atlas
f70bbda7d7
gateway: send nginx stub_status to VictoriaMetrics, add a gateway dashboard ...
The gateway nginx serves stub_status on a loopback server of its own,
127.0.0.1:8085 (services.hyperhive.gateway.statusPort). The hive-tier
collector reads it with the contrib nginx receiver, which the pinned
otelcol-contrib 0.151.0 ships, so no exporter daemon is added. The
receiver dials http:// only (a unix: or http+unix: endpoint fails with
"unsupported protocol scheme"), so the listener is loopback TCP with
allow 127.0.0.1 / deny all rather than a unix socket.
The new gateway dashboard plots nginx.requests, nginx.connections_current
by state, and nginx.connections_accepted against handled, per hive.
Part of #5342 .
2026-10-16 10:01:58 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
nix: split module-eval into per-subsystem checks
2026-09-20 04:25:54 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
subagent, bash: run each subagent run and bash task in its own cgroup
2026-10-13 12:25:27 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
module-eval: restore agentWith in agent-queue-bao.nix
2026-10-13 14:56:25 +02:00
agents: swap the agent's bao leaf in with one rename
2026-10-11 10:00:43 +02:00
module-eval: agent-user test asserts the heal_own_dir form
2026-10-09 11:30:30 +02:00
swarm-bao-agent-pki: decide openbao's restart on the shared locale-independent compare
2026-10-13 17:00:56 +02:00
swarm UI: an alerts page, read by the controller with a Viewer Grafana token from bao
2026-10-15 15:16:21 +02:00
grafana: query the log store with the metrics bearer, by its swarm name
2026-10-16 02:38:47 +02:00
module-eval: evaluate shared fixture configs once
2026-10-13 08:14:50 +02:00
swarm-bao: keep the store forwarder's OIDC secret on the host's /run, not in the container's root
2026-10-15 22:39:39 +02:00
swarm-bao-pki: enabling a service mints its client leaf on the same switch
2026-10-15 08:31:33 +02:00
otel: agents reach their hive's collector by a swarm-wide name
2026-10-16 09:06:41 +02:00
swarm-ci-runner: keep the registration token on the host's /run, not in the container's root
2026-10-15 21:44:46 +02:00
grafana: query the log store with the metrics bearer, by its swarm name
2026-10-16 02:38:47 +02:00
gateway: send nginx stub_status to VictoriaMetrics, add a gateway dashboard
2026-10-16 10:01:58 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
module-eval: assert the severity table once, not once per tier
2026-09-20 14:23:56 +02:00
swarm-ui: package option moves to deploy.swarm-controller.ui.package
2026-10-16 00:35:16 +02:00
hive-matrix: keep tuwunel's OIDC secret on the host's /run, not in the container's root
2026-10-15 23:31:32 +02:00
swarm: refuse swarm.hives keys that are not valid hive identifiers
2026-10-12 21:45:50 +02:00
swarm-builder, swarm-claude-login, swarm-review-classifier: forward each container's journal to the swarm collector
2026-10-16 09:10:04 +02:00
forge: hand the OIDC client secret to forgejo from /run, not from the container's disk
2026-10-15 21:21:50 +02:00
glue: the secret publisher's authelia-dependent settings move out of the publisher module
2026-10-14 01:52:53 +02:00
module-eval: three duplicate nixosSystem fixtures come from shared.nix
2026-10-15 08:29:58 +02:00
swarm snapshot store: the receiver socket binds the mesh address even when wg-hive comes up after sockets.target
2026-10-15 08:27:54 +02:00
swarm-otel: keep the collector's OIDC secret on the host's /run, not in the container's root
2026-10-15 21:45:48 +02:00
gateway: serve the hive dashboard on <hive>.hives.<swarm> behind authelia, drop htpasswd
2026-10-15 21:44:27 +02:00
swarm containers: run the claude-code the hive pins for agents
2026-10-16 01:29:15 +02:00
f70bbda7d7