Shankar 492a392e52 feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets ...

M25: After deploying a certificate, the agent probes the live TLS
endpoint and compares SHA-256 fingerprints to verify the correct cert
is being served. Best-effort — failures don't block deployments.
New endpoints: POST /jobs/{id}/verify, GET /jobs/{id}/verification.
Migration 000008 adds verification columns to jobs table.

M26: Traefik target connector (file provider, auto-reload) and Caddy
target connector (dual-mode: admin API hot-reload or file-based).
Both wired into agent dispatch.

Also: restructured README to highlight supported integrations (issuers,
targets, notifiers) earlier, moved API/CLI/MCP sections lower. Updated
all docs (features, connectors, architecture, testing guide, why-certctl)
and fixed integration tests for 18-param RegisterHandlers signature.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-27 21:07:16 -04:00

..

agent_group_handler_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

agent_groups.go

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

agent_handler_test.go

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

agents.go

feat: M10 — agent metadata collection, Apache httpd + HAProxy target connectors

2026-03-20 02:19:28 -04:00

audit.go

Initial scaffold: certificate control plane v0.1.0

2026-03-14 08:22:17 -04:00

certificate_handler_test.go

feat: M20 Enhanced Query API — sort, time-range filters, cursor pagination, sparse fields, deployments endpoint

2026-03-23 18:56:02 -04:00

certificates.go

feat: M20 Enhanced Query API — sort, time-range filters, cursor pagination, sparse fields, deployments endpoint

2026-03-23 18:56:02 -04:00

discovery_handler_test.go

fix: remove unused import and variable flagged by go vet

2026-03-24 01:07:16 -04:00

discovery.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

est_handler_test.go

fix: use real X.509 certs in EST handler tests

2026-03-25 15:55:26 -04:00

est.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

health.go

Implement M7: auth middleware, rate limiting, CORS, and GUI login flow

2026-03-15 11:58:13 -04:00

issuer_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

issuers.go

fix: handle 204 No Content in fetchJSON, add FK-aware delete errors, v2 screenshots

2026-03-25 05:03:50 -04:00

job_handler_test.go

feat: M11b — ownership tracking, agent groups, interactive renewal approval

2026-03-20 21:02:35 -04:00

jobs.go

fix: tolerate empty body on job rejection endpoint

2026-03-23 17:39:16 -04:00

metrics.go

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

network_scan_handler_test.go

fix: Docker Compose missing migrations, network scan []int crash, demo seed data

2026-03-27 18:33:50 -04:00

network_scan.go

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

notification_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

notifications.go

Initial scaffold: certificate control plane v0.1.0

2026-03-14 08:22:17 -04:00

owner_handler_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

owners.go

fix: handle 204 No Content in fetchJSON, add FK-aware delete errors, v2 screenshots

2026-03-25 05:03:50 -04:00

policies.go

Implement M5: hardening, input validation, and Vite+React+TS dashboard

2026-03-15 01:19:19 -04:00

policy_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

profile_handler_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

profiles.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

response.go

feat: M20 Enhanced Query API — sort, time-range filters, cursor pagination, sparse fields, deployments endpoint

2026-03-23 18:56:02 -04:00

stats_handler_test.go

feat: add network certificate discovery (M21) and Prometheus metrics (M22)

2026-03-24 23:37:47 -04:00

stats.go

feat: M14 — Observability (dashboard charts, agent fleet, stats API, metrics, structured logging, rollback)

2026-03-22 19:46:13 -04:00

target_handler_test.go

Implement M9: test hardening with handler tests, negative paths, CI coverage gates

2026-03-15 14:06:48 -04:00

targets.go

Implement M5: hardening, input validation, and Vite+React+TS dashboard

2026-03-15 01:19:19 -04:00

team_handler_test.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

teams.go

Implement M5: hardening, input validation, and Vite+React+TS dashboard

2026-03-15 01:19:19 -04:00

test_utils.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

validation.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

verification_handler_test.go

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00

verification.go

feat: M25 post-deployment TLS verification + M26 Traefik/Caddy targets

2026-03-27 21:07:16 -04:00