atlas
b68a8ef290
swarm-authelia: run the secret publisher and a journal forwarder inside the container ...
swarm-secret-publish and its path unit now run inside authelia's container,
beside the mint, and read each client secret at the path authelia writes it.
The host unit and host path unit, which read the secrets through the
container's root on the host, are gone, and so is
deploy.authelia.hostClientSecretDir, which only they read. The publisher keeps
its store identity, the secret-publisher leaf. The host hands the leaf and the
store's CA into the container as nspawn system credentials, and the unit loads
them; where this host mints the leaf, the container waits for swarm-bao-pki.
Authelia does not wait for the publisher, which retries every 30 seconds while
the store is down.
The container also runs the journal forwarder the other service containers
run, pushing to a receiver of its own on the swarm collector (serviceProducers
swarm-authelia) as a new machine OIDC client (swarm.authelia.otel.clientId)
that authelia registers for itself and the publisher carries to the store. The
fetch unit reads it back under the publisher's leaf, also handed to it as a
system credential, so the swarm-secret-publisher policy gains read on that one
leaf; its stanza keeps create and update, which the exact path would otherwise
take from the services/* prefix. Without the leaf the forwarder is off.
The container drops --link-journal=host, and the host collector stops reading
it. The services' "nothing at <path>" errors name the publisher in authelia's
container.
2026-10-17 00:28:16 +02:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
matrix: back up agents' room keys with a controller-minted recovery passphrase
2026-10-14 02:09:57 +02:00
review classifier: plain table cells, no backslash escapes
2026-10-16 23:34:45 +02:00
swarm: cancel an agent's turn from the swarm queue
2026-10-15 08:26:46 +02:00
swarm: let an agent publish its own icon
2026-09-28 13:47:37 +02:00
swarm-secret-client: agents may list their own subtree; controller rewrites agent policies
2026-10-01 17:43:28 +02:00
swarm: cancel an agent's turn from the swarm queue
2026-10-15 08:26:46 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
agent permissions: a destroyed agent's key goes with it
2026-10-15 18:01:40 +02:00
swarm-queue-client: re-read a held OIDC client secret when the IdP refuses it
2026-10-13 19:16:04 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
swarm UI: an agent that needs a Claude login shows it on its card
2026-10-14 20:07:46 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
swarm options: no swarm.* value depends on a deploy option or this host's hive
2026-10-04 18:13:47 +02:00
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
swarm UI: log an agent into claude from its card; the credentials go to bao and the agent picks them up
2026-10-15 13:26:29 +02:00
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
allow a max_subagents of 0: no subagents for the agent
2026-10-15 22:00:00 +02:00
swarm-controller: bound the issue-report forge calls with the forge deadline
2026-10-15 13:30:34 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
swarm-queue-client: request the bearer-authz scope when minting an agent token
2026-09-17 09:51:44 +02:00
swarm-ui, swarm-controller: the review try-out's repo and PR fields offer the repos and PRs to pick
2026-10-12 19:05:37 +02:00
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
swarm-secret-client: agents may list their own subtree; controller rewrites agent policies
2026-10-01 17:43:28 +02:00
swarm-controller: the review classifier reads a diff with 200 lines of context
2026-10-15 12:43:12 +02:00
Disambiguate the write link in the revision-writing helper's doc
2026-10-15 13:47:14 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
fix doc-comment pointers broken by the module-eval split
2026-09-20 04:31:08 +02:00
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
swarm-controller: end a dead replay, clamp stale resume ids, test on a real server
2026-10-11 23:26:24 +02:00
swarm-controller: let each test nats-server bind its own port
2026-10-14 16:33:19 +02:00
swarm CA: describe the store's pki root as the only anchor in docs and comments
2026-10-05 21:17:10 +02:00
swarm-controller: first credential-renewal pass waits for the queue connection
2026-09-30 15:46:56 +02:00
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
b68a8ef290