Tags: jekyo/jekyo

feat: http.websocket opts routes into Contour WebSocket upgrades

Contour 403s WebSocket upgrades unless the route paths are named in
projectcontour.io/websocket-routes. websocket: true annotates the route
path; a list scopes specific paths. Survives redeploys.

Fixes #22.

docs: logs, exec and attach help documents the target grammar

fix: two-segment targets resolve sidecars by container name

app/name falls back from service label to container search across the
app's pods; ambiguity and misses produce teaching errors.

Fixes #21.

feat: per-container caps and security for init containers and sidecars

Privileged setup belongs in an init container that exits; the workload
stays unprivileged. Service-level caps/security keep applying to the
main container only.

Fixes #20.

feat: sidecars build from the repo and are reachable everywhere

sidecars.build rides the content-hash pipeline as <svc>-<sidecar>
units. Targets grow a third segment (app/service/container) for logs,
exec and attach; multi-container logs stream all containers prefixed;
ps indents sidecars under the parent; top --json and the ui tree get
per-container stats.

Fixes #18. Fixes #19.

feat(ui): restart column in the sidebar

feat: sixteen issues from the tracker in one release

secrets: via secretKeyRef with render redaction (#1), host networking
and capabilities (#2), shm sizing (#3), egress NetworkPolicy presets
(#5), securityContext (#6), stop-grace (#7), files: mounts (#8),
sidecars (#9), conventional host ports (#10), placement (#11), metrics
annotations (#12), init containers (#13), volume access modes (#14),
schema drift (#15), proper startup/readiness/liveness probes (#16),
render-time dockerfile check (#17).

Fixes #1. Fixes #2. Fixes #3. Fixes #5. Fixes #6. Fixes #7. Fixes #8.
Fixes #9. Fixes #10. Fixes #11. Fixes #12. Fixes #13. Fixes #14.
Fixes #15. Fixes #16. Fixes #17.

feat: context add adopts existing servers; update refreshes the skill

context add discovers ip/domain/storage/registry creds/kubeconfig from
the server over SSH (k3s unit parsed client-side). update re-installs
the global skill post-upgrade. The skill routes bug reports to the
repo. ls ignores completed job pods and cron history is capped.

fix(ui): completed job pods are not services

feat: local backup target and a rollback revision picker in the ui

backup config --local keeps restic repos on the node at
/var/lib/jekyo/backups via an always-mounted hostPath; the b key in the
ui now opens a picker over all recorded revisions with ages and a
confirm step.