chore(cassandra): deploy owner alias hotfix

services/cassandra/backend-deployment.yaml

@@ -22,7 +22,7 @@ spec:
       labels:
         app: cassandra-backend
       annotations:
-        cassandra.bstein.dev/redeploy: "2026-07-25-0.7.67-builder-spine"
+        cassandra.bstein.dev/redeploy: "2026-07-25-0.7.68-owner-alias"
         vault.hashicorp.com/agent-inject: "true"
         vault.hashicorp.com/agent-init-first: "true"
         vault.hashicorp.com/agent-pre-populate-only: "true"
@@ -63,7 +63,7 @@ spec:
           type: RuntimeDefault
       initContainers:
         - name: database-init
-          image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"}
+          image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:
@@ -85,7 +85,7 @@ spec:
               memory: 512Mi
       containers:
         - name: backend
-          image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"}
+          image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"}
           imagePullPolicy: Always
           command: ["/bin/sh", "-c"]
           args:

services/cassandra/configmap.yaml

@@ -18,6 +18,7 @@ data:
   CASSANDRA_OIDC_REQUIRED_GROUPS: alpha,cassandra-tester,admin
   CASSANDRA_OIDC_ADMIN_GROUPS: admin
   CASSANDRA_NAMESPACE: cassandra
+  CASSANDRA_OWNER_USER_ID_ALIASES: veles-dev=d357688e-e3e4-4f18-9491-a4ed5622deb6
   CASSANDRA_SIM_IMAGE: registry.bstein.dev/cassandra/cassandra-sim-worker:0.7.67 # {"$imagepolicy": "cassandra:cassandra-sim-worker"}
   CASSANDRA_SIM_WORKER_VERSION: "0.7.67"
   CASSANDRA_GENERATOR_WORKER_VERSION: "0.7.67"

services/cassandra/frontend-deployment.yaml

@@ -48,7 +48,7 @@ spec:
           type: RuntimeDefault
       containers:
         - name: frontend
-          image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-frontend"}
+          image: registry.bstein.dev/cassandra/cassandra-frontend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-frontend"}
           imagePullPolicy: Always
           ports:
             - name: http

services/cassandra/retention-cronjob.yaml

@@ -38,7 +38,7 @@ spec:
               type: RuntimeDefault
           containers:
             - name: retention
-              image: registry.bstein.dev/cassandra/cassandra-backend:0.7.67 # {"$imagepolicy": "cassandra:cassandra-backend"}
+              image: registry.bstein.dev/cassandra/cassandra-backend:0.7.68 # {"$imagepolicy": "cassandra:cassandra-backend"}
               imagePullPolicy: IfNotPresent
               command: ["cassandra-hygiene"]
               args: ["--prune-artifacts"]

services/veles/ingress.yaml

@@ -7,6 +7,7 @@ metadata:
   annotations:
     cert-manager.io/cluster-issuer: letsencrypt
     traefik.ingress.kubernetes.io/router.entrypoints: websecure
+    traefik.ingress.kubernetes.io/router.middlewares: veles-veles-to-cassandra-redirect@kubernetescrd
     traefik.ingress.kubernetes.io/router.tls: "true"
 spec:
   ingressClassName: traefik

services/veles/kustomization.yaml

@@ -20,6 +20,7 @@ resources:
   - frontend-deployment.yaml
   - retention-cronjob.yaml
   - image.yaml
+  - redirect-middleware.yaml
   - ingress.yaml
   - bootstrap-jobs/veles-secrets-ensure-job.yaml
   - migration-jobs/cassandra-artifact-export.yaml

services/veles/redirect-middleware.yaml

@@ -0,0 +1,11 @@
+# services/veles/redirect-middleware.yaml
+apiVersion: traefik.io/v1alpha1
+kind: Middleware
+metadata:
+  name: veles-to-cassandra-redirect
+  namespace: veles
+spec:
+  redirectRegex:
+    regex: ^https?://veles\.bstein\.dev(.*)
+    replacement: https://cassandra.bstein.dev${1}
+    permanent: true