jgrusewski
68b6aa8313
feat(infra): migrate container registry from SCW to internal GitLab
...
Full migration off Scaleway Container Registry to internal GitLab
registry backed by MinIO S3. All 4 images (ci-builder, ci-builder-cpu,
foxhunt-runtime, foxhunt-training-runtime) rebuilt in internal registry.
Registry & images:
- All image refs → gitlab-registry.foxhunt.svc.cluster.local:5000/root/foxhunt/
- imagePullSecrets: scw-registry → gitlab-registry
- Kaniko build template: two-step DAG (git-clone → kaniko-build) with shared PVC
- Kaniko layer cache enabled at root/foxhunt/cache
- AWS_ACCESS_KEY_ID: $SCW_ACCESS_KEY → $MINIO_ACCESS_KEY in .gitlab-ci.yml
Network policies:
- ci-pipeline: add HTTP/80, registry/5000, webservice/8181 egress rules
DNS & Tailscale proxy cleanup:
- Remove ci, prometheus, monitor DNS records (no longer exposed)
- Rename s3 → minio DNS record
- Remove Argo UI, Prometheus, monitor nginx server blocks
- Remove argo-htpasswd volume mount
- Tailscale proxy nodeSelector: infra → platform
Terraform cleanup:
- Delete infra/modules/registry/ (SCW CR namespace)
- Delete infra/modules/object-storage/ (SCW S3 buckets)
- Delete infra/modules/secrets/ (SCW secrets)
- Delete corresponding live configs
- TF state backend: S3 → GitLab HTTP
Argo workflows:
- Add events/ (GitLab push eventsource + ci-pipeline sensor)
- ci-pipeline + training templates: SCW → internal registry
- Delete obsolete compile-training-template.yaml
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-03-05 13:52:24 +01:00
jgrusewski
b8d4138c28
fix: review fixes — IMAGE_PULL_SECRETS, SCW registry, devpod provider
...
- Add missing IMAGE_PULL_SECRETS=gitlab-registry to devpod-setup.sh
- CI job pushes devcontainer to SCW registry (not internal GitLab)
- Remove unused internal registry auth from build-devcontainer job
- Add customizations.devpod.provider to devcontainer.json
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 21:19:32 +01:00
jgrusewski
d59da19dd8
feat(devcontainer): add Dockerfile extending CI builder
...
Adds Node.js 22, Claude Code, Python 3, kubectl, helm, scw, glab,
terraform, terragrunt, zsh, ripgrep, fd-find. Non-root dev user.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 21:15:02 +01:00
jgrusewski
30516764c6
feat(devcontainer): add init-home.sh for PVC bootstrap
...
Links cargo binaries, creates sccache dir, and writes default .zshrc
on first boot. No-op on subsequent sessions.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 21:12:42 +01:00
jgrusewski
5dc617fa20
feat(devcontainer): add k8s pod template for DevPod
...
Mounts dev-home PVC (50Gi) and training-data PVC (read-only).
Targets gpu-dev node pool. Resource requests: 4 CPU / 16Gi,
limits: 14 CPU / 56Gi.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 21:12:40 +01:00
jgrusewski
d9386f905f
feat(devcontainer): add devcontainer.json
...
Builds from CI builder base, runs as non-root dev user.
postCreateCommand bootstraps PVC home dir on first session.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com >
2026-02-25 21:12:36 +01:00
