fba330b86e
refactor: move EKS konnectivity cert helper to the EKS agent tree
...
cmd/eks-konnectivity-cert keeps flag parsing, the log prefix and the
exit; agents/eks/konnectivitycert owns Config and Run. Output, error
text, file modes and exit codes are unchanged.
2026-10-07 11:31:59 +10:00
d064924e69
refactor: move EKS webhook cert helper to the EKS agent tree
...
cmd/eks-webhook-cert keeps flag parsing, the log prefix and the exit;
agents/eks/webhookcert owns Config and Run. Output, error text, file
modes and exit codes are unchanged.
2026-10-07 11:24:58 +10:00
8929ee47b6
refactor: move EKS gateway fetch helper to the EKS agent tree
...
Move the eks-gateway-fetch implementation to agents/eks/gatewayfetch
behind Run(ctx, Config) error, writing its TSV to Config.Out. The binary
keeps flag definitions, environment defaults, parsing, its log prefix and
exit code; each former fatal site returns an error with the same text.
2026-10-07 11:19:08 +10:00
fecf0b28a3
refactor: move EKS gateway publish helper to the EKS agent tree
...
Move the eks-gateway-publish implementation to agents/eks/gatewaypublish
behind Run(ctx, Config) error. The binary keeps flag definitions,
environment defaults, parsing, its log prefix and exit code; each former
fatal site returns an error with the same text. The retry wait now also
honours context cancellation, which the binary never triggers.
2026-10-07 11:06:35 +10:00
4501dbf69c
refactor: move ECR credential provider to the EKS agent tree
...
Move the kubelet exec credential provider implementation from
cmd/ecr-credential-provider to agents/eks/credentialprovider, exposing
one Main(in, out) entry point. The binary keeps its name and FIPS boot
import as a thin main. Moving out of cmd/ brings the code under gosec;
the one G101 hit on the kubelet API version constant is annotated.
2026-10-07 10:15:55 +10:00
20b5deb5c3
refactor: move EC2 VPC networking packages to the EC2 domain
...
Move handlers/ec2/{vpc,eigw,eip,igw,natgw,routetable} to
domains/ec2/<resource>, each named after its directory and imported as
ec2<resource>. The reconcile drift-watch source scan now matches the
ec2<resource> bucket qualifiers; its rule is unchanged.
2026-10-07 09:25:37 +10:00
7003168bc5
refactor: move network packages under the network domain
...
Move spinifex/network/* to spinifex/domains/network/* as one enclosing
move so the L0-L5 layer invariants keep classifying every package from
a single root. Package names and dependency direction are unchanged;
invariant scan roots, the RG-10 sudo allow-list path, CODEOWNERS and
the repo-root walk in the IMDS netns unit test follow the new path.
2026-10-07 08:15:48 +10:00
2b6131e217
refactor: move Hugging Face Hub client to the Ochre domain
...
gateway/bedrock/hfhub becomes domains/ochre/hfhub. Its only caller is
the spx admin ochre weights pull.
2026-10-06 17:13:09 +10:00
93f101c0f6
refactor: move Ochre vector store to the Ochre domain
...
handlers/ochrevector becomes domains/ochre/vector. Callers import it as
ochrevector because vector is a common local name in the gateway.
2026-10-06 17:06:30 +10:00
2c467988d3
refactor: move Ochre serving lifecycle to the Ochre domain
...
handlers/bedrock becomes domains/ochre. Ochre is the platform service;
Bedrock names only its AWS API surface. Persisted and observable
identifiers keep their bedrock names.
2026-10-06 16:40:38 +10:00
454defb005
refactor: move IPsec certificate handling to network host
2026-10-06 15:39:43 +10:00
001aa2d42a
refactor: move tenant CA paths to ACM domain
2026-10-06 15:22:16 +10:00
8ca3180702
refactor: replace SystemAccountID with GlobalAccountID
2026-10-06 15:01:13 +10:00
06b1eefd90
refactor: move base zone bootstrap to DNS domain
2026-10-06 14:26:38 +10:00
99278d5ffc
refactor: move DNS control plane to DNS domain
2026-10-06 14:03:01 +10:00
b5806ce630
refactor: move NATS transport to messaging foundation
2026-10-06 11:37:00 +10:00
02e0dd0dc6
refactor: move account identifiers to aws identifiers
2026-10-06 11:20:26 +10:00
931d86d5ce
refactor: move awsgw role to runtime roles
2026-10-06 09:27:18 +10:00
ad6a158f82
refactor: move northstar role to runtime roles
2026-10-06 09:01:13 +10:00
eab631b420
refactor: move predastore role to runtime roles
2026-10-06 08:57:51 +10:00
53f13f2137
refactor: move resource id generation to aws foundation
2026-10-06 08:44:28 +10:00
366e2c2e46
refactor: move image catalogue to operator
2026-10-02 15:55:08 +10:00
3f6f7a5e53
chore: resolve lint findings from package-boundary moves
2026-10-02 15:25:51 +10:00
83615f1f47
refactor: move aws xml response helpers
2026-10-02 14:26:42 +10:00
7e29f26405
refactor: move operator progress helpers
2026-10-02 14:04:26 +10:00
e2ac3dbed2
refactor: move host command execution to runtime
2026-10-02 11:04:30 +10:00
2b945ad886
refactor: move acm domain and action adapters
2026-10-02 09:54:16 +10:00
6ac02a8865
refactor: move cluster replication policy to state foundation
2026-10-02 09:43:17 +10:00
f119229861
refactor: move root configuration to bootstrap
2026-10-01 14:23:56 +10:00
dbc62562c8
refactor: move object storage adapter to providers
2026-10-01 14:16:25 +10:00
3f91a3dbcd
Merge remote-tracking branch 'origin/dev' into refactor/spinifex-package-boundaries
...
