Scooby HuskyandClaude Sonnet 5 166ff0ffb7 GitLab cross-site replication Phase 2b: home-side Gitaly network exposure ...

Per-pod NodePort Services for the 3 existing Gitaly nodes
(ha-gitaly-nodeport.yaml) plus home's Rails internal API
(ha-gitlab-internal-api-nodeport.yaml, needed for gitlab-shell hooks
whenever the VPS node is primary for a repo). PeerAuthentication
PERMISSIVE + AuthorizationPolicy port rules for both, matching the
proven Postgres pattern. CoreDNS rewrites so home's own Praefect
resolves the floating hostnames locally instead of round-tripping.

Reached over the Netbird mesh, not the UniFi WAN forward used for
Postgres - Gitaly gRPC here is plaintext (carries the gitaly_token,
gitlab_shell_secret, and raw repo contents), unlike CNPG's
TLS-negotiated stream.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

2026-08-22 13:59:03 -05:00

..

manifests

GitLab cross-site replication Phase 2b: home-side Gitaly network exposure

2026-08-22 13:59:03 -05:00

cni-values.yaml

Initial commit

2026-03-09 20:21:35 -05:00

ingressgateway-values.yaml

Initial commit

2026-03-09 20:21:35 -05:00

istiod-values.yaml

Initial commit

2026-03-09 20:21:35 -05:00