atlas
d4e20803ec
otel: agents reach their hive's collector by a swarm-wide name ...
Agents are handed `http://hive-collector .<swarm domain>:<port>` as their
otel endpoint instead of `http://<bridge IP>:<port>`. Every hive running
its collector contributes the name to `gateway.localNames`, so its own
dnsmasq answers it with its bridge IP, the way the queue's name already
works. The rendered meta flake then carries no hive-specific address,
which a swarm-level render needs (#4857 , operator ruling 100744: "b").
hive-c0re's own exporter keeps the bridge address: on the host the name
may resolve to loopback through `gateway.localHostsEntry`, where the
receiver does not listen.
The name sits under the swarm domain and starts with `hive`, a fragment
no hive name may contain, so no hive's default domain can take it.
2026-10-16 09:06:41 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
hive-c0re: a refused rev is an error log + Grafana alert, not a PR comment
2026-10-09 22:25:39 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
otel: agents reach their hive's collector by a swarm-wide name
2026-10-16 09:06:41 +02:00
hive: remove the read-only schedules page and the old schedule store
2026-10-13 01:45:12 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
hive-c0re: a deploy request for a rev applied/main already contains is a no-op
2026-10-09 22:25:39 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
hive-c0re: remove the approvals subsystem
2026-10-04 23:55:32 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
matrix: drop the shared-netns claims the netns move left behind
2026-10-15 09:52:06 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: a destroyed agent's key goes with it
2026-10-15 18:01:40 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
agents: read the hive's name and domain at runtime, not from the build
2026-10-12 10:52:21 +02:00
hive-c0re: stop silently dropping errors on credential/marker writes
2026-10-09 10:24:15 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
hive-c0re: clear O_NONBLOCK on the snapshot-store socket before btrfs send gets it
2026-10-11 02:42:45 +02:00
hive status publishing: read the hive's OIDC secret from the store, retry until it is there
2026-10-10 01:05:33 +02:00
swarm: present tense + no-queue-coordinates wording
2026-09-13 12:01:58 +02:00
swarm-queue-client: re-read a held OIDC client secret when the IdP refuses it
2026-10-13 19:16:04 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
test(hive-c0re): one crate-wide lock for env-mutating tests
2026-08-19 01:38:54 +02:00
d4e20803ec