atlas
fc33a62bf8
hive-tls: keep ca-key.pem on disk, and re-issue a leaf that does not match its key
...
hive-tls-ca no longer deletes a ca-key.pem an earlier generation left:
nothing reads it, and leaving it means a rollback finds the old key instead
of minting a new anchor. Deleting it moves to PR 3, beside dropping ca.pem
from the trust bundle.
hive-tls-resign now also re-issues when the leaf's public key differs from
the key file's. The leaf and key are moved into place by two renames, and an
interrupted pair left a certificate beside the wrong key that the validity
check accepted.
Refs #4588
2026-10-04 19:45:14 +02:00
..
agent-modules
swarm: show subagent terminals in the swarm UI
2026-10-03 01:34:01 +02:00
container-modules
nix: move the in-container modules to nix/container-modules/
2026-09-29 19:51:46 +02:00
docs
nix: gate hive-c0re on deploy.hive-controller.enable, drop hyperhive.enable
2026-09-26 01:19:49 +02:00
host-modules
hive-tls: keep ca-key.pem on disk, and re-issue a leaf that does not match its key
2026-10-04 19:45:14 +02:00
module-eval
hive-tls: keep ca-key.pem on disk, and re-issue a leaf that does not match its key
2026-10-04 19:45:14 +02:00
packages
swarm-matrix-ctl: one control binary for the matrix container, not one per job
2026-09-20 22:07:16 +02:00
script-tests
hive-agent: read the per-agent queue secret from bao in process
2026-09-29 10:18:07 +02:00
templates
nix: move the agent option namespace under services.hyperhive.agent
2026-09-17 20:19:30 +02:00
checks.nix
github: PATs live in swarm bao; the agent fetches them itself
2026-10-02 17:48:27 +02:00
devshell.nix
Add shellcheck to devshell
2026-09-15 21:45:58 +02:00
journald-severity.nix
otel: map journald PRIORITY onto a severity at every journald receiver
2026-09-20 14:23:56 +02:00
reserved-hive-fragments.nix
swarm: extract the name guards, so the module just says what is forbidden
2026-08-31 18:50:15 +02:00
reserved-names.nix
swarm-controller: refuse a new agent name the forge would reject
2026-09-24 15:16:32 +02:00
rust.nix
docs(rust): the dep-cache comment no longer describes two consumers
2026-08-11 22:29:56 +02:00
sources.nix
refactor: slim flake.nix into nix/ entry files
2026-07-13 20:55:43 +02:00
treefmt.nix
treefmt: format the web files with prettier
2026-09-02 15:25:07 +02:00