#310: Ingress + HTTPRoute + scheduling knobs, env-driven admin, listen wiring #425

Merged

Cordy merged 13 commits from mf-310 into main 2026-09-05 00:08:58 +00:00

Conversation 0 Commits 13 Files changed 11 +341 -7

Cordy commented 2026-09-05 00:08:44 +00:00

Owner

Copy link

Manuel's findings. Chart 0.4.0: ingress.* (className/annotations/hosts/tls) and httpRoute.* (parentRefs/hostnames) templates, both enabled-gated and default-off, routing only to Cairn (never the converter); nodeSelector/tolerations/affinity for the Cairn pod and the converter pod; listen.port sets CAIRN_LISTEN on the pod and drives the containerPort — single source of truth, the config Secret needs no listen. Go: applyAdminEnv (CAIRN_ADMIN_USERNAME + CAIRN_ADMIN_PASSWORD_HASH preferred / plaintext CAIRN_ADMIN_PASSWORD hashed at boot with loud warning), upserts the user + grants admin immediately after config load so first-run never triggers; half-configured or non-PHC hash refuses boot; tested (upsert, verify, replace-in-place, refusals). admin/admin-in-image declined as superseded by setup mode. Docs + CHANGELOG v0.6.127. Part of #310.

Manuel's findings. Chart 0.4.0: `ingress.*` (className/annotations/hosts/tls) and `httpRoute.*` (parentRefs/hostnames) templates, both `enabled`-gated and default-off, routing only to Cairn (never the converter); `nodeSelector`/`tolerations`/`affinity` for the Cairn pod and the converter pod; `listen.port` sets `CAIRN_LISTEN` on the pod and drives the containerPort — single source of truth, the config Secret needs no `listen`. Go: `applyAdminEnv` (`CAIRN_ADMIN_USERNAME` + `CAIRN_ADMIN_PASSWORD_HASH` preferred / plaintext `CAIRN_ADMIN_PASSWORD` hashed at boot with loud warning), upserts the user + grants admin immediately after config load so first-run never triggers; half-configured or non-PHC hash refuses boot; tested (upsert, verify, replace-in-place, refusals). admin/admin-in-image declined as superseded by setup mode. Docs + CHANGELOG v0.6.127. Part of #310.

Cordy added 13 commits 2026-09-05 00:08:45 +00:00

scout-mf: main.go config-load anchors 32de6ad4fa

scout-mf: main.go load region 755f7b76d2

cairnd: env-declared local admin - CAIRN_ADMIN_USERNAME/_PASSWORD_HASH/_PASSWORD (#310) 37d211ba3d

cairnd: adminenv tests - upsert, hash verify, replace, refusals (#310) b35df1a62d

chart: listen.port, ingress, httpRoute, scheduling knobs for both pods (#310) 69e726c963

chart: CAIRN_LISTEN from listen.port, scheduling knobs on the cairn pod (#310) 21de8b5b7b

chart: scheduling knobs on the converter pod (#310) d41419d15d

chart: Ingress object, gated by ingress.enabled (#310) 3e63c37bc6

chart: Gateway API HTTPRoute, gated by httpRoute.enabled (#310) 9929c024fc

chart: 0.4.0, appVersion v0.6.127 (#310) 731ee7b340

splice-mf: main.go admin env wiring + docs + changelog (#310) 9ec3274ab7

oneshot-mf: splice + build + test + self-remove 4b83c30f0e

deployment: ingress/httproute/scheduling in chart, env admin, listen wiring (#310) 57c899e8bd

Cordy merged commit 799ed4acc5 into main 2026-09-05 00:08:58 +00:00

Cordy referenced this pull request from a commit 2026-09-05 00:08:59 +00:00

Merge pull request '#310: Ingress + HTTPRoute + scheduling knobs, env-driven admin, listen wiring' (#425) from mf-310 into main

Cordy referenced this pull request 2026-09-05 00:12:58 +00:00

Adjustments, Manuel findings #310

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Cordy/Cairn#425

No description provided.