Commit Graph

  • 06a583cb58 fix(network): re-prime EIP reachability on idempotent skip; drop dead inject-garp (#328) Josh Siviour 2026-06-09 23:20:07 +10:00
  • 1654f98e18 feat(resource-governance): RG-3/4/6/8/9/11 — admission charge, OOM ladder, tier confinement (#327) Josh Siviour 2026-06-09 22:56:46 +10:00
  • f9b14e5a12 fix(ec2): make errored instances renderable and restartable (#325) Josh Siviour 2026-06-09 16:59:32 +10:00
  • 7bcd365549 ci(eks-ami): build on self-hosted ci-single runner (#326) Josh Siviour 2026-06-09 16:58:04 +10:00
  • 773341248d feat: use STS tokens on frontend (#322) Julian Sommer 2026-06-09 15:40:35 +10:00
  • 2ea3e22db6 feat(systemd): cgroup-confine spinifex to a resource-limited slice + host swap (#324) Josh Siviour 2026-06-09 15:21:13 +10:00
  • 97b2956186 release: update go.mod for v1.7.0 v1.7.0 Julian Sommer 2026-06-09 12:50:53 +10:00
  • 67ab37cb28 merge dev into main Julian Sommer 2026-06-09 12:47:17 +10:00
  • 4ef19fc488 feat(ui): EKS console (#310) Josh Siviour 2026-06-09 10:57:50 +10:00
  • 15cd1a1ad7 feat: sts get session token (#321) Julian Sommer 2026-06-09 10:51:28 +10:00
  • a96a34c0d3 chore: cleanup oxlint config Julian Sommer 2026-06-09 09:49:45 +10:00
  • 31260179a1 chore: frontend deps Julian Sommer 2026-06-09 09:31:45 +10:00
  • a985dc34f2 chore: bump github.com/nats-io/nats-server/v2 (#316) dependabot[bot] 2026-06-09 08:53:46 +10:00
  • 5ac8dc3fb9 fix(network): round-robin external pool cursor — stop instant EIP reuse (recycled EIP unreachable, EKS CI) (#320) Josh Siviour 2026-06-09 00:17:36 +10:00
  • f7446c69c6 fix(network): prime host neigh with gateway port MAC on centralised EIP attach joshsiv-mulga 2026-06-08 21:04:08 +10:00
  • 1a05386936 feat: EKS managed Addon API (state machine + staging installer) (#317) Josh Siviour 2026-06-08 13:56:41 +10:00
  • 3d95664c80 fix(network): prime host neigh with external_mac on distributed EIP attach (#319) Josh Siviour 2026-06-08 13:53:41 +10:00
  • 65e2a3335e feat(eks): default K3s built-in ingress ON until aws-lb-controller ships (#318) Josh Siviour 2026-06-08 13:31:39 +10:00
  • 0a70334349 Merge branch 'dev' of github.com:mulgadc/spinifex into dev tomnewton-mulga 2026-06-08 13:16:50 +10:00
  • a34da2c89c fix: Added H200 GPU model tomnewton-mulga 2026-06-08 13:15:23 +10:00
  • 5d125cdb26 fix(network): flush host neigh on EIP attach/detach for recycle reachability joshsiv-mulga 2026-06-08 12:44:21 +10:00
  • e44221d653 feat(eks): public/private endpoint access + publicAccessCidrs-driven NLB scheme & SG (#315) Josh Siviour 2026-06-08 11:27:48 +10:00
  • bd279fffa3 fix(elbv2): open NLB listener ports on a dedicated managed security group (#314) Josh Siviour 2026-06-08 10:33:23 +10:00
  • 467e4de715 feat(eks): publish eks-node AMI to R2 + spx catalogue entry (#313) Josh Siviour 2026-06-08 09:48:59 +10:00
  • 5cf5cba7ac fix(microvm): load virtio_net dependency chain explicitly in init (#311) Josh Siviour 2026-06-08 08:44:57 +10:00
