ef30b28b49
refactor: change EKS casUpdateMeta to use kvutil ( #882 )
2026-08-26 08:52:25 +10:00
92c2de0017
feat(firewall): scope ssh to an operator allowlist in custom.nft ( #881 )
...
The generated policy accepted ssh from any source and setup.sh rewrote
spinifex.nft on every run, so there was nowhere to record an allowlist that
survived an upgrade.
custom.nft is created once, never rewritten, and kept across a node reset.
It holds a define rather than rules, so an operator supplies a value and
cannot write a rule that fails the ruleset. The default accepts every source,
which is what the policy already did.
2026-08-25 14:37:43 -05:00
29e6d3c918
refactor: change ACM updateInUseByCAS to use kvutil ( #880 )
2026-08-25 21:57:38 +10:00
a123cbe24c
refactor: change IAM updateRoleCAS to use kvutil ( #879 )
2026-08-25 21:24:18 +10:00
602247af80
refactor: promote the daemon CAS primitives into kvutil ( #878 )
...
* refactor: promote the daemon CAS primitives into kvutil
* fix: do not warn about a lost lease when the node never held one
2026-08-25 15:37:07 +10:00
992de89df0
fix: scope ACM policy checks to the certificate a request names ( #877 )
2026-08-25 15:23:48 +10:00
535bed21f5
fix: scope policy checks for the JSON-body services ( #876 )
2026-08-25 15:00:11 +10:00
f9373abb4b
fix: lint issues
2026-08-25 14:13:09 +10:00
b9c3d8a0d9
fix: scope ELBv2 policy checks to the resources a request names ( #875 )
2026-08-25 14:09:07 +10:00
51f09e43be
refactor: move EKS cluster reconciler and teardown leases onto kvlease ( #874 )
...
* fix: carry per-instance fields on every kvlease log line
* refactor: move EKS cluster reconciler and teardown leases onto kvlease
2026-08-25 13:22:17 +10:00
d39b17c6ad
fix: scope EKS policy checks to real resource ARNs ( #873 )
2026-08-25 11:55:34 +10:00
24892e29e3
feat(console): accept credential handoff from mulgadc.com signup ( #872 )
2026-08-25 11:46:12 +10:00
f733fed177
fix: preserve ochre teardown metadata for auto-reconcile ( #863 )
...
Teardown no longer purges the index registry or KB/DataSource records by
default, mirroring how they already survive a restart; a --purge-metadata
flag restores the old full wipe for an intentional destroy. On the next
appliance connect, a new reconcile pass re-creates any registry index whose
pg table is missing and re-enqueues ingest from its persisted SourceSpecs,
so a torn-down appliance heals without operator action and keeps its KB id.
2026-08-25 11:18:13 +10:00
596865e59c
docs: README tweak
2026-08-25 11:15:32 +10:00
458f1167c4
docs: README rewrite
2026-08-25 11:04:51 +10:00
e26fcdc7ac
refactor: shared SelectNewestImage function
2026-08-25 10:43:16 +10:00
0d6676ecc8
chore: used shared iam formatter
2026-08-25 10:35:39 +10:00
b62a630989
chore: use shared arn parser
2026-08-25 10:31:52 +10:00
53ccdd6af3
chore: more rds simplifications
2026-08-25 09:55:51 +10:00
874304b7dc
chore: delete one line wrapper function
2026-08-25 09:50:51 +10:00
804c1e822b
fix: enforce resource-scoped IAM policies ( #871 )
2026-08-25 09:43:20 +10:00
8692871d15
refactor: convert the RDS reconciler to the shared kvlease package ( #870 )
2026-08-25 09:30:58 +10:00
578566b801
refactor: convert the bedrock reaper to the shared kvlease package ( #869 )
2026-08-25 08:58:02 +10:00
5675a2b37c
refactor: convert the ECS scheduler to the shared kvlease package ( #867 )
...
* refactor: ECS scheduler to used shared kvlease package
* fix: wait for the ECS lease release before Run returns
2026-08-25 08:05:17 +10:00
4869f3b021
fix: evaluate EC2 policies against the request's resource ARNs ( #866 )
2026-08-24 15:49:07 +10:00
4bbc96f1e0
refactor: extract the KV leader lease into one package ( #865 )
2026-08-24 14:38:54 +10:00
6fc7bdfab8
refactor: share EC2 ARN construction in a new arn leaf package
...
getResourceType and ec2ARN both encoded the same resource-type knowledge on
opposite sides of the gateway. The unknown sentinel becomes ok == false, since a
sentinel that still looks like a valid ARN segment is how a wrong ARN gets built;
DescribeTags keeps emitting "unknown" on the wire.
2026-08-24 14:36:17 +10:00
82654ae5e4
chore: enable prefer-destructing in test files
2026-08-24 14:29:59 +10:00
0c6606247a
chore: enable no-misused-promises
2026-08-24 14:23:09 +10:00
36d17c6a95
chore: enable jsx-a11y/prefer-tag-over-role
2026-08-24 14:15:31 +10:00
d80542ac80
fix: pin predastore dev version
2026-08-24 14:14:20 +10:00
f58fc9c00a
chore: enable no-confusing-void-expression
2026-08-24 14:07:35 +10:00
58e1bd2c5a
fix: reject and enforce IAM Condition blocks on identity policies ( #864 )
2026-08-24 14:04:32 +10:00
0c19132949
fix: enable unicorn/prefer-single-call
2026-08-24 12:34:36 +10:00
71b94cd3c2
chore: enable more vitest lint rules
2026-08-24 12:31:51 +10:00
c8aafa5de8
chore: delete stale migrations since we forced clean re init anyway
2026-08-24 12:02:21 +10:00
4fbde4daa8
chore: fix test
2026-08-24 11:52:04 +10:00
32f2d2f7f6
feat(ui): enable ultracite's anti-slop oxlint preset ( #862 )
2026-08-24 11:24:13 +10:00
f0ccf0d0c3
Fix/ecs scheduler leader cas ( #861 )
...
* fix(ecs): guard scheduler leader refresh and release with a revision CAS
* Ignore .cache
* update comment
2026-08-24 11:15:58 +10:00
52ae70ca33
refactor(ui): type the form values the CLI panels read ( #860 )
2026-08-24 10:59:33 +10:00
ae112a5a49
test(ui): type the query and SDK mock test helpers ( #859 )
2026-08-24 10:58:32 +10:00
dc92be8b7e
refactor(ui): validate route search params with zod schemas ( #858 )
2026-08-24 10:55:22 +10:00
461cdc5593
fix: improve tests
2026-08-24 10:11:32 +10:00
4122ef6b56
chore: delete duplicate tests
2026-08-24 09:59:06 +10:00
da0c5cf27f
chore: delete useless mocks
2026-08-24 09:52:16 +10:00
56d8792fa0
fix: more test cleanup
2026-08-24 09:47:07 +10:00
8e59b6c34e
chore: remove useless tests
2026-08-24 09:43:30 +10:00
97ed54445a
chore: bump the npm-dependencies group across 1 directory with 23 updates ( #857 )
2026-08-24 09:29:59 +10:00
2d925190dc
fix: disable react compiler in tests
2026-08-24 09:26:41 +10:00
1d7f2f066a
fix: disable now unneeded lint rules
2026-08-24 09:19:58 +10:00
Josh Siviour