3 Commits

Author	SHA1	Message	Date
jgrusewski	57e22c01a8	refactor: update K8s, CI, Docker, Prometheus, scripts, and FXT CLI for api rename ... - K8s: rename api-gateway → api manifests, delete web-gateway, update network policies - CI: rename compile/deploy jobs, delete web-gateway jobs - Docker: rename service in compose files - Prometheus: update scrape targets and alert rules - Scripts: update binary references in build/test/cert scripts - FXT CLI: rename api_gateway_url → api_url (with serde alias for compat) Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-04 23:46:36 +01:00
jgrusewski	83d0f68ab3	fix(k8s): use app.kubernetes.io/name labels in NetworkPolicy egress ... All per-service NetworkPolicies used bare 'app: postgres/redis/minio' selectors but infrastructure pods use 'app.kubernetes.io/name'. This blocked all egress to databases, causing initContainer hangs and service connectivity failures. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-02 00:12:08 +01:00
jgrusewski	630141436e	infra: add per-service NetworkPolicy rules ... Least-privilege ingress/egress for all 8 services + IB gateway + infrastructure pods (postgres, redis, minio, questdb). Each policy restricts which pods can communicate on which ports, limiting lateral movement in the cluster. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-03-01 23:41:13 +01:00