2 Commits

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	33f0e44545	feat(build): mTLS for buildkitd + public exposure via TLS passthrough ... cert-manager self-signed CA issues server and client certs for BuildKit mTLS. Buildkitd serves TLS on its ClusterIP (hostNetwork removed) and is publicly reachable at build.DOMAIN_SUFFIX:443 through Pingora's new SNI-based TLS passthrough router. Clients authenticate with the client certificate from the buildkitd-client-tls secret.	2026-03-26 14:23:56 +00:00
Sienna Meridian Satterwhite	66e3692c8b	docs: add Pingora proxy documentation — The Bouncer 💎 ... Security pipeline (DDoS, scanner, rate limiting), route table, ML models, training pipeline, static serving, TLS, auth requests, metrics.	2026-03-24 11:46:11 +00:00