Commit Graph

  • 3bf0379daa fix: gate sts:AssumeRole on the caller's identity policy (#889) Julian Sommer 2026-08-27 09:04:25 +10:00
  • 6fd9b17f62 feat: add kvstore watch and the reconciler loop (#900) Josh Siviour 2026-08-27 08:53:21 +10:00
  • 2d370081c3 refactor: route bedrock serving endpoints through kvstore (#899) Josh Siviour 2026-08-27 00:17:26 +10:00
  • 8dddf9d55e refactor: convert the bedrock access, credential and usage stores to kvstore (#898) Josh Siviour 2026-08-26 23:55:58 +10:00
  • f0b650a83b refactor: convert the bedrock guardrail and provisioned stores to kvstore (#897) Josh Siviour 2026-08-26 23:38:33 +10:00
  • 526cd2d070 feat: enforce guardrail topicPolicy denied-topics at inference (#896) Josh Siviour 2026-08-26 23:33:58 +10:00
  • 70414154c5 refactor: convert the bedrock weights, prices and logging stores to kvstore (#895) Josh Siviour 2026-08-26 23:23:25 +10:00
  • e24fd42bdc refactor: convert the ochrevector appliance to kvstore (#894) Josh Siviour 2026-08-26 23:02:13 +10:00
  • e54b79b7bf fix: harden ochre ingest progress, job cancel, and retrieve error typing (#893) Josh Siviour 2026-08-26 23:01:57 +10:00
  • d1c9f5c6ae refactor: convert the ochrevector registry and kb stores to kvstore (#892) Josh Siviour 2026-08-26 22:36:19 +10:00
  • 9e450ac94b test: verify embedding sub-batching splits oversized input into bounded requests (#891) Josh Siviour 2026-08-26 22:08:04 +10:00
  • 5fc4eb0289 refactor: convert the acm certificate store to kvstore (#890) Josh Siviour 2026-08-26 22:07:46 +10:00
  • d43c0e4302 feat: add kvstore typed store and convert the ochrevector job store (#888) Josh Siviour 2026-08-26 15:16:28 +10:00
  • 46d8c03293 fix: pin predastore to the dev build that drops ExtractPolicyName Julian Sommer 2026-08-26 15:08:35 +10:00
  • 08da638375 refactor: route policy ARN parsing through the shared bluebottle parser (#887) Julian Sommer 2026-08-26 14:51:18 +10:00
  • 155f869d23 refactor: convert placement group CAS loops to kvutil (#886) Josh Siviour 2026-08-26 13:19:21 +10:00
  • a865ffc48e release: update go.mod for v1.18.0 v1.18.0 Julian Sommer 2026-08-26 12:32:26 +10:00
  • 2eef7b2b42 fix: use the sigv4 helper to redact session tokens from mismatch logs Julian Sommer 2026-08-26 12:17:43 +10:00
  • 521e547c5e chore: bump cov req Julian Sommer 2026-08-26 12:04:07 +10:00
  • 9637978177 fix: pin the ISO cells' spinifex checkout to GIT_BRANCH Julian Sommer 2026-08-26 11:40:43 +10:00
  • 3196c0c993 test: move gateway authz tests to external test packages Julian Sommer 2026-08-26 11:33:55 +10:00
  • e3d394864d fix: propagate KV read errors when releasing an ECS reservation Julian Sommer 2026-08-26 11:33:51 +10:00
  • 78a0dc7661 fix: stop reporting a placement group read failure as a successful (#885) Josh Siviour 2026-08-26 11:19:05 +10:00
  • 8a300431a6 fix: support '?' and backslash escapes in EC2 filter wildcard matching (#884) Julian Sommer 2026-08-26 11:08:19 +10:00
  • 474dff05d8 refactor: label kvutil CAS stages and convert routetable (#883) Josh Siviour 2026-08-26 10:26:31 +10:00
  • ef30b28b49 refactor: change EKS casUpdateMeta to use kvutil (#882) Josh Siviour 2026-08-26 08:52:25 +10:00
  • 92c2de0017 feat(firewall): scope ssh to an operator allowlist in custom.nft (#881) Ben Duncan 2026-08-25 14:37:43 -05:00
  • 29e6d3c918 refactor: change ACM updateInUseByCAS to use kvutil (#880) Josh Siviour 2026-08-25 21:57:38 +10:00
  • a123cbe24c refactor: change IAM updateRoleCAS to use kvutil (#879) Josh Siviour 2026-08-25 21:24:18 +10:00
  • 602247af80 refactor: promote the daemon CAS primitives into kvutil (#878) Josh Siviour 2026-08-25 15:37:07 +10:00
  • 992de89df0 fix: scope ACM policy checks to the certificate a request names (#877) Julian Sommer 2026-08-25 15:23:48 +10:00
