iris
4d5a65a185
swarm-ui: a request that finds the login ended reloads the page to the login ...
The gateway answered every non-page request without a session with a login
redirect, which fetch and EventSource cannot follow across origins, so polls,
forms and streams failed with errors that said nothing about the session. It
now answers anything that does not ask for text/html with a 401 and a
WWW-Authenticate header, and the swarm UI reloads on that 401, from a wrapped
fetch (one place for every call) and from a probe after a stream dies. A second
reload within ten seconds is skipped so a page that keeps answering 401 cannot
loop. The proxy test and the docs follow.
2026-10-28 19:19:26 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
swarm-grafana /dashboards
review classifier: export request, verdict, check and run metrics, with a dashboard
2026-10-24 23:24:31 +02:00
bao: disable the unused approle auth method, declaratively
2026-09-28 22:58:36 +02:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
default swarm.attic domain and cache to the swarm's own cache on every host
2026-10-27 22:16:26 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
copy the cache's pull facts to each hive and create them in the in-swarm cache
2026-10-28 01:19:56 +01:00
run attic as a swarm service with deploy.attic.enable
2026-10-27 13:04:17 +01:00
copy the cache's pull facts to each hive and create them in the in-swarm cache
2026-10-28 01:19:56 +01:00
bao: OIDC login to the browser UI via authelia, as a metadata-only viewer
2026-09-28 19:56:38 +02:00
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
swarm-controller: get its otlp pushes past the collector, log failures
2026-10-17 09:44:33 +02:00
glue: forge's controller-dependent settings move out of the forge module
2026-10-13 22:14:28 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
hive-tls: the gateway leaf uses the services-issuer identity, not a hive's
2026-10-06 14:54:07 +02:00
agents fetch the hive CA from bao at boot instead of the meta flake embedding it
2026-10-19 20:15:13 +02:00
swarm-logs-auth: check agent tokens on the log store's query route
2026-10-13 08:38:05 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
swarm: OIDC clients registered wherever authelia runs; nats + matrix secrets from bao
2026-10-05 09:58:02 +02:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
swarm-nats: forward the queue container's journal to the swarm collector
2026-10-16 09:08:21 +02:00
glue: nats firewall on the wireguard interface moves out of the nats module
2026-10-14 10:15:19 +02:00
agents get a todo when assigned to an issue or PR, rewritten when unassigned and cleared on close
2026-10-22 07:28:53 +02:00
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
ops: update option pointers after grafana/bao split
2026-10-01 09:53:04 +02:00
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
serve matrix discovery at the swarm apex, keep the pinned hive case
2026-10-25 12:15:22 +01:00
keep the matrix appservice registration in bao, with the host file as the last copy
2026-10-27 17:33:06 +01:00
deploy squid on every hive host, with exporter, journal forwarding and self-check
2026-10-27 20:59:06 +01:00
publish operators' forge-profile pronouns to kv and list them in the agent prompt
2026-10-17 13:10:05 +02:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
build agents from internal/meta when it pins their config
2026-10-24 21:13:24 +02:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
send agent traffic through squid once its hive announces it
2026-10-28 17:24:34 +01:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
swarm-nats: take the callout issuer and user keys from the store
2026-10-06 14:53:33 +02:00
docs: put the credentials prose on the overview and the tables on the reference
2026-10-26 18:10:01 +01:00
warn when a hive host without a leaf names the otel oidc secret file
2026-10-28 00:46:19 +01:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
default swarm.attic domain and cache to the swarm's own cache on every host
2026-10-27 22:16:26 +01:00
rebuild an agent's closure when the binary cache lost it
2026-10-28 13:51:01 +01:00
swarm: drop the -agent client suffix refusal from authelia and the queue responder
2026-10-24 15:02:32 +02:00
keep authelia's keys in bao, seeded from the existing key files
2026-10-27 16:01:57 +01:00
drop port-collision checks against swarm.otel.telemetryPort
2026-10-24 23:02:37 +02:00
fetch the self-check's password as a systemd credential
2026-10-28 13:50:35 +01:00
require both attic options, follow attic's cache-name rule, read the token from a file
2026-10-27 13:02:43 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
pin internal/meta's hyperhive on the controller's rev and rebuild agents when it moves
2026-10-24 21:13:24 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
store the forge webhook secret and grafana's secret key in bao, seeded from the existing files
2026-10-27 13:00:13 +01:00
drop port-collision checks against swarm.otel.telemetryPort
2026-10-24 23:02:37 +02:00
docs: put the credentials prose on the overview and the tables on the reference
2026-10-26 18:10:01 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
default swarm.attic domain and cache to the swarm's own cache on every host
2026-10-27 22:16:26 +01:00
hive collector runs only on hive hosts; review classifier pushes metrics through its forwarder
2026-10-26 15:58:44 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
snapshot store: bound the transfer on both ends
2026-10-16 11:45:58 +02:00
swarm-ui: a request that finds the login ended reloads the page to the login
2026-10-28 19:19:26 +01:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
run attic as a swarm service with deploy.attic.enable
2026-10-27 13:04:17 +01:00
4d5a65a185