7 Commits

Author SHA1 Message Date
e6bdade1a4 fix: use SSH for direct database queries instead of port-forward
The user-notes command in cli-anything-codimd doesn't support PostgreSQL,
so the script now queries the database directly via SSH kubectl exec.
Also fixes SQL quote handling in db-query command.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 12:18:53 +08:00
0d24721407 feat: add CodiMD database query helper script
Add db-query-users.sh to simplify running cli-anything-codimd commands:
- list-users: List all users
- user-notes <id>: Show notes for specific user

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 12:15:22 +08:00
67d41fa688 feat: add CodiMD database port-forward helper scripts
Add three scripts to simplify CodiMD database access via port-forward:
- db-port-forward.sh: Start SSH tunnel and kubectl port-forward
- db-port-forward-stop.sh: Stop port-forward processes
- db-status.sh: Check port-forward status

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-07 12:06:47 +08:00
be3f2ffe5c fix: use TCP probe for CodiMD health check (/healthz not available) 2026-04-01 17:57:07 +08:00
aaa7acb4ec fix: use correct codimd image version 2.6.1 (alpine tag not available) 2026-04-01 17:54:34 +08:00
3bf3ddd306 feat: improve security and stability for Vaultwarden and CodiMD
Security:
- Move Vaultwarden ADMIN_TOKEN to Secret (was plaintext)
- Remove root user execution from CodiMD (runAsUser: 0)
- Use fixed image versions instead of latest tag

Stability:
- Add liveness/readiness probes to Vaultwarden, CodiMD, CodiMD DB
- Add resource requests/limits to all services
- Set appropriate memory/CPU constraints

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-01 17:52:30 +08:00
2f04fa4473 Initial commit: k8s cluster manifests and scripts 2026-04-01 15:34:02 +08:00