jenkins
|
9d42ff33f5
|
Merge origin/main (#16 image-builder) into hermes-safe-gitea-pr
Resolve 8 conflicts, uniting #16's daemonless image-release lane with
#14's SCM broker + node-audit boundary. Nothing dropped from either side.
- quality_coverage.py / test_quality_coverage_helpers.py: take main's
dual-metric gate (line+branch enforced per file at minimum_percent);
drop #14's now-dead branch_tracked_files/minimum_branch_percent keys.
- quality_contract.json: union all lists (managed_modules, lint_paths,
coverage_sources, tracked_files, hygiene globs) so #14's scm-broker,
git_pack_objects, receive_pack_scan, deadline_http and node_polkit_audit
are branch-checked alongside #16's image-builder modules.
- Vault auth (vault_k8s_auth_configure.sh): coexist both role sets. Keep
#16's hermes-switchyard split + hermes-jenkins-token-seed; keep #14's
hermes-scm-broker role. Preserve #14's security property: hermes-agent
no longer holds developer-gitea (broker role carries it).
- agent-deployment.yaml / stage_runtime_access.py: keep #16's
jenkins-image-build-token injection/staging; keep #14's removal of the
agent's gitea-token/gitea-username.
- Bump vault-k8s-auth-hermes job -9 -> -10 (and its health check + test)
so the merged auth config re-applies over any -9 already in-cluster.
- flux hermes dependsOn: union jenkins + hermes-scm-broker + observer-rbac.
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-17 21:07:06 -03:00 |
|
jenkins
|
5020e49057
|
hermes: track new boundary modules in gate
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-17 15:15:47 -03:00 |
|
jenkins
|
e8c26ecf85
|
hermes: add daemonless agent image release lane
|
2026-08-17 08:25:52 -03:00 |
|
jenkins
|
8c6e3acdac
|
hermes: isolate Atlas SCM write authority
|
2026-08-17 07:58:44 -03:00 |
|
jenkins
|
8f45f47e60
|
refactor: restructure services layout, retire oceanus, add aether scaffolding
- Move flat service manifests into structured subdirs (apps/, bootstrap-jobs/,
repair-jobs/, migration-jobs/, validation-jobs/, node-ops/, networking/)
- Retire oneoffs/ directories across services
- Remove oceanus cluster and its host roles; add aether cluster + terraform scaffolding
- Reorganize scripts/ into ops/, render/, sync/, manual-tests/
- Add Makefile with render/validate/test/flux targets and repo-structure tests
- Update flux-system application CRs to the new paths
- Add hermes-automated-triage-24h-plan knowledge doc (+ comms mirror)
- Refresh knowledge catalogs, dashboards, vmalert rules, quality contract
Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
|
2026-08-05 16:21:36 -03:00 |
|
jenkins
|
2477bf7512
|
test(titan-iac): cover dashboard generator contract
|
2026-04-22 15:31:36 -03:00 |
|
|
|
120efb9965
|
test(titan-iac): cover mailu sync scripts
|
2026-04-22 02:53:00 -03:00 |
|
|
|
b9ce28819b
|
ci(titan-iac): apply supply-chain waiver ledger
|
2026-04-22 00:42:03 -03:00 |
|
jenkins
|
d5bf4257b8
|
quality(titan-iac): widen enforced coverage contract
|
2026-04-20 21:39:53 -03:00 |
|
|
|
7958c54f48
|
testing(ci): stop requiring AGENTS.md in titan-iac quality gate
|
2026-04-10 17:39:07 -03:00 |
|
|
|
48eb2de826
|
testing(ci): document quality gate scope boundaries
|
2026-04-10 17:26:42 -03:00 |
|
|
|
d6d7cea6ad
|
testing(ci): centralize quality gate contract
|
2026-04-10 17:11:02 -03:00 |
|
