atlas
1e8c398132
swarm-controller: get its otlp pushes past the collector, log failures
...
The collector's oidc/swarm authenticator verifies the bearer offline as a
JWT. The controller's authelia client was registered without
accessTokenSignedResponseAlg, so authelia mints it an opaque
authelia_at_ handle, which that authenticator cannot verify: by config,
no push from the vcs or jobq exporter can be accepted. Register it with
RS256 like every other client whose token lands on an oidc/* receiver.
The SDK logs a failed export at debug only, so a refused push never
reached the journal. AuthenticatedHttpClient now warns on a failed token
mint, a transport error, or a non-2xx answer (status plus a body
snippet), once per kind of failure and again every 10 minutes with a
count, and logs once when a push succeeds after failing.
Refs #5393
2026-10-17 09:44:33 +02:00
..
agent-forge-bao.nix
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
agent-github-bao.nix
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
agent-icon.nix
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
agent-matrix.nix
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
agent-memory.nix
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
agent-otel.nix
remove otel.metricIntervalMs and the host-level otel.debug
2026-10-17 08:00:14 +02:00
agent-plugins.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
agent-queue-bao.nix
module-eval: restore agentWith in agent-queue-bao.nix
2026-10-13 14:56:25 +02:00
agent-runtime.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
agent-user.nix
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
bao-basics.nix
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
bao-controller.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
bao-grants.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
bao-matrix-reader.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
bao-otel-collector.nix
make bao readers want swarm-bao-pki and drop its start limit
2026-10-16 18:29:38 +02:00
builder.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
ci-metrics.nix
read the publisher in authelia's container in the ci-metrics eval and error text
2026-10-17 00:28:16 +02:00
core-toggle.nix
swarm-controller: get its otlp pushes past the collector, log failures
2026-10-17 09:44:33 +02:00
forge-placement.nix
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
grafana.nix
grafana: forward the host env to the logs datasource plugin
2026-10-16 23:20:16 +02:00
hive-otel.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
hive-tls.nix
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
journald-severity.nix
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
lib.nix
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
matrix-core.nix
hive-matrix: keep tuwunel's OIDC secret on the host's /run, not in the container's root
2026-10-15 23:31:32 +02:00
name-guards.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
nats-authelia.nix
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
nats-tls.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
secret-publisher.nix
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
shared.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00
snapshot-store.nix
module-eval: restore seven zero-cost literal-pin cases
2026-10-17 08:00:29 +02:00
swarm-otel-core.nix
swarm-otel: keep the collector's OIDC secret on the host's /run, not in the container's root
2026-10-15 21:45:48 +02:00
swarm-otel-identity.nix
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
swarm-services-switch.nix
module-eval: drop 18 redundant cases and merge assertion-only hosts
2026-10-17 08:00:29 +02:00