025-08-18 09:14:20 +00:00
Nicolas
44c074532b modified: freeleaps/helm-pkg/chat/templates/chat/deployment.yaml 2025-08-18 17:13:31 +08:00
1ca577884c Merge pull request 'feat(chat): migrate alpha and prod environments to use Azure Key Vault for sensitive data' (#68) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/68
2025-08-18 09:05:48 +00:00
Nicolas
377250ce6a feat(chat): migrate alpha and prod environments to use Azure Key Vault for sensitive data
- Add FreeleapsSecret configuration for Azure Key Vault integration
- Move sensitive data (mongodbUri, jwtSecretKey, stripeApiKey, etc.) from config to secrets
- Update deployment template to read from both config and FreeleapsSecret
- Comment out sensitive fields in chat-config.yaml
- Create freeleapssecret.yaml template for secret management
- Update both alpha and prod environment configurations
2025-08-18 17:05:05 +08:00
zhenyus
7741d7ba4c Merge branch 'master' of https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops 2025-08-18 16:33:45 +08:00
zhenyus
df862dfa39 refactor(devsvc): enhance secret management in values.yaml
- Removed hardcoded sensitive configurations (Gitea token, MongoDB URI, RabbitMQ password, and default Git password) from the values.yaml file.
- Introduced a structured secrets section to reference these sensitive values from FreeleapsSecretStore, improving security and maintainability.
- This change continues the effort to centralize and secure sensitive information management across the application.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 16:33:42 +08:00
dc7297967c Merge pull request 'feat(centralStorage): migrate alpha environment to use Azure Key Vault for sensitive data' (#67) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/67
2025-08-18 08:25:23 +00:00
Nicolas
69a2c112d1 feat(centralStorage): migrate alpha environment to use Azure Key Vault for sensitive data
- Add FreeleapsSecret configuration for Azure Key Vault integration
- Move sensitive data (mongodbUri, azureStorageDocumentApiKey, azureStorageDocumentApiEndpoint) from config to secrets
- Update deployment template to read from both config and FreeleapsSecret
- Comment out sensitive fields in central-storage-config.yaml
- Create freeleapssecret.yaml template for secret management
2025-08-18 16:24:11 +08:00
zhenyus
6584ab12c5 refactor(devsvc): remove hardcoded Git password from values.alpha.yaml
- Eliminated the default Git password from the configuration file to enhance security and align with the secret management strategy.
- This change continues the effort to manage sensitive information more securely across the application.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 16:21:57 +08:00
zhenyus
e898a18b4d refactor(devsvc): implement secret management for sensitive configurations
- Removed direct references to sensitive data (e.g., MongoDB URI, Gitea token, RabbitMQ password) in values files and replaced them with a structured secrets section.
- Updated deployment and configuration templates to inject secrets from FreeleapsSecretStore, enhancing security and maintainability.
- This change aligns with the new secret management strategy across the application.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 16:17:16 +08:00
zhenyus
b6614bfc4c refactor(authentication): update secret key references in values.alpha.yaml
- Changed the JWT and MongoDB URI secret key references to include the 'alpha' prefix for better environment differentiation.
- This update aligns with the recent changes in secret management for the authentication module.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 15:37:58 +08:00
zhenyus
363b408d39 refactor(authentication): update key reference in FreeleapsSecret template
- Changed the key reference from 'key' to 'secretKey' in freeleapssecret.yaml to improve clarity and consistency in secret management.
- This adjustment aligns with the recent updates to the secret management structure within the authentication module.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 15:33:28 +08:00
zhenyus
05aa22215e refactor(authentication): streamline secret reference assignment in deployment.yaml
- Introduced a variable for the target secret name to improve readability and maintainability of the secret injection logic.
- This change enhances the clarity of the deployment configuration for the authentication module.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 15:29:00 +08:00
zhenyus
e34a57bef5 refactor(authentication): update secret references in deployment and FreeleapsSecret templates
- Changed references from .Values.secrets to .Values.authentication.secrets in deployment.yaml and freeleapssecret.yaml to align with the new secret management structure.
- This update enhances the clarity and organization of secret management within the authentication module.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 15:27:26 +08:00
zhenyus
4da0d64995 feat(authentication): integrate secret management for JWT and MongoDB URI
- Added a secrets section in values.alpha.yaml to reference JWT secret key and MongoDB URI from a FreeleapsSecretStore.
