nils/mg4
0
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 28 Wiki Activity

k8s: pin server 2.6.2

Browse Source 
git.stinnesbeck.com/nils/mg4-server:2.6.2 at
sha256:e4de1e75958d58ece8430a1913f9c1614d8ea1bf566f2e1ec5b449ef51844f77
(update logging, Go 1.27.3).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhzAVaUyqcw5PkGjz4mWW6
This commit is contained in:
nils
2026-10-25 22:42:58 +01:00
co-authored by Claude Opus 5.5
parent acb7e1969e
commit 784066ba1e
2 changed files with 7 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
SPECS.md
+5 -3
View File
@@ -39,8 +39,8 @@ car ──live telemetry───▶ car.k8s.stinnesbeck.com (Go)
### Status ### Status
Current: app 2.35.3, server 2.6.1 (pinned by digest in `k8s/server.yaml`; applied and running Current: app 2.35.3; server 2.6.2 pinned by digest in `k8s/server.yaml` (2.6.1 running on the
on the cluster since 2026-10-25). cluster until it is applied).
- [x] On the car: QR pairing, values on the Overview, voice-key double press, full screen - [x] On the car: QR pairing, values on the Overview, voice-key double press, full screen
without black bands. without black bands.
@@ -145,7 +145,9 @@ tyre pressures, GPS (lat, lon, elevation, heading) and the is_* flags. It does *
forge address or token in the log (tested: `TestUpdatesAreLogged`). Go 1.27.3 (build image forge address or token in the log (tested: `TestUpdatesAreLogged`). Go 1.27.3 (build image
and `go.mod` toolchain), up from 1.26.9: `govulncheck` had found GO-2026-6809 (compromised and `go.mod` toolchain), up from 1.26.9: `govulncheck` had found GO-2026-6809 (compromised
intermediate certificates, `crypto/x509`, reached through the server's TLS); now no intermediate certificates, `crypto/x509`, reached through the server's TLS); now no
vulnerabilities, in the source and in the built binary. go vet, tests, podman build. vulnerabilities, in the source and in the built binary. go vet, tests, podman build. Pushed
as `mg4-server:2.6.2` (`sha256:e4de1e75…`, checked in the registry) and pinned in
`k8s/server.yaml`.
- 2026-10-25 — `k8s/influxdb.yaml`: the values Kubernetes fills in itself are written out — the - 2026-10-25 — `k8s/influxdb.yaml`: the values Kubernetes fills in itself are written out — the
NetworkPolicy port's `protocol: TCP`, and `apiVersion`, `kind` and `volumeMode: Filesystem` on NetworkPolicy port's `protocol: TCP`, and `apiVersion`, `kind` and `volumeMode: Filesystem` on
the StatefulSet's volume claim template. Without them every `kubectl apply -k k8s/` reported the StatefulSet's volume claim template. Without them every `kubectl apply -k k8s/` reported
k8s/server.yaml
+2 -2
View File
@@ -29,8 +29,8 @@ spec:
type: RuntimeDefault type: RuntimeDefault
containers: containers:
- name: server - name: server
# 2.6.1, pinned by digest so a re-pushed tag cannot change what runs. # 2.6.2, pinned by digest so a re-pushed tag cannot change what runs.
image: git.stinnesbeck.com/nils/mg4-server@sha256:df1d40e423b7ee365e8379e2eaefb4c0db3a599e6429728a37d46827f83d82cd image: git.stinnesbeck.com/nils/mg4-server@sha256:e4de1e75958d58ece8430a1913f9c1614d8ea1bf566f2e1ec5b449ef51844f77
ports: ports:
- name: http - name: http
containerPort: 8080 containerPort: 8080