infra/stacks/priority-pass
Viktor Barzin dfbf6faf3d priority-pass: backend f4246691 (QR fit fix + persist uploads), add encrypted PVC
Backend changes:
- transformers.py: QR container now sized to actual qr_bbox + 8% padding
  (was fixed at 45% of card width). When QR was wider than 45% of card,
  the leftover-pixel branch color-remapped QR pixels outside the
  container, breaking the scan. New container always encloses qr_mask.
- main.py: persist input + output + json metadata under
  $UPLOAD_DIR/<airline>/<ts-uuid>-{input.<ext>,output.png,*.json} for
  future training. Failure to save is logged, never breaks the API.

Infra:
- New PVC priority-pass-uploads (1Gi proxmox-lvm-encrypted, 10Gi
  autoresize cap) — encrypted because boarding passes contain PII.
- Deployment strategy → Recreate (RWO requirement).
- Volume + volumeMount + UPLOAD_DIR env on backend container.

Applied via kubectl (TF state for this stack is empty — see prior
commit). New pod priority-pass-77956b64fb rolled out, PVC bound,
test transform succeeded, sample written to /data/uploads/ryanair/.

[ci skip]
2026-05-01 18:50:51 +00:00
..
main.tf priority-pass: backend f4246691 (QR fit fix + persist uploads), add encrypted PVC 2026-05-01 18:50:51 +00:00
secrets state(technitium): update encrypted state 2026-04-06 12:40:55 +03:00
terragrunt.hcl deploy priority-pass app to cluster via private registry 2026-03-23 00:55:41 +02:00