feat: Claude via backend proxy + cloudflared CI - #21
Merged
Conversation
- Use /api/config to detect backend Claude (key in k8s secret) - ClaudeService supports useBackendKey when backend has key - Add publish-cloudflared job to GitLab CI - Add cloudflare/Dockerfile for tunnel image
- Add API deployments, HTTPRoute, Gateway, tunnel manifests - Add CLOUDFLARE_TUNNEL.md, api-secrets-example, gateway-tunnel-service - Add cloudflare/ config (Caddy, docker-compose, setup-tunnel) - Update k8s README for full stack
Use secretKeyRef for DATABASE_URL instead of inline credentials. Rotate the exposed PostgreSQL password.
surrealwolf
force-pushed
the
feat/claude-api-key-from-secret
branch
from
February 2, 2026 07:42
06e2114 to
714ce57
Compare
- Remove ui-ingress.yaml (Gateway handles ingress, not nginx) - Remove gateway-lb.yaml (doc only, Gateway uses Kube-VIP) - Remove cloudflare local dev files (config, Caddy, docker-compose, setup-tunnel) - Simplify cloudflare/README, k8s/README, CLOUDFLARE_TUNNEL.md
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Claude backend proxy
/api/configto detect when backend has Claude key in k8s secretClaudeService.executeCommand(prompt, { useBackendKey: true })when backend provides keyCloudflared CI
publish-cloudflaredjob to build/push cloudflared-tunnel imagecloudflare/Dockerfilefor tunnel imageRequires high-command-api PR for backend proxy and k8s route updates.