  • a1f3fcc531 ci(e2e): exclude eks suite from multinode job (#312) Josh Siviour 2026-06-08 08:06:44 +10:00
  • 4418913fa1 feat(elbv2): SetSubnets + RGT GetResources + EKS ingress toggle (LB-controller gaps) (#309) Josh Siviour 2026-06-07 22:26:56 +10:00
  • a4817b1afc ci: run baremetal E2E nightly + hard-gate releases on it (#306) Josh Siviour 2026-06-07 22:14:21 +10:00
  • 44d0548fd4 ci: make microVM depmod best-effort, drop apt kmod install (#308) Josh Siviour 2026-06-07 22:10:56 +10:00
  • 8e0edef7c2 ci: install kmod (depmod) before microVM image build (e2e + nightly + ddil) (#307) Josh Siviour 2026-06-07 21:57:03 +10:00
  • 527308c342 fix(baremetal): empty modules.dep + capacity-aware single-node e2e (#305) Josh Siviour 2026-06-07 21:34:39 +10:00
  • 496424c41c test(eks): EKS control-plane E2E suite (Sprint 6g) (#304) Josh Siviour 2026-06-07 20:42:25 +10:00
  • 609471c448 Revert "fix(elbv2): internal single-node LB agent dials br-mgmt IP" joshsiv-mulga 2026-06-07 09:22:11 +10:00
  • 1ce9981c1a fix(elbv2): internal single-node LB agent dials br-mgmt IP joshsiv-mulga 2026-06-07 08:49:37 +10:00
  • 63fd8b9f66 fix(elbv2): fail loud when internal LB has no mgmt return route joshsiv-mulga 2026-06-06 23:04:47 +10:00
  • 92384cf7a7 fix(vpcd): create IMDS subnet-veth KV bucket at 1 replica joshsiv-mulga 2026-06-06 22:11:53 +10:00
  • 5aaf8c23d2 fix(eks): make aws eks get-token → kubectl auth work end-to-end (Sprint 6f) (#303) Josh Siviour 2026-06-06 22:11:50 +10:00
  • d8aa31e699 ci(baremetal): capture combined log + junit + analyze bundle on failure joshsiv-mulga 2026-06-06 13:01:32 +10:00
  • f4ba115316 ci(baremetal): revert e2e to single-node joshsiv-mulga 2026-06-06 12:33:37 +10:00
  • 597b18b2a0 fix(eks): map transient JetStream errors in ListClusters to ServiceUnavailable (#302) Josh Siviour 2026-06-06 12:03:51 +10:00
  • ca2418ffa7 feat(eks): OIDC provider CRUD + IRSA discovery + anonymous STS (6e) (#301) Josh Siviour 2026-06-06 11:32:51 +10:00
  • a22bc2f716 feat(eks): 6d nodegroup provisioning + NATS-gated cluster health (#300) Josh Siviour 2026-06-06 00:52:18 +10:00
  • 3bb90c9fd3 fix(ci): guard release Clean Workspace against leaked iso-builder devtmpfs joshsiv-mulga 2026-06-05 22:58:07 +10:00
  • da26b1db69 fix(ci): stop image-build /dev bind from wiping host /dev joshsiv-mulga 2026-06-05 22:52:49 +10:00
  • f9c08130ba fix(eks): embedded etcd datastore + Alpine IMDS-route fix + CP-VM visibility (#299) Josh Siviour 2026-06-05 17:55:31 +10:00
  • 6be3ccbb23 fix: unify .iso and .iso.sha filenames tomnewton-mulga 2026-06-05 17:07:26 +10:00
  • 158b3a25c5 fix: updated release.yml for clean iso uploads tomnewton-mulga 2026-06-05 16:48:40 +10:00
  • 4f84586263 feat(ui): IAM Roles + Instance Profiles Julian Sommer 2026-06-05 15:41:05 +10:00
  • 958a9cb6c1 chore: fix docs Julian Sommer 2026-06-05 14:35:02 +10:00
  • 0ee9b46e38 chore: rebuild ui v1.6.1 Julian Sommer 2026-06-05 14:12:47 +10:00
