vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity
hyperhive/nix
History
Repository files (latest commit first)
Filename Latest commit message Latest commit date
atlas 6630a51022 trust the swarm services ca in swarm-ci-metrics 
The poller's forge, authelia and collector calls go to leaves issued by
the swarm's own CA, and its reqwest/rustls roots come from SSL_CERT_FILE,
which the unit never set. Every pass since it was deployed fails
"invalid peer certificate: UnknownIssuer" before pushing, so the CI runs
dashboard has no hyperhive.ci.run.* samples (#5438).

- nix/host-modules/swarm-ci-metrics.nix: import lib/hive-ca-trust.nix and
  register a host trustBundle for the unit, as swarm-controller does; it
  adds swarm-ci-metrics-ca-bundle.service and sets SSL_CERT_FILE.
- nix/module-eval/ci-metrics.nix: a case asserting the unit's
  SSL_CERT_FILE is its bundle path when self-signed, with the bundle
  unit's ordering, and absent where the poller is off.
- docs/swarm/ci-metrics.md: how the poller trusts the swarm's CA.
2026-10-17 23:28:03 +02:00
..
agent-modules move dashboardPort, claudeCodePackage and extraResourceAttributes to deploy.hive-controller 2026-10-17 13:43:16 +02:00
archetypes archetypes: build an archetype agent from its archetype's module on the hive 2026-10-17 16:27:21 +02:00
builder/check-flake swarm-builder: give the check flake the hive's docs source 2026-10-17 13:39:42 +02:00
container-modules swarm-authelia: run the secret publisher and a journal forwarder inside the container 2026-10-17 00:28:16 +02:00
docs drop option renames and removals older than two weeks 2026-10-16 22:04:57 +02:00
host-modules trust the swarm services ca in swarm-ci-metrics 2026-10-17 23:28:03 +02:00
module-eval trust the swarm services ca in swarm-ci-metrics 2026-10-17 23:28:03 +02:00
packages move the hive's vhosts and matrix discovery out of the gateway 2026-10-17 15:07:33 +02:00
script-tests swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare 2026-10-13 17:00:56 +02:00
templates build every agent from the agent-base template 2026-10-17 09:24:52 +02:00
checks.nix add swarm-metrics, an agent CLI for the metrics store 2026-10-17 10:10:17 +02:00
devshell.nix CI and devshell comments say what the config does: jobTimeout bounds jobs, coverage runs nightly, dead timeout keys removed 2026-10-15 08:27:32 +02:00
journald-severity.nix otel: map journald PRIORITY onto a severity at every journald receiver 2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix swarm: extract the name guards, so the module just says what is forbidden 2026-08-31 18:50:15 +02:00
reserved-names.nix push ci run metrics to victoriametrics, with a grafana board 2026-10-16 20:43:11 +02:00
rust.nix add review classifier rules for this repo 2026-10-12 21:05:38 +02:00
sources.nix drop option renames and removals older than two weeks 2026-10-16 22:04:57 +02:00
treefmt.nix treefmt: format the web files with prettier 2026-09-02 15:25:07 +02:00