Erich Blume
0439fbb704
## Summary - Migrate devpi PyPI caching proxy from indri LaunchAgent to Kubernetes - Custom container image with devpi-server + devpi-web + auto-init - StatefulSet with 50Gi PVC, Tailscale Ingress at pypi.tail8d86e.ts.net - Remove devpi from ansible playbooks and update CLAUDE.md with k8s workflow ## Key Changes - Add CRI-O registry mirror config for registry.tail8d86e.ts.net - Change ArgoCD apps to manual sync (was auto-sync causing issues) - 2Gi memory limit for Whoosh indexer (reclaimed after startup) ## Deployment and Testing - [x] devpi pod healthy in k8s - [x] pip install through proxy works - [x] mcquack 1.0.0 uploaded and installable - [x] Old devpi stopped on indri ## Post-Merge Reset ArgoCD to main: ``` argocd app set apps --revision main && argocd app sync apps argocd app set devpi --revision main && argocd app sync devpi ``` 🤖 Generated with [Claude Code](https://claude.com/claude-code) Reviewed-on: https://forge.tail8d86e.ts.net/eblume/blumeops/pulls/34
43 lines
1 KiB
Text
43 lines
1 KiB
Text
# Zot pull-through cache on indri
|
|
# Uses host.containers.internal which is stable across restarts
|
|
# Applied by ansible minikube role
|
|
|
|
# Direct access to Zot for private images (blumeops/*)
|
|
[[registry]]
|
|
prefix = "host.containers.internal:5050"
|
|
location = "host.containers.internal:5050"
|
|
insecure = true
|
|
|
|
# Tailscale hostname for Zot - redirects to local access
|
|
# Allows manifests to use registry.tail8d86e.ts.net which is cleaner
|
|
[[registry]]
|
|
prefix = "registry.tail8d86e.ts.net"
|
|
location = "registry.tail8d86e.ts.net"
|
|
|
|
[[registry.mirror]]
|
|
location = "host.containers.internal:5050"
|
|
insecure = true
|
|
|
|
[[registry]]
|
|
prefix = "docker.io"
|
|
location = "docker.io"
|
|
|
|
[[registry.mirror]]
|
|
location = "host.containers.internal:5050/docker.io"
|
|
insecure = true
|
|
|
|
[[registry]]
|
|
prefix = "ghcr.io"
|
|
location = "ghcr.io"
|
|
|
|
[[registry.mirror]]
|
|
location = "host.containers.internal:5050/ghcr.io"
|
|
insecure = true
|
|
|
|
[[registry]]
|
|
prefix = "quay.io"
|
|
location = "quay.io"
|
|
|
|
[[registry.mirror]]
|
|
location = "host.containers.internal:5050/quay.io"
|
|
insecure = true
|