fix(infra): expose Redpanda Admin API port 9644 [OMN-4959]

[jonahgabriel]

Summary

• Add --admin-addr 0.0.0.0:9644 to Redpanda command args in docker-compose.infra.yml
• Expose port 9644 externally via REDPANDA_ADMIN_PORT env var (default: 9644)

Context

Part of epic OMN-4956 (Omnidash Dashboard Health), Wave 0 / Phase 1: Foundation.

Redpanda Admin API port 9644 was not exposed, causing omnidash event-bus-health-poller.ts to fail with connection refused every 30 seconds.

Test plan

• docker port omnibase-infra-redpanda output includes 9644
• curl http://localhost:9644/v1/brokers returns JSON broker list
• omnidash health poller stops logging connection errors
• Existing Redpanda produce/consume on 19092 unaffected

Summary by CodeRabbit

• Chores
  • Updated infrastructure configuration to expose an admin API port for service health monitoring and diagnostics.

[coderabbitai]

📝 Walkthrough

Walkthrough

Configuration update to docker-compose.infra.yml that adds Redpanda admin API support by including an admin address flag in the startup command and exposing the admin port mapping via host port 9644.

Changes

Cohort / File(s)	Summary
Redpanda Admin API Configuration docker/docker-compose.infra.yml	Added --admin-addr 0.0.0.0:9644 flag to Redpanda startup and exposed admin API port mapping (${REDPANDA_ADMIN_PORT:-9644}:9644) with note indicating usage for omnidash health polling.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Poem

🐰 A port opens wide, nine-six-four-four,
Where rabbits peek through the admin door,
Health checks bounce like carrots so green,
The finest dashboards we've ever seen! 🥕

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and specifically summarizes the main change: exposing Redpanda Admin API port 9644 in the infrastructure configuration, which is the primary focus of the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch jonah/omn-4959-expose-redpanda-admin-port

📝 Coding Plan

• Generate coding plan for human review comments

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

🧹 Nitpick comments (1)

docker/docker-compose.infra.yml (1)

281-281: Optional hardening: bind Admin API to localhost by default.

Line 281 currently publishes the admin endpoint on all host interfaces. For safer local defaults, consider binding to 127.0.0.1 unless remote access is explicitly needed.

Suggested change

-      - "${REDPANDA_ADMIN_PORT:-9644}:9644"
+      - "127.0.0.1:${REDPANDA_ADMIN_PORT:-9644}:9644"

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed.

In `@docker/docker-compose.infra.yml` at line 281, The Admin API port mapping
currently exposes "${REDPANDA_ADMIN_PORT:-9644}:9644" on all interfaces; change
it to bind to localhost by default by prefixing the host IP, e.g.
"127.0.0.1:${REDPANDA_ADMIN_PORT:-9644}:9644", so the Admin API is only
reachable from the host unless an explicit remote bind is needed; update any
related docs or environment variable notes for REDPANDA_ADMIN_PORT if remote
access should be enabled in specific deployments.

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Nitpick comments:
In `@docker/docker-compose.infra.yml`:
- Line 281: The Admin API port mapping currently exposes
"${REDPANDA_ADMIN_PORT:-9644}:9644" on all interfaces; change it to bind to
localhost by default by prefixing the host IP, e.g.
"127.0.0.1:${REDPANDA_ADMIN_PORT:-9644}:9644", so the Admin API is only
reachable from the host unless an explicit remote bind is needed; update any
related docs or environment variable notes for REDPANDA_ADMIN_PORT if remote
access should be enabled in specific deployments.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 6bd397a7-dbc6-4348-80a9-9e873cfd4899

📥 Commits

Reviewing files that changed from the base of the PR and between f315a02 and 6fc8dc6.

📒 Files selected for processing (1)

• docker/docker-compose.infra.yml