From 6668b804197915c1a41a00420724795255ba05f9 Mon Sep 17 00:00:00 2001
From: Andrew den Hertog <andrew@denhertog.ca>
Date: Wed, 3 Dec 2025 09:21:19 -0500
Subject: [PATCH 1/2] feat: add web.codexeditor.app and preview.codexeditor.app
 hostnames
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add support for new codexeditor.app domain hostnames across all HTTPRoutes:
- Add web.codexeditor.app and preview.codexeditor.app to frontend HTTPRoute
- Add web.codexeditor.app and preview.codexeditor.app to backend API HTTPRoute
- Update default hostnames in kubernetesService for dynamic workspace routes
- Update workspace URL generation to use preview.codexeditor.app

All deployments and workspaces now accept traffic from four hosts:
- test.denhertog.ca
- loadbalancer.frontierrnd.com
- web.codexeditor.app (new)
- preview.codexeditor.app (new)

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 backend/backend-deployment.yaml           | 2 ++
 backend/src/routes/workspaces.ts          | 2 +-
 backend/src/services/kubernetesService.ts | 2 +-
 frontend/k8s/k8s-ingress.yaml             | 2 ++
 4 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/backend/backend-deployment.yaml b/backend/backend-deployment.yaml
index 9bcfdb3..d70c1d2 100644
--- a/backend/backend-deployment.yaml
+++ b/backend/backend-deployment.yaml
@@ -192,6 +192,8 @@ spec:
   hostnames:
   - "test.denhertog.ca"
   - "loadbalancer.frontierrnd.com"
+  - "web.codexeditor.app"
+  - "preview.codexeditor.app"
   rules:
   - matches:
     - path:
diff --git a/backend/src/routes/workspaces.ts b/backend/src/routes/workspaces.ts
index 6ca7653..4d93a9a 100644
--- a/backend/src/routes/workspaces.ts
+++ b/backend/src/routes/workspaces.ts
@@ -177,7 +177,7 @@ router.post('/',
         groupName: group.displayName,
         userId: user.id,
         status: WorkspaceStatus.STOPPED,
-        url: `https://loadbalancer.frontierrnd.com/${namespace}/${k8sName}`,
+        url: `https://preview.codexeditor.app/${namespace}/${k8sName}`,
         password,
         resources,
         image: workspaceImage,
diff --git a/backend/src/services/kubernetesService.ts b/backend/src/services/kubernetesService.ts
index 0ed0c2d..7405532 100644
--- a/backend/src/services/kubernetesService.ts
+++ b/backend/src/services/kubernetesService.ts
@@ -1347,7 +1347,7 @@ cert: false`;
   async createOrUpdateHTTPRoute(
     namespace: string,
     pathPrefix: string,
-    hostnames: string[] = ['test.denhertog.ca', 'loadbalancer.frontierrnd.com']
+    hostnames: string[] = ['test.denhertog.ca', 'loadbalancer.frontierrnd.com', 'web.codexeditor.app', 'preview.codexeditor.app']
   ): Promise<void> {
     try {
       const httpRouteName = `${namespace}-httproute`;
diff --git a/frontend/k8s/k8s-ingress.yaml b/frontend/k8s/k8s-ingress.yaml
index 891771b..537f71e 100644
--- a/frontend/k8s/k8s-ingress.yaml
+++ b/frontend/k8s/k8s-ingress.yaml
@@ -18,6 +18,8 @@ spec:
   hostnames:
   - "test.denhertog.ca"
   - "loadbalancer.frontierrnd.com"
+  - "web.codexeditor.app"
+  - "preview.codexeditor.app"
   rules:
   - matches:
     - path:

From 7228d492bcd022188d150956d4d925468fe1f610 Mon Sep 17 00:00:00 2001
From: Andrew den Hertog <andrew@denhertog.ca>
Date: Wed, 3 Dec 2025 09:22:46 -0500
Subject: [PATCH 2/2] chore: configure workflows to test on PR, deploy on merge
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Update CI/CD workflows to:
- Run tests and security checks on both PRs and pushes to main
- Only build Docker images and deploy when changes are merged to main
- Skip docker/deploy jobs on PR creation using conditional checks

This allows code quality validation during PR review while preventing
unnecessary deployments until changes are approved and merged.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
---
 .github/workflows/backend.yaml  | 2 +-
 .github/workflows/frontend.yaml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/backend.yaml b/.github/workflows/backend.yaml
index 05c47a7..ac508a0 100644
--- a/.github/workflows/backend.yaml
+++ b/.github/workflows/backend.yaml
@@ -103,7 +103,7 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     needs: [test, security]
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     
     permissions:
       contents: read
diff --git a/.github/workflows/frontend.yaml b/.github/workflows/frontend.yaml
index 9968135..f40aa15 100644
--- a/.github/workflows/frontend.yaml
+++ b/.github/workflows/frontend.yaml
@@ -99,7 +99,7 @@ jobs:
   docker:
     runs-on: ubuntu-latest
     needs: [security]
-    if: github.event_name == 'push'
+    if: github.event_name == 'push' && github.ref == 'refs/heads/main'
     
     permissions:
       contents: read