- Updated deployment.yaml to inject these secrets as environment variables, enhancing security and configuration management.

Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-18 15:25:48 +08:00
freeleaps-gitops-bot
88c92ad274 ci(bump): bump frontend image version for prod to snapshot-7e1df4f 2025-08-18 05:25:27 +00:00
freeleaps-gitops-bot
af6801724a ci(bump): bump frontend image version for prod to 1.9.1 2025-08-18 05:25:11 +00:00
freeleaps-gitops-bot
2d382668d5 ci(bump): bump freeleaps image version for prod to 1.9.1 2025-08-18 04:41:47 +00:00
freeleaps-gitops-bot
e43e6be910 ci(bump): bump freeleaps image version for prod to snapshot-7e1df4f 2025-08-18 04:41:33 +00:00
freeleaps-gitops-bot
89c428a1cb ci(bump): bump chat image version for prod to snapshot-7e1df4f 2025-08-18 04:33:21 +00:00
freeleaps-gitops-bot
976e69342a ci(bump): bump chat image version for prod to 1.9.1 2025-08-18 04:33:08 +00:00
freeleaps-gitops-bot
953772d4bb ci(bump): bump frontend image version for alpha to snapshot-8e2caa8 2025-08-18 02:44:25 +00:00
freeleaps-gitops-bot
dc9800a0cd ci(bump): bump freeleaps image version for alpha to snapshot-8e2caa8 2025-08-18 02:18:41 +00:00
freeleaps-gitops-bot
0768fa715a ci(bump): bump chat image version for alpha to snapshot-8e2caa8 2025-08-18 02:10:55 +00:00
5eab97bc38 Merge pull request 'feat: enable log collection for devsvc service in prod environment' (#66) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/66
2025-08-13 11:31:32 +00:00
Nicolas
9af8c521d8 feat: enable log collection for devsvc service in prod environment 2025-08-13 19:30:54 +08:00
2260a203f1 Merge pull request 'fix: disable chat service metrics to resolve 404 errors' (#65) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/65
2025-08-13 01:52:43 +00:00
Nicolas
fb27f4acec fix: disable chat service metrics to resolve 404 errors
- Set metricsEnabled: false
- Disable ServiceMonitor
- Preserves log collection functionality
2025-08-13 09:52:06 +08:00
609e1a2a47 Merge pull request 'feat: enable log collection for prod environment' (#64) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/64
2025-08-13 01:42:31 +00:00
Nicolas
31f959f7a9 feat: enable log collection for prod environment
- Enable logIngest for chat and freeleaps services in prod
- Add Loki datasource to Grafana for prod environment
- Configure Loki log retention policy (30 days)
- Enable table manager for automatic log cleanup
2025-08-13 09:41:25 +08:00
zhenyus
2c6c9e38c1 feat(deployment): add DNS configuration option for single-request-reopen
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-12 16:34:38 +08:00
zhenyus
7e80fc6ca6 ci(bump): update authentication image version for prod to 1.3.1
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-12 15:39:10 +08:00
freeleaps-gitops-bot
4af391fe4f ci(bump): bump devops image version for prod to snapshot-c93ce6b 2025-08-12 05:29:14 +00:00
freeleaps-gitops-bot
29935296fd ci(bump): bump payment image version for prod to snapshot-c93ce6b 2025-08-12 05:24:58 +00:00
freeleaps-gitops-bot
96f7070b98 ci(bump): bump notification image version for prod to snapshot-c93ce6b 2025-08-12 05:20:04 +00:00
freeleaps-gitops-bot
19b5afb725 ci(bump): bump content image version for prod to snapshot-c93ce6b 2025-08-12 05:14:54 +00:00
freeleaps-gitops-bot
c8c9eb33a4 ci(bump): bump centralStorage image version for prod to snapshot-c93ce6b 2025-08-12 05:07:32 +00:00
freeleaps-gitops-bot
eacdf8fc92 ci(bump): bump authentication image version for prod to snapshot-c93ce6b 2025-08-12 05:02:47 +00:00
freeleaps-gitops-bot
cbfc9cbdd4 ci(bump): bump devops image version for prod to snapshot-804c71f 2025-08-12 04:59:55 +00:00
freeleaps-gitops-bot
