fix ci-base: install Node 20 via binary tarball instead of nodesource apt

nodesource setup_20.x on Ubuntu 24.04 installs Ubuntu's nodejs 18 (no npm) instead of Node 20. Binary tarball is reliable and includes npm.
fix: drop bogus letsencrypt certResolver from dharma IngressRoute
2026-05-04 15:48:12 -05:00 · 2026-05-04 14:37:32 -05:00
1 changed files with 0 additions and 26 deletions
@@ -117,32 +117,6 @@ spec:
            matchLabels:
              kubernetes.io/metadata.name: neuron-prod
 ---
 # ── dharma: accept from Traefik (kube-system) and neuron-prod namespace ──────
 # The dharma pod was healthy and the IngressRoute was correct, but cross-
 # namespace ingress from kube-system (Traefik) was denied by default-deny-all,
 # so every external request landed at Traefik and bounced back as 502. This
 # allow rule mirrors `allow-mcp-ingress` and brings dharma into line with the
 # other neuron-prod services.
 apiVersion: networking.k8s.io/v1
 kind: NetworkPolicy
 metadata:
  name: allow-dharma-ingress
  namespace: neuron-prod
 spec:
  podSelector:
    matchLabels:
      app: dharma
  policyTypes:
    - Ingress
  ingress:
    - from:
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: kube-system
        - namespaceSelector:
            matchLabels:
              kubernetes.io/metadata.name: neuron-prod
 ---
 # ── Egress: all prod pods may reach platform (postgres/redis), vault,
 #            monitoring (alloy OTLP), kube-dns, and the internet (external APIs) ─
 apiVersion: networking.k8s.io/v1