atlas
d30cb7d122
keep authelia's oidc client secrets in the store, not on disk ...
The mint creates each client's secret in the swarm secret store and writes only the digest to disk. It mints only when the store answers and holds none. A new unit moves the plaintext files an earlier release left into the store and removes each once the store holds the same value. The bridge reads its secret from the store into /run before each start. The secret publisher unit and its path unit are gone.
2026-10-30 16:57:58 +01:00
remove the hive-c0re forge-credential chain nothing reads any more
2026-10-29 22:55:31 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarm-grafana /dashboards
egress dashboard: match squid's result codes by prefix
2026-10-30 16:15:19 +01:00
bao: disable the unused approle auth method, declaratively
2026-09-28 22:58:36 +02:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
forward the attic container's journal to the swarm collector
2026-10-27 16:03:23 +01:00
copy the cache's pull facts to each hive and create them in the in-swarm cache
2026-10-28 01:19:56 +01:00
run attic as a swarm service with deploy.attic.enable
2026-10-27 13:04:17 +01:00
copy the cache's pull facts to each hive and create them in the in-swarm cache
2026-10-28 01:19:56 +01:00
bao: OIDC login to the browser UI via authelia, as a metadata-only viewer
2026-09-28 19:56:38 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
push ci run metrics to victoriametrics, with a grafana board
2026-10-16 20:43:11 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
service urls carry no gateway port, httpsPort is listen-only
2026-10-25 10:45:54 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
glue: forge's controller-dependent settings move out of the forge module
2026-10-13 22:14:28 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
hive-tls: the gateway leaf uses the services-issuer identity, not a hive's
2026-10-06 14:54:07 +02:00
agents fetch the hive CA from bao at boot instead of the meta flake embedding it
2026-10-19 20:15:13 +02:00
swarm-logs-auth: check agent tokens on the log store's query route
2026-10-13 08:38:05 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
hive-forge, hive-matrix: forward each container's journal to the swarm collector
2026-10-16 13:50:23 +02:00
add swarm-metrics, an agent CLI for the metrics store
2026-10-17 10:10:17 +02:00
swarm-nats: the auth responder's store identity path is its own, not the hive's
2026-10-06 10:04:30 +02:00
swarm-nats, matrix: the queue's and matrix-ctl's store identity paths are their own, not the hive's
2026-10-06 12:04:48 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
glue: nats firewall on the wireguard interface moves out of the nats module
2026-10-14 10:15:19 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarm-authelia: run the secret publisher and a journal forwarder inside the container
2026-10-17 00:28:16 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
ops: update option pointers after grafana/bao split
2026-10-01 09:53:04 +02:00
ops: update option pointers after otel split
2026-10-01 13:00:40 +02:00
swarm-ci-runner, swarm-grafana, swarm-victorialogs: forward each container's journal to the swarm collector
2026-10-16 11:22:51 +02:00
swarm-victoriametrics: forward the container's journal to the swarm collector
2026-10-16 14:47:31 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
deploy squid on every hive host, with exporter, journal forwarding and self-check
2026-10-27 20:59:06 +01:00
publish operators' forge-profile pronouns to kv and list them in the agent prompt
2026-10-17 13:10:05 +02:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
declare the root-check link on hosts without a controller too
2026-10-30 11:18:53 +01:00
move the squid host options to deploy.hive-controller.squid
2026-10-29 09:53:20 +01:00
add a per-agent egress log mode
2026-10-30 08:52:22 +01:00
keep the cache's key and pull token for hive-priv in a root-only directory
2026-10-28 10:23:01 +01:00
drop option renames and removals older than two weeks
2026-10-16 22:04:57 +02:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
swarm-nats: take the callout issuer and user keys from the store
2026-10-06 14:53:33 +02:00
docs: put the credentials prose on the overview and the tables on the reference
2026-10-26 18:10:01 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
swarm-ui: apply the operator's stylix theme, same as the dashboard already does
2026-08-24 14:28:25 +02:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
warn when the in-swarm cache runs under another domain
2026-10-29 08:24:44 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move c0re.hyperhiveFlake to deploy.hyperhiveFlake
2026-10-29 14:31:20 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
add the egress log dashboard
2026-10-30 08:53:03 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
default swarm.attic domain and cache to the swarm's own cache on every host
2026-10-27 22:16:26 +01:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
snapshot store: bound the transfer on both ends
2026-10-16 11:45:58 +02:00
repeat the security headers in the swarm api 401 location
2026-10-28 23:37:22 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
move the small per-service host options to deploy.<service>
2026-10-29 08:44:11 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
run the root check warn-only on hyperhive's own containers, per unit, not on the container@ template
2026-10-28 23:50:58 +01:00
move hiveName to deploy.hive-controller; only a hive host needs a name
2026-10-26 18:47:49 +01:00
keep authelia's oidc client secrets in the store, not on disk
2026-10-30 16:57:58 +01:00
d30cb7d122