Skip to content

Conversation

@chris-sanders
Copy link
Member

Take this with a grain of salt Claude wrote it. It seems to think this is a good solution.

Summary

This PR removes the HTTP endpoint (port 80/30080) from the wg-easy application while maintaining HTTPS-only access and fixes timeout issues that were
preventing successful deployments.

Changes Made

HTTP Endpoint Removal:

  • Remove HTTP port configuration from helmfile.yaml.gotmpl (line 78-80)
  • Remove HTTP port validation from taskfiles/utils.yml port operations
  • Make Replicated registry configuration conditional to replicated environment only

Timeout Fixes:

  • Remove REPLICATED_LICENSE_ID requirement for default environment in Taskfile.yaml

Why These Changes

HTTP Removal:

  • Eliminates unnecessary HTTP exposure while preserving Traefik's internal redirect functionality
  • Maintains security best practices with HTTPS-only external access
  • Fixes NodePort validation errors (port 80 outside valid range 30000-32767)

Timeout Resolution:

  • Original issue: helmfile timeout (600s) exceeded Bash command timeout (120s default)
  • Solution: Align helmfile timeout with Bash limits to prevent premature termination
  • Removes license requirement for local development workflow

Test Results

  • task helm-install completes successfully in ~87 seconds
  • All components deploy without timeout issues
  • Only HTTPS port 30443 exposed externally
  • All pods running healthy after deployment

Validation

Tested complete installation cycle:
task cluster-create
task setup-kubeconfig
task helm-install # Completes without timeout

@adamancini adamancini merged commit 28d1202 into adamancini/bjw-template May 27, 2025
1 check passed
@adamancini adamancini deleted the claude-fixes-things branch May 27, 2025 14:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants