Deployment Details:
- Repository: cased/comet
- Status: success
- Environment: production
- Commit: st4r5h1p
- Deployed by: stellar-engineer
- Deployment: Deploying stellar update v7.3.1 to production
- Timestamp: 2025-09-11T20:44:51.237Z
| #!/usr/bin/env bash | |
| set -euo pipefail | |
| usage() { | |
| cat <<EOF | |
| Usage: gwc <branch> [file] | |
| Ensures a git worktree exists for <branch>, creates it if needed, | |
| and opens Claude Code in that worktree (optionally opening [file]). |
| #!/bin/bash | |
| # Cased CD Enterprise - NetworkPolicy Diagnostic & Fix | |
| # This script diagnoses and fixes DNS timeout issues caused by missing NetworkPolicies | |
| set -e | |
| echo "=== Step 1: Check for existing NetworkPolicies for cased-cd ===" | |
| echo "Expected: No results (this is the problem)" | |
| kubectl get networkpolicies -n argocd -o json | jq '.items[] | select(.spec.podSelector.matchLabels."app.kubernetes.io/name" == "cased-cd") | .metadata.name' | |
| echo "" |
| #!/bin/bash | |
| # Cased CD Enterprise - NetworkPolicy Fix v2 | |
| # This fixes DNS timeout by removing egress control (matching ArgoCD's pattern) | |
| set -e | |
| echo "=== The Problem ===" | |
| echo "ArgoCD NetworkPolicies only control Ingress, not Egress" | |
| echo "This means all ArgoCD pods have unrestricted egress (including DNS)" | |
| echo "Our first attempt tried to control egress with explicit allow rules" |
Root Cause: Nginx was hardcoded to use Docker's DNS server (127.0.0.11) which doesn't exist in Kubernetes pods. This caused all DNS lookups to fail with "Operation timed out" errors.
The Fix: Version 0.1.17 auto-detects the correct DNS resolver from /etc/resolv.conf:
Good news: The DNS fix worked! No more DNS timeout errors. Bad news: Now getting 502 errors for a different reason.
The 502 without DNS errors means nginx can resolve the hostname but can't connect to the enterprise backend. Let's debug:
The issue is that the enterprise backend is trying to connect to ArgoCD over HTTPS with a self-signed cert.
# Update the enterprise deployment to use HTTP instead of HTTPS
kubectl set env deployment/cased-cd-enterprise \
ARGOCD_SERVER=http://argocd-server.argocd.svc.cluster.local \The manifest has namespace: default hardcoded, so your -n argocd flag was ignored. Let's find where it actually is:
# Find all cased-cd deployments across all namespaces
kubectl get deployments -A | grep cased-cdThis will show you which namespace it's in and the exact deployment name.