  • 92d76b5bce fix(ui): auto-recover from stale credentials with login redirect (#297) Julian Sommer 2026-06-05 11:25:15 +10:00
  • cf8597a18e feat(ui): VPC-create AWS-flow alignment — SG launch step, public-IP, NAT Gateway + Elastic IP (#294) Josh Siviour 2026-06-05 09:56:32 +10:00
  • 00d1142a02 chore: cleanup docs Julian Sommer 2026-06-05 13:53:34 +10:00
  • 412eb618b0 Adding GPU passthrough e2e tests - intended to be run on Wattle tomnewton-mulga 2026-06-05 13:47:11 +10:00
  • 77b3bbd7b7 fix: add route table to VPC docs Julian Sommer 2026-06-05 11:39:33 +10:00
  • 2d21232d02 fix(ui): auto-recover from stale credentials with login redirect (#297) Julian Sommer 2026-06-05 11:25:15 +10:00
  • 81c8d62859 fix: add SG guide to docs Julian Sommer 2026-06-05 10:38:17 +10:00
  • 0c76161a89 fix(elbv2): stop lb-agent hanging on nginx start (NLB targets stuck 0/N) joshsiv-mulga 2026-06-05 10:12:28 +10:00
  • dc1b87f191 feat(ui): VPC-create AWS-flow alignment — SG launch step, public-IP, NAT Gateway + Elastic IP (#294) Josh Siviour 2026-06-05 09:56:32 +10:00
  • 70e9746e06 chore: tags cleanup Julian Sommer 2026-06-05 09:31:39 +10:00
  • af690b3299 test(elbv2): collect LB microVM guest console in CI + surface NLB probe failures joshsiv-mulga 2026-06-05 09:30:24 +10:00
  • dae0b521da fix: remove falltrhough code owners Julian Sommer 2026-06-05 09:08:42 +10:00
  • c666c8146d fix: e2e.yml Julian Sommer 2026-06-05 09:06:55 +10:00
  • 8e38faaede fix(elbv2): make NLB nginx health-check pathway robust in CI joshsiv-mulga 2026-06-05 08:14:18 +10:00
  • 554c5d96c7 feat(elbv2): NLB L4 data plane on nginx stream + UI parity (#295) Josh Siviour 2026-06-05 00:11:51 +10:00
  • d044a4c222 feat(vm): ENI hot-plug Sprint 3c — real OVS tap wiring (#296) Josh Siviour 2026-06-04 23:42:31 +10:00
  • eef337fb80 test(e2e): make egress baseline reproduce the real IGW gap (fresh VPC) joshsiv-mulga 2026-06-04 20:14:32 +10:00
  • c9a4e904a8 test(e2e): fresh-install reachability baselines + drop qemu hostfwd fallback joshsiv-mulga 2026-06-04 19:56:02 +10:00
  • ff0dc42562 feat: IMDS subnet level (#292) Julian Sommer 2026-06-04 16:33:45 +10:00
  • 50bc38c8fd feat(ui): NLB support in create/edit load balancer + target group flows (#293) Josh Siviour 2026-06-04 15:37:48 +10:00
  • 9fa596001f fix: EKS 6b create-cluster follow-ups (security + cleanup + tests) (#291) Josh Siviour 2026-06-04 14:47:52 +10:00
  • 216b9c7682 feat(ui): HTTPS listeners — ACM certificate + SSL policy (Phase C) (#290) Josh Siviour 2026-06-04 14:19:30 +10:00
  • bcb49cd771 feat: IMDS v1 (#266) Julian Sommer 2026-06-04 13:32:44 +10:00
  • f14fb64562 feat(eks): unify eks-server + eks-agent into one eks-node AMI (#288) Josh Siviour 2026-06-04 12:28:56 +10:00
  • bfacca7789 feat(eks): 6c token webhook + AccessEntry (IAM auth → kubectl) (#284) Josh Siviour 2026-06-04 11:25:56 +10:00
  • b0227e7eeb chore(ansible): remove ansible tree, uplift to mulga/ansible/ (#287) Josh Siviour 2026-06-04 11:23:08 +10:00
