atlas
92559af8e7
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd ...
The dashboard, its API, the swagger UI and the agent routes move to their
own vhost, `swarm.dashboardDomain` = `<hive>.hives.<swarm.domain>`, under
the swarm domain so authelia's session cookie reaches it. `/`, `/api/` and
`/api/docs/` ask authelia through `auth_request`, and authelia's
`operatorsOnly` rule for each hive's dashboard name lets only the admins
group in. The hive domain keeps matrix discovery and redirects every other
path to the new name.
The name rides as a SAN on the hive's own gateway leaf: the per-hive bao
role allows it, and hive-tls asks for it and checks coverage.
HTTP Basic auth is gone: the htpasswd writer and its test, the
`hivectl gateway` verbs and host-socket requests, the `gateway.auth`
options (now a removed-option error), the unauthorized page and the bcrypt
dependency. tmpfiles deletes a leftover gateway.htpasswd, which held
bcrypt hashes at 0644.
c0re hands out dashboard and agent URLs on the new name
(HYPERHIVE_DASHBOARD_DOMAIN), and the swarm controller's hive roster
carries each hive's dashboard name for the swarm UI's hive list.
Closes #3469
2026-10-15 21:44:27 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
hive-c0re: a refused rev is an error log + Grafana alert, not a PR comment
2026-10-09 22:25:39 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
hive-c0re: the OTEL exporter doc says it is what the container stats feed, not a second consumer
2026-10-15 08:28:10 +02:00
hive: remove the read-only schedules page and the old schedule store
2026-10-13 01:45:12 +02:00
agent permissions: hold hive-c0re's stored grant until the agent's own read
2026-10-15 18:01:40 +02:00
hive-c0re: a deploy request for a rev applied/main already contains is a no-op
2026-10-09 22:25:39 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
hive-c0re: remove the approvals subsystem
2026-10-04 23:55:32 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
matrix: drop the shared-netns claims the netns move left behind
2026-10-15 09:52:06 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
agent permissions: a destroyed agent's key goes with it
2026-10-15 18:01:40 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
agents: read the hive's name and domain at runtime, not from the build
2026-10-12 10:52:21 +02:00
hive-c0re: stop silently dropping errors on credential/marker writes
2026-10-09 10:24:15 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
hive-c0re: clear O_NONBLOCK on the snapshot-store socket before btrfs send gets it
2026-10-11 02:42:45 +02:00
hive status publishing: read the hive's OIDC secret from the store, retry until it is there
2026-10-10 01:05:33 +02:00
swarm: present tense + no-queue-coordinates wording
2026-09-13 12:01:58 +02:00
swarm-queue-client: re-read a held OIDC client secret when the IdP refuses it
2026-10-13 19:16:04 +02:00
agent permissions: one set, tool groups included, set at agent creation
2026-10-15 18:01:40 +02:00
test(hive-c0re): one crate-wide lock for env-mutating tests
2026-08-19 01:38:54 +02:00
92559af8e7