atlas
6b7fd56f06
grafana: create the secrets directory before the store login ...
The three delivery units made /run/swarm-grafana-secrets only after
`bao login` and `bao kv get`, so with the store sealed or unreachable the
bind source was never created by them and a switch could restart the
container without it. Each script now starts with the install, from one
shared `ensureSecretDir`, and the tmpfiles comment says what is true.
The module-eval case asserts the install precedes `bao login` in all three
scripts. docs/swarm/sso.md states that after a reboot Grafana stays down
until the secret store answers.
Part of #4998 (slice 2b: grafana).
2026-10-16 01:46:50 +02:00
permissions: drop the capability and tool-group wording left after the rework
2026-10-15 18:01:40 +02:00
builder /check-flake
swarm-builder: build each agent config PR head and post a commit status
2026-10-14 03:30:46 +02:00
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
nix: finish the "moved to" comment sweep
2026-10-05 09:59:02 +02:00
grafana: create the secrets directory before the store login
2026-10-16 01:46:50 +02:00
grafana: create the secrets directory before the store login
2026-10-16 01:46:50 +02:00
reference-docs: build again with 40 workspace crates
2026-10-15 15:32:20 +02:00
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
module-eval: three duplicate nixosSystem fixtures come from shared.nix
2026-10-15 08:29:58 +02:00
CI and devshell comments say what the config does: jobTimeout bounds jobs, coverage runs nightly, dead timeout keys removed
2026-10-15 08:27:32 +02:00
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
swarm-builder: scope the forge token to the forge, one build at a time, opt-in
2026-10-14 03:30:46 +02:00
add review classifier rules for this repo
2026-10-12 21:05:38 +02:00
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00
6b7fd56f06