atlas
da88d450dd
feat( #3517 ): a named capability for authelia's bearer-authz scope ...
A scraper reaches a service published behind the gateway by presenting an
access token to authelia's authz endpoint, which requires the client to
carry authelia.bearer.authz. Nothing could express that: scopes are
derived from kind, and a machine client rendered an empty list.
A named capability rather than a free-form scopes list, for the reason
the derivation exists — authelia refuses some scope/grant combinations
outright, openid with client_credentials among them, and a list makes
those expressible again.
The two assertions carry their weight: authelia checks the same
obligations, but in its preStart validator, so a violation builds and
deploys cleanly and then fails to restart with swarm SSO attached to it.
2026-08-24 13:35:14 +02:00
fix(otel): let the SDK resolve hive-c0re's OTLP endpoint
2026-08-19 01:38:54 +02:00
fix( #3517 ): metrics are not optional, and the endpoint is denied by default
2026-08-24 12:06:51 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3527 ): a missing source must report as zero, not as empty
2026-08-19 20:27:00 +02:00
swarm-grafana /dashboards
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
feat( #3125 ): a swarm-tier OTEL collector, in its own container
2026-08-18 21:02:18 +02:00
feat(nix): move the forge host options under services.hyperhive.swarm
2026-08-05 03:44:53 +02:00
feat( #3162 ): warn when a hive with an existing homeserver has not pinned serverName
2026-08-18 12:29:31 +02:00
docs(network): drop the otel reasoning instead of restating it
2026-08-19 02:04:57 +02:00
fix( #2573 ): also add /etc/tmpfiles.d to hive-priv ReadWritePaths (same EROFS class)
2026-07-18 16:39:20 +02:00
fix( #3462 ): apply the name check in the unit that runs on the deploy
2026-08-18 21:54:38 +02:00
refactor(nix): a hive's domain comes out of the swarm directory
2026-08-05 22:43:17 +02:00
fix( #3343 ): move the all-local queue derivations into the deployment mode
2026-08-16 19:37:49 +02:00
feat( #3554 ): let a hive-owned service declare a scrape target
2026-08-23 22:45:56 +02:00
feat( #3517 ): a named capability for authelia's bearer-authz scope
2026-08-24 13:35:14 +02:00
fix(nix): a missing swarm-services leaf must not kill the whole gateway
2026-08-06 00:30:22 +02:00
fix( #3363 ): swarm containers write their own resolver file
2026-08-17 17:30:15 +02:00
swarm-ui: show the swarm's name as the page title and top-left brand
2026-08-18 18:34:56 +02:00
feat( #3494 ): provision the claude-usage dashboard
2026-08-23 23:21:50 +02:00
fix( #3363 ): give the queue's auth responder the hive CA
2026-08-17 19:57:44 +02:00
fix(swarm-otel): reserve the swarm tier's component names from hive names
2026-08-24 13:21:34 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
feat( #3125 ): reshape the hive-to-swarm OTEL hop by domain
2026-08-18 21:02:18 +02:00
refactor( #2862 ): keep the option at services.hyperhive.snapshotStore
2026-07-31 19:03:24 +02:00
swarm-ui: header profile menu — initials avatar, authelia settings + logout ( #3570 )
2026-08-24 00:01:30 +02:00
feat(swarm-victoriametrics): scrape the store's own prometheus endpoint
2026-08-19 21:40:40 +02:00
docs+nix: fix stale certFingerprint/HYPERHIVE_PEERS references (hyperhive#3294)
2026-08-15 19:56:11 +02:00
fix( #3462 ): the swarm-services leaf never covered grafana, metrics or otel
2026-08-18 21:54:38 +02:00
da88d450dd