# Conflicts:
# spinifex/daemon/daemon.go
# spinifex/foundation/aws/arn/arn.go
# spinifex/foundation/aws/arn/arn_test.go
# spinifex/foundation/state/kvlease/bucket.go
# spinifex/foundation/state/kvlease/bucket_test.go
# spinifex/foundation/state/kvstore/wait.go
# spinifex/foundation/state/kvstore/wait_test.go
# spinifex/foundation/state/kvutil/bucket_creation_invariants_test.go
# spinifex/foundation/state/kvutil/export_test.go
# spinifex/foundation/state/kvutil/kvutil.go
# spinifex/foundation/state/kvutil/kvutil_test.go
# spinifex/foundation/state/kvutil/replicas.go
# spinifex/foundation/state/kvutil/replicas_health_test.go
# spinifex/foundation/state/kvutil/replicas_test.go
# spinifex/foundation/state/kvutil/state_test.go
# spinifex/gateway/auth.go
# spinifex/gateway/bedrock/logging.go
# spinifex/gateway/ec2_authz_test.go
# spinifex/gateway/ecrapi/authz.go
# spinifex/gateway/eks.go
# spinifex/gateway/gateway_test.go
# spinifex/handlers/ec2/eigw/service_impl.go
# spinifex/handlers/ec2/igw/service_impl.go
# spinifex/handlers/ec2/instance/service_impl.go
# spinifex/handlers/ec2/launchtemplate/service_impl_test.go
# spinifex/handlers/ec2/placementgroup/service_impl.go
# spinifex/handlers/ec2/placementgroup/service_impl_test.go
# spinifex/handlers/ec2/routetable/service_impl.go
# spinifex/handlers/ec2/spotinstance/service_impl.go
# spinifex/handlers/ec2/volume/service_impl.go
# spinifex/handlers/ec2/vpc/eni.go
# spinifex/handlers/ec2/vpc/security_group.go
# spinifex/handlers/ec2/vpc/service_impl.go
# spinifex/handlers/ecs/tags.go
# spinifex/handlers/eks/k3s_ha_control_plane.go
# spinifex/handlers/iam/groups.go
# spinifex/handlers/iam/retry.go
# spinifex/handlers/rds/subnetgroup_test.go
# spinifex/handlers/sts/assume_role.go
# spinifex/ingress/aws/query/parser_fuzz_test.go
# spinifex/runtime/compute/cache/cache_test.go
# spinifex/runtime/roles/nats/servername.go
# spinifex/services/awsgw/awsgw.go
# spinifex/services/viperblockd/volume_dirty.go
# spinifex/utils/account.go
2026-10-01 13:31:45 +10:00
c782585352
feat(iam): accept NotAction and NotResource on identity policies ( #1142 )
2026-10-01 10:09:39 +10:00
08bd335f0a
refactor: establish node status contract
2026-10-01 08:22:26 +10:00
4b35a2a33d
refactor: establish node VM inventory contract
2026-09-30 16:27:39 +10:00
dc636cac63
fix: cut fixed waits from viperblockd and cmd tests
2026-09-30 15:42:48 +10:00
51d855aa80
refactor: remove spx service stop/status and narrow service.Service to Start ( #1138 )
2026-09-30 15:18:49 +10:00
2b4ddad78a
chore: drop dead and redundant nolint directives
...
Removes directives for linters that are not enabled (noctx, exhaustive,
deadcode) and gosec suppressions already covered by config exclusions.
Tags ochrevector QueryResult and Filter with their existing field names
so musttag passes without changing the NATS wire format, and bounds the
RDS window slot conversion instead of suppressing G115.
2026-09-30 13:46:11 +10:00
5f21fd27e3
chore: inline more
2026-09-30 12:01:21 +10:00
810aa019bf
chore: use strings.Cut
2026-09-30 11:48:27 +10:00
610ee9bab0
chore: use slices.Sorted
2026-09-30 11:44:17 +10:00
8c4af3030e
refactor: move formation to runtime
2026-09-29 16:28:40 +10:00
248f0e0054
refactor: make formation own its protocol payloads
2026-09-29 15:47:23 +10:00
186ef7ebca
refactor: move KV utilities to state foundation
2026-09-29 15:20:44 +10:00
3494ae1319
refactor: move QMP collector to runtime role
2026-09-29 15:07:29 +10:00
9e8e889fb7
refactor: move qemunbdd to runtime role
2026-09-29 15:05:47 +10:00
f39bc64c96
refactor: extract listener address helpers to foundation
2026-09-29 15:04:00 +10:00
4d4875b133
refactor: move UI service to runtime role
2026-09-29 15:00:03 +10:00
56970d0796
refactor: move NATS service to runtime role
2026-09-29 14:52:55 +10:00
94ddc91a18
refactor: move EBS provider contract to providers
2026-09-29 14:48:08 +10:00
a74adc48b0
refactor: place EBS metadata in EC2 domain
2026-09-29 14:45:18 +10:00
joshsiv-mulga