  • 61d73d1d4e fix: reject unknown ACM cert ARN at listener API boundary (#289) Josh Siviour 2026-06-04 11:20:52 +10:00
  • 470954bbe8 feat(elbv2): HTTPS data plane — TLS termination via ssl crt + PEM delivery (#286) Josh Siviour 2026-06-04 10:45:11 +10:00
  • 38f5dd0d41 feat(acm): minimal ACM-alike certificate service (#285) Josh Siviour 2026-06-04 10:13:10 +10:00
  • e06d0c0865 feat(elbv2): HTTPS listener certificates + SSL policies (Phase A) (#283) Josh Siviour 2026-06-04 09:51:10 +10:00
  • bbff004b45 feat(eks): 6b create-cluster → ACTIVE (single-node SQLite + mgmt-IP NLB stop-gap) (#280) Josh Siviour 2026-06-03 22:29:31 +10:00
  • 7b9eb9cc4e feat(elbv2): tag/SG/IP-type setters, ip targets, redirect actions, delete-cascade hardening (#282) Josh Siviour 2026-06-03 21:49:25 +10:00
  • b3f7251239 refactor: migrate lbagent signing to predastore/auth.SignReq (#281) Josh Siviour 2026-06-03 20:17:55 +10:00
  • de5ee4339a fix(elbv2): render fixed-response listener defaults + DescribeTags listener-rules (#278) Josh Siviour 2026-06-03 15:06:35 +10:00
  • 3de1d6d7c5 fix(microvm): build initramfs device nodes via fakeroot, drop sudo mknod joshsiv-mulga 2026-06-03 11:04:51 +10:00
  • 044d35737e feat: remove bash e2e for e2e-go Julian Sommer 2026-06-03 10:32:30 +10:00
  • 2dada2cf9d release: update go.mod for v1.6.0 v1.6.0 Julian Sommer 2026-06-03 09:15:38 +10:00
  • 9508aaacce chore: bump go 1.26.4 Julian Sommer 2026-06-03 08:59:25 +10:00
  • 40deb1e4c2 fix(e2e): add explicit IGW default route in run-lb-e2e joshsiv-mulga 2026-06-02 23:49:23 +10:00
  • 7cd054cbf1 chore(e2e): dump Logical_Router_Policy + Logical_Router_Static_Route in W5 diag joshsiv-mulga 2026-06-02 22:15:22 +10:00
  • 41f840ee85 fix(setup): grant spinifex-vpcd sudo for ovn-appctl (siv-167) joshsiv-mulga 2026-06-02 21:00:20 +10:00
  • ba7253e2c6 ci(e2e): fix Start Packet Capture EACCES + PID-tracking on tcpdump (siv-167) joshsiv-mulga 2026-06-02 19:45:53 +10:00
  • afd63ed967 ci(e2e): Phase 1 diag — tcpdump br-wan + bridge fdb + hairpin modes (siv-167) joshsiv-mulga 2026-06-02 19:28:54 +10:00
  • 2574956f08 ansible cluster-bootstrap joshsiv-mulga 2026-06-02 15:38:56 +10:00
  • 3f4613c28b ci(e2e): capture OVN/OVS/journal diagnostics on every run joshsiv-mulga 2026-06-02 14:56:41 +10:00
  • 72a6a59d80 fix(network): inject GARP after AddEIP to refresh upstream ARP on EIP recycle joshsiv-mulga 2026-06-02 13:38:52 +10:00
  • dd65a2dfa6 feat(elbv2): ListenerRules CRUD with HAProxy ACL routing (#275) Josh Siviour 2026-06-02 12:15:42 +10:00
  • 0c577da6e2 test: cover encryption wiring on feat/encryption-at-rest brynmailer-mdc 2026-06-02 10:56:15 +10:00
  • 557d3e4d59 feat: derive Encrypted from VBState.EncryptionEnabled, drop IsEncrypted reads brynmailer-mdc 2026-06-01 15:13:51 +10:00
  • b5220996e1 fix: only clone AMI on os.ErrNotExist in prepareRootVolume brynmailer-mdc 2026-05-28 15:15:39 +10:00