  • 535bed21f5 fix: scope policy checks for the JSON-body services (#876) Julian Sommer 2026-08-25 15:00:11 +10:00
  • f9373abb4b fix: lint issues Julian Sommer 2026-08-25 14:13:09 +10:00
  • b9c3d8a0d9 fix: scope ELBv2 policy checks to the resources a request names (#875) Julian Sommer 2026-08-25 14:09:07 +10:00
  • 51f09e43be refactor: move EKS cluster reconciler and teardown leases onto kvlease (#874) Josh Siviour 2026-08-25 13:22:17 +10:00
  • d39b17c6ad fix: scope EKS policy checks to real resource ARNs (#873) Julian Sommer 2026-08-25 11:55:34 +10:00
  • 24892e29e3 feat(console): accept credential handoff from mulgadc.com signup (#872) Ben Duncan 2026-08-24 20:46:12 -05:00
  • f733fed177 fix: preserve ochre teardown metadata for auto-reconcile (#863) Josh Siviour 2026-08-25 11:18:13 +10:00
  • 596865e59c docs: README tweak Julian Sommer 2026-08-25 11:15:32 +10:00
  • 458f1167c4 docs: README rewrite Julian Sommer 2026-08-25 11:04:51 +10:00
  • e26fcdc7ac refactor: shared SelectNewestImage function Julian Sommer 2026-08-25 10:43:16 +10:00
  • 0d6676ecc8 chore: used shared iam formatter Julian Sommer 2026-08-25 10:35:39 +10:00
  • b62a630989 chore: use shared arn parser Julian Sommer 2026-08-25 10:31:52 +10:00
  • 53ccdd6af3 chore: more rds simplifications Julian Sommer 2026-08-25 09:55:51 +10:00
  • 874304b7dc chore: delete one line wrapper function Julian Sommer 2026-08-25 09:50:51 +10:00
  • 804c1e822b fix: enforce resource-scoped IAM policies (#871) Julian Sommer 2026-08-25 09:43:20 +10:00
  • 8692871d15 refactor: convert the RDS reconciler to the shared kvlease package (#870) Josh Siviour 2026-08-25 09:30:58 +10:00
  • 578566b801 refactor: convert the bedrock reaper to the shared kvlease package (#869) Josh Siviour 2026-08-25 08:58:02 +10:00
  • 5675a2b37c refactor: convert the ECS scheduler to the shared kvlease package (#867) Josh Siviour 2026-08-25 08:05:17 +10:00
  • 4869f3b021 fix: evaluate EC2 policies against the request's resource ARNs (#866) Julian Sommer 2026-08-24 15:49:07 +10:00
  • 4bbc96f1e0 refactor: extract the KV leader lease into one package (#865) Josh Siviour 2026-08-24 14:38:54 +10:00
  • 6fc7bdfab8 refactor: share EC2 ARN construction in a new arn leaf package Julian Sommer 2026-08-24 14:36:17 +10:00
  • 82654ae5e4 chore: enable prefer-destructing in test files Julian Sommer 2026-08-24 14:29:59 +10:00
  • 0c6606247a chore: enable no-misused-promises Julian Sommer 2026-08-24 14:23:09 +10:00
  • 36d17c6a95 chore: enable jsx-a11y/prefer-tag-over-role Julian Sommer 2026-08-24 14:15:31 +10:00
  • d80542ac80 fix: pin predastore dev version Julian Sommer 2026-08-24 14:14:20 +10:00
  • f58fc9c00a chore: enable no-confusing-void-expression Julian Sommer 2026-08-24 14:07:35 +10:00
  • 58e1bd2c5a fix: reject and enforce IAM Condition blocks on identity policies (#864) Julian Sommer 2026-08-24 14:04:32 +10:00
  • 0c19132949 fix: enable unicorn/prefer-single-call Julian Sommer 2026-08-24 12:34:36 +10:00
  • 71b94cd3c2 chore: enable more vitest lint rules Julian Sommer 2026-08-24 12:31:51 +10:00
  • c8aafa5de8 chore: delete stale migrations since we forced clean re init anyway Julian Sommer 2026-08-24 12:02:21 +10:00
  • 4fbde4daa8 chore: fix test Julian Sommer 2026-08-24 11:52:04 +10:00
  • 32f2d2f7f6 feat(ui): enable ultracite's anti-slop oxlint preset (#862) Julian Sommer 2026-08-24 11:24:13 +10:00
  • f0ccf0d0c3 Fix/ecs scheduler leader cas (#861) Josh Siviour 2026-08-24 11:15:58 +10:00
  • 52ae70ca33 refactor(ui): type the form values the CLI panels read (#860) Julian Sommer 2026-08-24 10:59:33 +10:00
  • ae112a5a49 test(ui): type the query and SDK mock test helpers (#859) Julian Sommer 2026-08-24 10:58:32 +10:00