70e1776f79 ci(bump): bump payment image version for prod to snapshot-804c71f 2025-08-12 04:54:34 +00:00
freeleaps-gitops-bot
6d8c23a828 ci(bump): bump notification image version for prod to snapshot-804c71f 2025-08-12 04:49:31 +00:00
freeleaps-gitops-bot
e29be059ca ci(bump): bump content image version for prod to snapshot-804c71f 2025-08-12 04:44:49 +00:00
freeleaps-gitops-bot
4bc4d79a54 ci(bump): bump centralStorage image version for prod to 1.4.0 2025-08-12 04:37:17 +00:00
freeleaps-gitops-bot
3f0a26819f ci(bump): bump centralStorage image version for prod to snapshot-804c71f 2025-08-12 04:37:07 +00:00
freeleaps-gitops-bot
5b3334cc95 ci(bump): bump authentication image version for prod to snapshot-804c71f 2025-08-12 04:32:38 +00:00
freeleaps-gitops-bot
b8c97931af ci(bump): bump authentication image version for prod to 1.4.0 2025-08-12 04:32:25 +00:00
freeleaps-gitops-bot
631a9a9382 ci(bump): bump authentication image version for alpha to snapshot-6e43296 2025-08-12 04:23:52 +00:00
freeleaps-gitops-bot
055c8737ff ci(bump): bump frontend image version for prod to snapshot-e534b2b 2025-08-12 03:46:15 +00:00
freeleaps-gitops-bot
3e5a680f0f ci(bump): bump freeleaps image version for prod to snapshot-e534b2b 2025-08-12 03:20:26 +00:00
freeleaps-gitops-bot
67f1776f0f ci(bump): bump chat image version for prod to snapshot-e534b2b 2025-08-12 03:12:49 +00:00
freeleaps-gitops-bot
f1d79865fa ci(bump): bump frontend image version for alpha to snapshot-c0c0aa9 2025-08-11 06:35:30 +00:00
freeleaps-gitops-bot
c9d13d533f ci(bump): bump freeleaps image version for alpha to snapshot-c0c0aa9 2025-08-11 06:09:13 +00:00
freeleaps-gitops-bot
7999521bbd ci(bump): bump chat image version for alpha to snapshot-c0c0aa9 2025-08-11 06:01:43 +00:00
freeleaps-gitops-bot
3f10af2af5 ci(bump): bump freeleaps image version for prod to snapshot-e42d7f6 2025-08-11 03:25:14 +00:00
freeleaps-gitops-bot
3246cd18c2 ci(bump): bump devops image version for prod to snapshot-c8a6275 2025-08-11 01:58:32 +00:00
freeleaps-gitops-bot
d1a2e98979 ci(bump): bump payment image version for prod to snapshot-c8a6275 2025-08-11 01:54:12 +00:00
freeleaps-gitops-bot
6a8529fdfc ci(bump): bump notification image version for prod to 1.3.1 2025-08-11 01:49:07 +00:00
freeleaps-gitops-bot
60161cfaf1 ci(bump): bump notification image version for prod to snapshot-c8a6275 2025-08-11 01:48:54 +00:00
freeleaps-gitops-bot
7a69eeb1a8 ci(bump): bump content image version for prod to 1.3.1 2025-08-11 01:44:07 +00:00
freeleaps-gitops-bot
44b04b28dc ci(bump): bump content image version for prod to snapshot-c8a6275 2025-08-11 01:43:51 +00:00
freeleaps-gitops-bot
8517eb7257 ci(bump): bump centralStorage image version for prod to snapshot-c8a6275 2025-08-11 01:40:45 +00:00
freeleaps-gitops-bot
a5d851f069 ci(bump): bump centralStorage image version for prod to 1.3.1 2025-08-11 01:35:50 +00:00
freeleaps-gitops-bot
b545149b37 ci(bump): bump authentication image version for prod to snapshot-c8a6275 2025-08-11 01:35:29 +00:00
freeleaps-gitops-bot
1dff360245 ci(bump): bump authentication image version for prod to 1.3.1 2025-08-11 01:30:44 +00:00
freeleaps-gitops-bot
0bdfab0154 ci(bump): bump devops image version for alpha to snapshot-e16c1dc 2025-08-11 01:29:50 +00:00
zhenyus
d332e27f46 fix: enable disk free limit in RabbitMQ configuration
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-08 16:17:18 +08:00
zhenyus
58c9bba85d Merge branch 'master' of https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops 2025-08-08 14:54:02 +08:00
zhenyus
bd9d1131ca fix: update RabbitMQ password in values.alpha.yaml
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-08 14:54:00 +08:00
