Chore/comment cleanup - #13

Open

johnnybabs wants to merge 102 commits into

johnnybabs:chore/comment-cleanup

Commits on Jun 1, 2026

chore: add .gitignore, untrack secrets, create directory structure

johnnybabs
and
claude
committed
bcfbd21
feat: add Terraform IaC modules for VPC, IAM, EKS, and security groups

johnnybabs
and
claude
committed
2362cb6
feat: add CI/CD pipeline (GitHub Actions + Jenkinsfile + Swarm staging + Trivy)

johnnybabs
and
claude
committed
3e7fd6b
feat: add health probes, resource limits, security contexts, CORS support

johnnybabs
and
claude
committed
9d2c81e
feat: add Prometheus, Grafana, Alertmanager with custom dashboard and alerts

johnnybabs
and
claude
committed
9f2c199
feat: add VidCast frontend with login, upload, download, dashboard, architecture

johnnybabs
and
claude
committed
f6afe4d
docs: add README, architecture guide, deployment guide, presentation notes

johnnybabs
and
claude
committed
da64b13
Trigger CI for Docker image builds
johnnybabs
authored
983174e
Remove CI trigger comment from README
johnnybabs
authored
be63d88
Edit Readme to trigger CI pipeline
johnnybabs
committed
a47207a
fix: resolve ruff lint failures blocking CI pipeline

johnnybabs
and
claude
committed
75b3574
fix: upgrade base image from bullseye to bookworm to pass Trivy scan

johnnybabs
and
claude
committed
ff3982a
fix: remove unused prometheus-client dependency from gateway-service

johnnybabs
and
claude
committed
db854bc
fix: remove unnecessary ffmpeg from notification-service image

johnnybabs
and
claude
committed
cc3d23d
fix: run all service containers as non-root user 1000

johnnybabs
and
claude
committed
c9b213d
chore: add .dockerignore to all four services

johnnybabs
and
claude
committed
091ffbf
fix: move MongoDB credentials from ConfigMaps to Secrets

johnnybabs
and
claude
committed
3f2c806
docs: annotate plaintext-credential and PV/PVC-sizing risks for hardening

johnnybabs
and
claude
committed
01af2a4
fix: patch OS-layer and toolchain CVEs in all Dockerfiles

johnnybabs
and
claude
committed
5fff621
fix: bump pinned Python deps to resolve CRITICAL/HIGH CVEs

johnnybabs
and
claude
committed
5c224a3
feat: convert CD to GitHub OIDC and provision the deploy role in Terraform

johnnybabs
and
claude
committed
78a73e6

Commits on Jun 2, 2026

fix(helm): add missing secret templates to MongoDB and RabbitMQ charts

johnnybabs
and
claude
committed
cdd5992
fix(eks-module): grant cluster creator admin permissions automatically

johnnybabs
and
claude
committed
94b117d
feat: read RabbitMQ credentials from environment variables

johnnybabs
and
claude
committed
c91216a
feat: switch to operator-built images and inject RabbitMQ credentials

johnnybabs
and
claude
committed
4d5fc7d
fix(helm): bump MongoDB image to 4.2 for PyMongo wire-version compat

johnnybabs
and
claude
committed
7f36e84
fix: touch /tmp/healthy at consumer startup to satisfy liveness probe

johnnybabs
and
claude
committed
16f49a0
fix(manifests): gateway /tmp volume, converter 2 replicas, pin images to 16f49a0

johnnybabs
and
claude
committed
d335b2c
fix(frontend): raise nginx client_max_body_size for video uploads

johnnybabs
and
claude
committed
fd35335
feat(frontend): deploy from account ECR, pinned to fd35335

johnnybabs
and
claude
committed
9fdcc8f
feat: user self-registration (sign up)

johnnybabs
and
claude
committed
8582bf1

Commits on Jun 3, 2026

feat(rbac): real roles + bcrypt; stop every token claiming admin

johnnybabs
and
claude
committed
6fd3b83
fix(notification): harden consumer so SMTP failures nack instead of crashing

johnnybabs
and
claude
committed
8237f0a
fix(auth): return 401 not 500 when a stored credential isn't a valid bcrypt hash

johnnybabs
and
claude
committed
043e4d9
docs(rbac): track the merge-time Postgres migration runbook

johnnybabs
and
claude
committed
f2c9f3f
chore(frontend): pin manifest to vidcast-frontend:8582bf1 (matches ECR + live)

johnnybabs
and
claude
committed
2119238
feat(downloads): per-user file ownership + in-app "ready" bubble badge

johnnybabs
and
claude
committed
1e384dc
feat(frontend): My Conversions page (file history)

johnnybabs
and
claude
committed
973df00
chore(frontend): add package-lock.json for reproducibility

johnnybabs
and
claude
committed
c474547
feat(signup): enforce 8-char minimum password + add email-notifications note

johnnybabs
and
claude
committed
edc2a81
feat(admin): user management page — list users + promote/demote roles

johnnybabs
and
claude
committed
49bf2b3
docs: consolidate branch architectural decisions (trade-off documentation)

johnnybabs
and
claude
committed
fe29e2d
Merge pull request #1 from johnnybabs/feature/rbac-and-notifications
johnnybabs
authored
d9e4282
fix(observability): set PYTHONUNBUFFERED=1 on gateway/converter/notification

johnnybabs
and
claude
committed
32ea48f
docs: add post-merge addenda (bcrypt forward-only; 403/409 complementary)

johnnybabs
and
claude
committed
fa55f6d
Merge pull request #2 from johnnybabs/fix/unbuffered-audit-logs
johnnybabs
authored
c36b319
docs: comprehensive end-to-end project guide (PROJECT_GUIDE.md)

johnnybabs
and
claude
committed
1fbd943

Commits on Jun 4, 2026

docs: add docs index + getting-started guide; scrub secrets; clean up repo

johnnybabs
and
claude
committed
e4d2669

Commits on Jun 5, 2026

Remove note on T-type instances from README
johnnybabs
authored
ff90962
Update PROJECT_GUIDE.md
johnnybabs
authored
6147e98

