Formalizing x402-gateway CI (was a manual no-CI image). The deployment lives in the traefik module; its image was NOT in ignore_changes, so a set-image deploy would be reverted on the next traefik apply — added it (KEEL_IGNORE_IMAGE). Base repointed to ghcr:latest; the GHA deploy set-images the :sha8. Public ghcr package = no pull secret. Inert on the live pod (image now ignored); rolling cutover keeps forwardAuth up. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| modules/traefik | ||
| main.tf | ||
| secrets | ||
| terragrunt.hcl | ||