feat: add NetworkPolicy to allow runner pod ingress#1554

Closed

maknop wants to merge 64 commits into

ambient-code:mainfrom

RedHatInsights:add-runner-networkpolicy-template

Commits on Apr 22, 2026

Red Hat Konflux update ambient-code-backend-main

red-hat-konflux
authored and
maknop
committed
Red Hat Konflux update ambient-code-frontend-main

red-hat-konflux
authored and
maknop
committed
Red Hat Konflux update ambient-code-operator-main

red-hat-konflux
authored and
maknop
committed
Red Hat Konflux update ambient-code-public-api-main

red-hat-konflux
authored and
maknop
committed
Red Hat Konflux update ambient-code-ambient-api-server-main

red-hat-konflux
authored and
maknop
committed
Red Hat Konflux update ambient-code-ambient-runner-main

red-hat-konflux
authored and
maknop
committed
Add app-interface overlay for AppSRE platform deployment

authored and
maknop
committed
Add OpenShift Templates for AppSRE deployment

wcmitchell
authored and
maknop
committed
Add app-interface overlay for AppSRE platform deployment

authored and
maknop
committed
fix: correct OpenShift Template objects array format

wcmitchell
authored and
maknop
committed
refactor: remove in-cluster services from template

wcmitchell
authored and
maknop
committed
updating postgresql db name
maknop
committed
enabling ssl mode for rds
maknop
committed
fix: disable OpenTelemetry metrics export in operator

maknop
and
claude
committed
enabling ssl mode for rds
maknop
committed
Add OAuth proxy and SSL/TLS configuration for app-interface overlay

authored and
maknop
committed
Remove in-cluster services from template-services.yaml

authored and
maknop
committed
Fix OAuth proxy configuration to use OpenShift service account auth

authored and
maknop
committed
Exclude ambient-code-rds secret from services template

authored and
maknop
committed
fix: fix frontent route termination

wcmitchell
authored and
maknop
committed
fix: revert https changes for oauth pods

wcmitchell
authored and
maknop
committed
Change TLS termination from reencrypt to edge

wcmitchell
authored and
maknop
committed
Change health check scheme from HTTPS to HTTP

wcmitchell
authored and
maknop
committed
Update upstream URL to use frontend service

wcmitchell
authored and
maknop
committed
Enable request logging in OAuth proxy configuration

wcmitchell
authored and
maknop
committed
Update OAuth redirect reference for frontend service account

wcmitchell
authored and
maknop
committed
Update Vertex AI credentials to use app-interface Vault secret

wcmitchell
authored and
maknop
committed
Fix OAuth proxy to pass access token to backend API

authored and
maknop
committed
Update OAuth proxy configuration options

wcmitchell
authored and
maknop
committed
Remove authorization header setting from template

wcmitchell
authored and
maknop
committed
updating ambient env to production
maknop
committed
Add pass-user-bearer-token option to template-services.yaml

wcmitchell
authored and
maknop
committed
Update template-services.yaml

wcmitchell
authored and
maknop
committed
Fix OAuth proxy to forward user tokens to frontend/backend

wcmitchell
authored and
maknop
committed
Update openshift-delegate-urls configuration

wcmitchell
authored and
maknop
committed
removing openshift-delegate-urls
maknop
committed
Revert "removing openshift-delegate-urls"
maknop
committed
Update openshift-delegate-urls path in template-services.yaml

wcmitchell
authored and
maknop
committed
Remove scope option from OAuth proxy configuration

wcmitchell
authored and
maknop
committed
chore: Update konflux deps
wcmitchell
committed
Merge pull request #56 from RedHatInsights/update_rpm_sig_scan_ref
wcmitchell
authored

Commits on Apr 28, 2026

Configure OAuth proxy with IT-provided SSO client credentials

wcmitchell
and
claude
committed

Commits on Apr 30, 2026

Commits on May 1, 2026

Commits on May 4, 2026

Commits on May 7, 2026

Commits on May 11, 2026

feat: add NetworkPolicy to allow runner pod ingress

maknop
and
claude
committed