freeleaps-gitops-bot
62da1ba53e ci(bump): bump devops image version for alpha to snapshot-6e1cb59 2025-08-08 05:07:09 +00:00
freeleaps-gitops-bot
d5c50e6eae ci(bump): bump devops image version for alpha to snapshot-fc4c8e7 2025-08-08 04:11:24 +00:00
d611ed79b3 Merge pull request 'feat: add RabbitMQ queue name environment variables for DevOps service' (#63) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/63
2025-08-08 04:11:00 +00:00
Nicolas
974007809d feat: add RabbitMQ queue name environment variables for DevOps service
- Add RABBITMQ_OUTPUT_QUEUE_NAME and RABBITMQ_INPUT_QUEUE_NAME environment variables
- Configure queue names in values.alpha.yaml and values.prod.yaml
- Update devops-config.yaml template to include new environment variables
- Set default queue names to 'freeleaps.devops.reconciler.output' and 'freeleaps.devops.reconciler.input'
- This enables configurable queue names to fix message consumption issues
2025-08-08 12:09:58 +08:00
freeleaps-gitops-bot
42c531357d ci(bump): bump devops image version for alpha to snapshot-52ec8f8 2025-08-08 03:37:36 +00:00
b797f17816 Merge pull request 'feat: enable log ingest for central storage in prod environment' (#62) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/62
2025-08-08 02:32:13 +00:00
Nicolas
71283aa2da feat: enable log ingest for central storage in prod environment 2025-08-08 10:31:22 +08:00
zhenyus
e4736d59ea fix: update RabbitMQ auth password and configuration settings
Signed-off-by: zhenyus <zhenyus@mathmast.com>
2025-08-07 16:26:19 +08:00
503ff874c2 Merge pull request 'fix: devsvc logingest' (#61) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/61
2025-08-07 06:46:18 +00:00
Nicolas
4ae88a0cc6 fix: devsvc logingest 2025-08-07 14:45:42 +08:00
freeleaps-gitops-bot
b6da130b9c ci(bump): bump devops image version for prod to snapshot-bbfc1ba 2025-08-07 05:50:33 +00:00
freeleaps-gitops-bot
ca2eb237f5 ci(bump): bump payment image version for prod to snapshot-bbfc1ba 2025-08-07 05:46:21 +00:00
freeleaps-gitops-bot
bd882f0ec2 ci(bump): bump notification image version for prod to snapshot-bbfc1ba 2025-08-07 05:41:26 +00:00
freeleaps-gitops-bot
8e19579af4 ci(bump): bump content image version for prod to snapshot-bbfc1ba 2025-08-07 05:36:48 +00:00
75d7182a1e Merge pull request 'Create a CI/CD environment for the production stage for the DevOps service.' (#60) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/60
2025-08-07 05:19:51 +00:00
Nicolas
de290f97b6 fix: update RabbitMQ password for devops service in production environment 2025-08-07 13:18:52 +08:00
0a36d1f620 Merge pull request 'Nicolas_local_ops' (#59) from Nicolas_local_ops into master
Reviewed-on: https://gitea.freeleaps.mathmast.com/freeleaps/freeleaps-ops/pulls/59
2025-08-07 04:52:10 +00:00
Nicolas
237deb2816 fix: update RabbitMQ password for devops, devsvc, and notification services to match reconciler configuration 2025-08-07 12:49:19 +08:00
0fb96c85bb revert 05faf32ef8
revert fix: update RabbitMQ password for all services to match reconciler configuration
2025-08-07 04:44:40 +00:00
Nicolas
05faf32ef8 fix: update RabbitMQ password for all services to match reconciler configuration 2025-08-07 12:18:37 +08:00
freeleaps-gitops-bot
0940209f93 ci(bump): bump payment image version for prod to 1.3.0 2025-08-07 01:22:55 +00:00
freeleaps-gitops-bot
7f15c29c6e ci(bump): bump payment image version for prod to snapshot-bbfc1ba 2025-08-07 01:22:47 +00:00
freeleaps-gitops-bot
954591049c ci(bump): bump notification image version for prod to 1.3.0 2025-08-07 01:17:46 +00:00
freeleaps-gitops-bot
b048c088c1 ci(bump): bump notification image version for prod to snapshot-bbfc1ba 2025-08-07 01:17:38 +00:00