Commits on Jun 9, 2026

feat(A10): Kustomize overlays — base + dev/prod structure

johnnybabs
and
claude
committed
3113213
feat(A9): External Secrets Operator — IRSA + Parameter Store + ClusterSecretStore + ExternalSecrets

johnnybabs
and
claude
committed
e22f889
feat(A4): gunicorn production server for auth + gateway

johnnybabs
and
claude
committed
c3d220f
feat(A1): transactional outbox — relay deployment + gateway outbox write path

johnnybabs
and
claude
committed
ae7be4a
feat(A3): retry/DLQ topology — bounded retries + dead-letter queue per pipeline

johnnybabs
and
claude
committed
0a2ae28
feat(A2): idempotent consumers — Redis claim-once with release-on-retry

johnnybabs
and
claude
committed
7df3d67
feat(A7): KEDA scale-to-zero converter + HPA gateway

johnnybabs
and
claude
committed
541201c
feat(A6): NetworkPolicy default-deny + per-service allow rules

johnnybabs
and
claude
committed
25d7af2
feat(B1): Argo CD GitOps — auto-sync dev, manual-sync prod

johnnybabs
and
claude
committed
288713d
feat(B2): Kyverno policy-as-code — 7 ClusterPolicies in Audit mode

johnnybabs
and
claude
committed
2d3c136
feat(B4): SLO burn-rate alerting + M-2 metrics fix

johnnybabs
and
claude
committed
4bbdb6e
feat(A8): supply chain — ECR hardening + SBOM/cosign identity

johnnybabs
and
claude
committed
760fdfd
feat(B5): cosign verification — Kyverno verify-images + Sigstore egress

johnnybabs
and
claude
committed
cf31693
feat(B3): Kubecost FinOps dashboard

johnnybabs
and
claude
committed
1768bb4
chore: gap-fix — seccomp, image pins, datastore resource declarations + labels

johnnybabs
and
claude
committed
d511473
docs: deployment handover, MANAGED_SERVICES, _EXPLAINED companions, README updates

johnnybabs
and
claude
committed
d009cd3
ci: add outbox-relay to build matrix

johnnybabs
and
claude
committed
c9ad005
docs: PR description for phase-up branch

johnnybabs
and
claude
committed
f9affe4
fix: update repo references after rename to johnnybabs/vidcast

johnnybabs
and
claude
committed
6531b02
Merge pull request #3 from johnnybabs/feature/phase-up-sprint-1-4
johnnybabs
authored
65f2f57
chore: update overlay image tags to 65f2f57

johnnybabs
and
claude
committed
653de4c
chore: gitignore CLAUDE.md & PR_DESCRIPTION.md; move docs into docs/

johnnybabs
and
claude
committed
1f69a18
fix: disable enableServiceLinks on converter/notification to prevent redis Service env collision

johnnybabs
and
claude
committed
6b9f8ad
fix: pin outbox-relay to existing tag 65f2f57 (e4d2669 placeholder was never built)

johnnybabs
and
claude
committed
73aeadd
fix: monitoring embedding, PromQL parse bug, emptyDir storage, Kubecost local values, Argo ignoreDifferences for KEDA-managed replicas

johnnybabs
and
claude
committed
8d97fbf
Merge branch 'main' into feature/phase-up-sprint-1-4
johnnybabs
authored
fa7b8a6
Merge pull request #4 from johnnybabs/feature/phase-up-sprint-1-4
johnnybabs
authored
e290383
fix: bump notification-service to 65f2f57 (was stale 16f49a0)

johnnybabs
and
claude
committed
700e753
fix: allow Prometheus to scrape consumers (:9000) and rabbitmq (:15692) under default-deny

johnnybabs
and
claude
committed
c113869
feat(frontend): accept VITE_GRAFANA_URL as a build arg

johnnybabs
and
claude
committed
6eb217c
chore(frontend): deploy 6eb217c (VITE_GRAFANA_URL baked to node Grafana :30007)
johnnybabs
committed
6a1061b
fix(netpol): allow kyverno egress to IMDS :80 for private-ECR image verification

johnnybabs
and
claude
committed
2004111

Commits on Jun 10, 2026

docs: PROJECT_GUIDE.md — comprehensive project walkthrough

johnnybabs
and
claude
committed
be28ee6
docs: DEPLOYMENT_GUIDE.md — newcomer deployment guide

johnnybabs
and
claude
committed
d6787fa
feat: deploy.sh + customise.sh; keep DB secrets out of tracked files

johnnybabs
and
claude
committed
16f469d
chore: scrub personal identifiers from tracked docs

johnnybabs
and
claude
committed
ed6a6ce
fix(postgres): enforce passwords with scram-sha-256 (close H-2)

johnnybabs
and
claude
committed
bac559d
feat(durability): EBS CSI addon, Postgres PVC, S3 backup CronJobs, DR runbook
johnnybabs
committed
641c8c1
Merge pull request #5 from johnnybabs/feature/improvement-sprint-1-durability-and-backup
johnnybabs
authored
def116a
fix(backup): NetworkPolicy egress + MongoDB credential correction
johnnybabs
committed
dc22c28
feat(ingress): ALB Ingress + TLS, NodePort→ClusterIP perimeter hardening
johnnybabs
committed
f3b235a
Merge pull request #6 from johnnybabs/feature/phase-up-sprint-1-4
johnnybabs
authored
7d86cf2

Commits on Jun 11, 2026