Harden worker private-network wait and fix CCM cluster CIDR#3

Merged

roblen45 merged 60 commits into

fix/worker-private-net-wait-and-ccm-cidr

Jun 30, 2026

Commits on May 20, 2025

Release v1.7.0
process-engine-ci
committed
bump version to 1.8.0
Robin Lenz
committed
fix postgres tag
Robin Lenz
committed
Release v1.8.0
process-engine-ci
committed
merge with develop
Robin Lenz
committed
Release v1.8.1
process-engine-ci
committed
Merge branch 'develop'
Robin Lenz
committed
Release v1.8.2
process-engine-ci
committed

Commits on Jul 4, 2025

update versions
Robin Lenz
committed
bump version to 1.9.0
Robin Lenz
committed
Release v1.9.0
process-engine-ci
committed

Commits on Jul 7, 2025

fix lowcode dashboard auth
Robin Lenz
committed
Release v1.9.1
process-engine-ci
committed

Commits on Dec 22, 2025

add hetzner deplyoment
Robin Lenz
committed

Commits on Jan 26, 2026

Make External Secrets Operator installation optional
Robin Lenz
committed
Add install_cuby role with ProcessCube marketplace secrets
Robin Lenz
committed
Add Cuby Operator deployment to install_cuby role
Robin Lenz
committed
use cuby 0.6.0-develop.4
Robin Lenz
committed
Remove Cuby ingress, use port-forward instead
Robin Lenz
committed
Fix Cuby K8s certificate issue with NODE_EXTRA_CA_CERTS
Robin Lenz
committed
Add dynamic Ingress for Cuby using LoadBalancer IP
Robin Lenz
committed
Add cuby_url terraform output
Robin Lenz
committed
fix Save cuby_domain to local file
Robin Lenz
committed
Fix cluster-issuer name and become for local task
Robin Lenz
committed
bump cuby image to 0.6.0-develop.6
Robin Lenz
committed

Commits on Feb 3, 2026

Fix ArgoCD installation annotation size limit error
Robin Lenz
committed

Commits on Mar 4, 2026

Use K3s stable channel instead of pinned version
Robin Lenz
committed
Upgrade server image to Ubuntu 24.04 LTS
Robin Lenz
committed
Force apt to use IPv4 to fix hanging cache updates
Robin Lenz
committed
Prefer IPv4 system-wide via gai.conf on all nodes
Robin Lenz
committed
Configure DNS resolvers and add download retries
Robin Lenz
committed

Commits on Mar 5, 2026

Move network fixes before apt cache update in site.yml
Robin Lenz
committed
Replace modprobe module with shell command
Robin Lenz
committed
Replace community.general modules with shell commands
Robin Lenz
committed

Commits on Mar 7, 2026

Remove Cuby and ArgoCD from Hetzner deployment
Robin Lenz
committed

Commits on Apr 16, 2026

Replace Nginx Ingress with Traefik v3 and Gateway API

Robin Lenz
and
claude
committed
Fix Traefik Helm chart dnsPolicy schema error

Robin Lenz
and
claude
committed
Fix Traefik port configuration for Helm chart v39

Robin Lenz
and
claude
committed
Increase Traefik Helm install timeout to 10m

Robin Lenz
and
claude
committed
Use K3s built-in Traefik with Gateway API via HelmChartConfig

Robin Lenz
and
claude
committed
Remove manual Gateway API CRD install from k3s_master

Robin Lenz
and
claude
committed
Configure Traefik Gateway for all namespaces and cert-manager

Robin Lenz
and
claude
committed
Add port to Traefik gateway listeners in HelmChartConfig

Robin Lenz
and
claude
committed
Fix Traefik gateway listener config in HelmChartConfig

Robin Lenz
and
claude
committed
Add certificateRef to Traefik HTTPS gateway listener

Robin Lenz
and
claude
committed
Switch from Gateway API to Traefik Ingress Controller

Robin Lenz
and
claude
committed
Remove Gateway API CRDs after Traefik install

Robin Lenz
and
claude
committed

Commits on Apr 22, 2026

Fix trailing newline in SSH public key causing Terraform inconsistency

Robin Lenz
and
claude
committed
Ignore known_hosts to prevent SSH timeout on server recreation

Robin Lenz
and
claude
committed
Wait for SSH availability instead of static sleep before Ansible

Robin Lenz
and
claude
committed

Commits on Apr 23, 2026

Use ssh-keyscan for SSH readiness check instead of nc

Robin Lenz
and
claude
committed

Commits on May 4, 2026

Fix LoadBalancer not provisioned by embedding Hetzner annotations in Traefik HelmChartConfig

Robin Lenz
and
claude
committed
Fix worker node join reliability and improve cluster verify diagnostics

Robin Lenz
and
claude
committed
Fix network zone mismatch causing LoadBalancer provisioning failure

Robin Lenz
and
claude
committed

Commits on May 5, 2026

Fix deprecated ingress class field in ClusterIssuer HTTP01 solvers

Robin Lenz
and
claude
committed

Commits on May 9, 2026

Update hcloud-cloud-controller-manager to v1.31.0

Robin Lenz
and
claude
committed
Handle breaking ClusterRoleBinding migration for CCM v1.28.0+

Robin Lenz
and
claude
committed

Commits on May 11, 2026

Fix LoadBalancer network annotation to use cluster_name-specific network

Robin Lenz
and
claude
committed
Disable multipathd on cluster nodes to fix Hetzner CSI volume mounting

Robin Lenz
and
claude
committed

Commits on Jun 30, 2026

Harden worker private-network wait and fix CCM cluster CIDR

Robin Lenz
and
claude
committed