infra/scripts
Viktor Barzin aa05942fa5 upgrade-state: filter transient registry digest-check errors
Keel polls ~175 image manifests hourly against public registries.
Transient i/o timeouts and registry 5xx responses are inherent at
that scale and auto-recover on the next poll, but they were tripping
the Apps row into ⚠ attn — pure noise.

Extend benign_re to cover:
  - failed to check digest + (i/o timeout | connection refused
    | connection reset | context deadline exceeded | TLS handshake
    timeout | no such host | EOF)
  - failed to check digest + non-successful response (status=5xx)

Real actionable digest-check failures (HTTP 401 auth, 404 removed
tag) still surface. Persistent registry-side 5xx is owned by the
registry's own monitoring (forgejo-integrity-probe +
RegistryCatalogInaccessible), not by Keel logs.

Tested locally: Apps row flips from ⚠ attn → ✓ healthy after the
filter is in place; remaining errors-line drops to "(none in last
24h)".

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-05-22 14:17:00 +00:00
..
server_safe_poweroff
check-ingress-auth-comments.py infra/scripts/tg: enforce ingress_factory auth-comment convention 2026-05-22 14:16:44 +00:00
cluster_healthcheck.sh healthcheck: probe uptime-kuma via internal Service (port-forward), not public URL 2026-05-22 14:16:44 +00:00
cluster_manager.py
daily-backup.service
daily-backup.sh
daily-backup.timer
extend_vm_storage.sh
forgejo-migrate-orphan-images.sh
frigate-bulk-classify.js
frigate-inspect.mjs
gen_service_stacks.py
graceful-db-maintenance.sh
image_pull.sh
image_pull_remote.sh
kill_ns.sh
lvm-pvc-snapshot.sh
lvm-pvc-snapshot.timer
migrate-state-to-pg
migrate_service_state.sh
nfs-change-tracker.service
node_registry_manager.sh
offsite-sync-backup.service
offsite-sync-backup.sh
offsite-sync-backup.timer
parse-postmortem-todos.sh
pfsense-haproxy-bootstrap.php
pfsense-nat-mailserver-haproxy-flip.php
pfsense-nat-mailserver-haproxy-unflip.php
postmortem-pipeline.sh
pve-nfs-exports
renew_worker_certs.sh
setup-containerd-pullthrough.sh
setup-forgejo-containerd-mirror.sh
setup-task-pipeline.sh
setup_containerd_mirrors.sh
state-sync
stop_storage_services.sh
task-processor.sh
tg infra/scripts/tg: enforce ingress_factory auth-comment convention 2026-05-22 14:16:44 +00:00
update-istio-injection.sh
update_k8s.sh k8s-version-upgrade: automated kubeadm/kubelet/kubectl upgrade pipeline 2026-05-22 14:16:42 +00:00
update_node.sh k8s-version-upgrade: automated kubeadm/kubelet/kubectl upgrade pipeline 2026-05-22 14:16:42 +00:00
upgrade_state.sh upgrade-state: filter transient registry digest-check errors 2026-05-22 14:17:00 +00:00
vault-kubeconfig
woodpecker-register-forgejo-repo.sh