  • dc92be8b7e refactor(ui): validate route search params with zod schemas (#858) Julian Sommer 2026-08-24 10:55:22 +10:00
  • 461cdc5593 fix: improve tests Julian Sommer 2026-08-24 10:11:32 +10:00
  • 4122ef6b56 chore: delete duplicate tests Julian Sommer 2026-08-24 09:59:06 +10:00
  • da0c5cf27f chore: delete useless mocks Julian Sommer 2026-08-24 09:52:16 +10:00
  • 56d8792fa0 fix: more test cleanup Julian Sommer 2026-08-24 09:47:07 +10:00
  • 8e59b6c34e chore: remove useless tests Julian Sommer 2026-08-24 09:43:30 +10:00
  • 97ed54445a chore: bump the npm-dependencies group across 1 directory with 23 updates (#857) dependabot[bot] 2026-08-24 09:29:59 +10:00
  • 2d925190dc fix: disable react compiler in tests Julian Sommer 2026-08-24 09:26:41 +10:00
  • 1d7f2f066a fix: disable now unneeded lint rules Julian Sommer 2026-08-24 09:19:58 +10:00
  • 3eb3ffdc9a feat: use oxlint native react compiler Julian Sommer 2026-08-24 09:18:05 +10:00
  • 9b5acc738c chore: bump the go-dependencies group with 8 updates (#855) dependabot[bot] 2026-08-24 09:03:18 +10:00
  • a80ffbc0a0 fix: suppress OVN DHCP on a statically-addressed customer ENI port (#854) Josh Siviour 2026-08-23 23:18:13 +10:00
  • 8b3c706ea3 docs: rework the multi-node install guide, fix cross-doc links Ben Duncan 2026-08-21 14:14:28 -05:00
  • b834910e64 UCS tweaks Ben Duncan 2026-08-21 09:53:04 -05:00
  • b482b41e96 feat: implement EC2 MonitorInstances and UnmonitorInstances (#853) Josh Siviour 2026-08-21 15:36:40 +10:00
  • bed994859c fix: durable Ochre/RDS appliance lifecycle (static ENI, teardown GC, stale LSP) (#852) Josh Siviour 2026-08-21 15:11:02 +10:00
  • e22db02d24 fix: Rewrite Cisco and OnLogic docs tomnewton-mulga 2026-08-21 14:05:34 +10:00
  • 3bb35deea2 fix: dial the ochre appliance customer ENI, not the management NIC (#851) Josh Siviour 2026-08-21 14:03:59 +10:00
  • 7bfeaf885c fix: give LB microVM initramfs headroom by bumping sys.micro to 256 MiB (#850) Josh Siviour 2026-08-20 23:14:20 +10:00
  • 3e4148cf15 fix: let a class-change modify recover a failed RDS instance whose agent is dead (#849) Josh Siviour 2026-08-20 23:10:53 +10:00
  • c941830664 feat: gate self-host inference behind capacity-based ThrottlingException (#848) Josh Siviour 2026-08-20 22:28:52 +10:00
  • c918f6834a feat: back up the ochre pgvector schema to object storage (#847) Josh Siviour 2026-08-20 22:28:25 +10:00
  • f10c9434d1 fix: detect KV CAS conflicts on replicated buckets (#843) Julian Sommer 2026-08-20 16:16:22 +10:00
  • f9c84919ef feat: co-served GPU model bundles (vLLM + TEI) with family-aware reaper (#845) Josh Siviour 2026-08-20 16:08:55 +10:00
  • 8eb3e4f879 fix: stop emitting an empty contentBlockStart union for text in ConverseStream (#844) Josh Siviour 2026-08-20 15:50:38 +10:00
  • d4d8fefae6 fix: join the drift loop goroutine before restoring the test timing vars Julian Sommer 2026-08-20 14:36:49 +10:00
  • f765119515 fix: make instance-profile role and tag writes atomic (#842) Julian Sommer 2026-08-20 14:32:38 +10:00
  • 46f953698f fix: requeue an incomplete reconcile pass instead of waiting a drift interval (#840) Julian Sommer 2026-08-20 13:34:39 +10:00
  • 7b1890eb8a refactor: use the stdlib uuid package instead of github.com/google/uuid (#841) Julian Sommer 2026-08-20 11:57:23 +10:00
  • adb60963c3 fix: back QMP test mocks with a unix socket instead of net.Pipe Julian Sommer 2026-08-20 11:43:58 +10:00
  • 74117e5b26 fix: remove the broken golangci-lint cache path Julian Sommer 2026-08-20 11:37:10 +10:00
  • 8e01e76dc0 fix: disable embedlit Julian Sommer 2026-08-20 10:52:03 +10:00
  • e36c8f6ba8 chore: update to go 1.27 Julian Sommer 2026-08-20 10:37:52 +10:00
  • 98365d5554 fix: wait for the upstream release in the stale-lease DHCP test Julian Sommer 2026-08-20 10:01:11 +10:00