feat: deploy to Frostmoln production #243

Merged

argoyle merged 1 commits from feat/frostmoln-production into main

2026-10-14 17:53:13 +00:00

Author	SHA1	Message	Date
argoyleandClaude Opus 5.5	a41e44367a	feat: deploy to Frostmoln production unbound-site / build (pull_request) Successful in 1m53s Details unbound-site / deploy-prod-frostmoln (pull_request) Skipped Details The AWS deploy-prod job has failed since CI left AWS (no k8s.unbound.se context on the runners). Deploys now go to the Frostmoln production cluster (namespace sites), the way Shiny deploys to Frostmoln staging. Frostmoln enforces restricted Pod Security, so the served image is nginx-unprivileged (uid 101, port 8080) with a matching securityContext. The ALB ingress becomes a Traefik one with a Let's Encrypt certificate. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu	2026-10-14 19:43:57 +02:00

Author

SHA1

Message

Date

argoyleandClaude Opus 5.5

a41e44367a

feat: deploy to Frostmoln production

unbound-site / build (pull_request) Successful in 1m53s

Details

unbound-site / deploy-prod-frostmoln (pull_request) Skipped

Details

The AWS deploy-prod job has failed since CI left AWS (no k8s.unbound.se
context on the runners). Deploys now go to the Frostmoln production
cluster (namespace sites), the way Shiny deploys to Frostmoln staging.

Frostmoln enforces restricted Pod Security, so the served image is
nginx-unprivileged (uid 101, port 8080) with a matching securityContext.
The ALB ingress becomes a Traefik one with a Let's Encrypt certificate.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ma8eHhW59hLAJuLzBnLvUu

2026-10-14 19:43:57 +02:00