Skip to content
This repository was archived by the owner on Oct 27, 2026. It is now read-only.

docs(helm): internal networking, IPv6/dual-stack and container registry guides [DEP-371] - #1241

Merged
pmdroid merged 9 commits into
mainfrom
pascal/dep-371-batch-1
Oct 16, 2026
Merged

pmdroid merged 9 commits into
mainfrom
pascal/dep-371-batch-1

Conversation

@pmdroid

@pmdroid pmdroid commented Oct 12, 2026 •

Copy link
Copy Markdown
Member

Adds three use-case guides under Self-host with Helm (Sterling's split from #1237), as child pages of /operate/deploy/helm:

Page Covers
/operate/deploy/helm/internal-networking No public ingress; internal Gateway (gateway.parentRefs, per-service gateway.<service>.parentRefs) or private Ingress class; engine.ssrfAllowlist / authSsrfAllowlist / pluginSsrfAllowlist; coordinator.proxyHeaders.forwardedAllowIps
/operate/deploy/helm/ipv6-dual-stack global.bindAddress, global.ipFamilyPolicy, global.ipFamilies, and which components and Services each covers; explicit list of what is still IPv4-only (Arcade Deploy default egress, external DNS nameservers, deployed-server Services). IPv6-only is not supported.
/operate/deploy/helm/container-registry Mirrors and air-gapped installs; per-image repositories, supportImages.*, dockerRegistry.* (and that bundled PostgreSQL/Redis get no pull Secret), Arcade Deploy runner image (deployments.image, deployments.registry.server, deployments.registry.imagePullSecrets)

Each page has: when you need it, a values overlay, how to verify, common failures, and what you own vs what the chart handles. Every value name was checked against deploy/charts/arcade/values.yaml on monorepo main.

Follow-up: once this merges, #1237 replaces its IPv6/use-case TODO with links to these pages (it can't link earlier: the broken-link test rejects links to unmerged pages).

Review fixes

  • Codex P3 is fixed in bc3bbc2. The IPv6 page now lists the Services that ipFamilyPolicy and ipFamilies apply to: Engine, coordinator, dashboard, Experience API, OpenFGA, worker and worker-peers. It also notes that bundled PostgreSQL, Redis and subcharts are not covered, and adds worker-peers to the list at line 33.

Proof @ 2fd1cb0

  • Codex autoreview: Codex default model (forge-sched t38), 0 findings at P2+ (0 total) on the rename commit 2fd1cb0
  • Checks: MDX compile of the page exit 0; _meta key check passed in the pre-commit hook; no other uses of the old title or its anchor (only generated public/llms.txt, which the LLMs.txt bot regenerates)
  • Closeout: not run (closeout CLI not available on the box)
  • CI: 9 passed / 0 failed / 0 pending of 10 (1 skipped)

Note

Low Risk
Documentation-only changes with no runtime or deployment behavior modifications.

Overview
Adds three Self-host with Helm operator guides and registers them in the Helm docs nav (_meta.tsx), ahead of the existing values reference.

Internal networking documents private-only exposure via Gateway API (gateway.parentRefs, per-service overrides) or legacy private Ingress, plus engine.ssrfAllowlist / related allowlists, coordinator forwarded-header trust, and troubleshooting (including NetworkPolicy egress).

IPv6 and dual-stack documents global.bindAddress, global.ipFamilyPolicy, and global.ipFamilies (which Services they affect), verification steps, and explicit IPv4-only gaps for Arcade Deploy and bundled data stores.

Use your own container registry documents per-image repository overrides, dockerRegistry pull secrets, supportImages, Arcade Deploy runner/registry settings, air-gapped steps, and common pull failures (including PostgreSQL/Redis limitations).

public/llms.txt is updated so the new pages appear in the LLM site index.

Reviewed by Cursor Bugbot for commit 2fd1cb0. Bugbot is set up for automated code reviews on this repo. Configure here.

@vercel

vercel Bot commented Oct 12, 2026 •

Copy link
Copy Markdown

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated
docs Ready Ready Preview Oct 16, 2026 4:33pm UTC

Request Review

- Your network policy requires Services to expose both an IPv4 and an IPv6 ClusterIP.

## Values overlay

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

this section jumps straight to the code snippet without giving any context. will users know what to do with this?

# Conflicts:
#	app/en/operate/deploy/helm/_meta.tsx
#	public/llms.txt
@@ -0,0 +1,133 @@
---
title: "Use a different container registry"

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
title: "Use a different container registry"
title: "Use your own container registry"

Comment thread app/en/operate/deploy/helm/_meta.tsx Outdated
title: "IPv6 and dual-stack",
},
"container-registry": {
title: "Use a different container registry",

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
title: "Use a different container registry",
title: "Use your own container registry",

@pmdroid
pmdroid merged commit 822ab75 into main Oct 16, 2026
10 checks passed
sdserranog added a commit that referenced this pull request Oct 19, 2026
Ports the seven commits merged into ArcadeAI/docs since a3a53e8.

- Tool Recommendation section under MCP Gateways, with its glossary
  entry (#1204).
- Helm: values reference synced from the released chart, internal
  networking, IPv6/dual-stack and container registry guides, and the
  Arcade Deploy on your own cluster page (#1237, #1241, #1244). The sync
  script writes the page to content/docs and the raw chart copies to
  content/helm-chart, outside the docs source; its workflow runs on bun.
- Google auth provider: the Drive picker's JavaScript origin (#1247).
- The changelog page and its generator are gone; the menu, home page
  and llms.txt link to releases.arcade.dev (#1243).
- PagerDuty integration guide sections (#1248).
- Glossary terms no longer nest inside a longer term, and the sidebar
  wraps long labels at spaces.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

This branch was successfully deployed

1 active deployment
Preview — 2fd1cb0f Deployed Oct 16, 2026 by vercel[bot]
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants