Commit Graph

Select branches

Hide Pull Requests

dev

feat/adr-0005-iam-enforcement-projection

feat/churn-wal-retention-visibility

main

#1

#10

#100

#1000

#1001

#1002

#1003

#1004

#1005

#1006

#1007

#1008

#1009

#101

#1010

#1011

#1012

#1013

#1014

#1015

#1016

#1017

#1018

#1019

#102

#1020

#1021

#1022

#1023

#1024

#1025

#1026

#1027

#1028

#1029

#103

#1030

#1031

#1032

#1033

#1034

#1035

#1036

#1037

#1038

#1039

#104

#1040

#1041

#1042

#1043

#1044

#1045

#1046

#1047

#1048

#1049

#105

#1050

#1051

#1052

#1053

#1054

#1055

#1056

#1057

#1058

#1059

#106

#1060

#1061

#1062

#1063

#1064

#1065

#1066

#1067

#1068

#1069

#107

#1070

#1071

#1072

#1073

#1074

#1075

#1076

#1077

#1079

#108

#1080

#1081

#1082

#1083

#1084

#1085

#1086

#1087

#1088

#1089

#109

#1090

#1091

#1092

#1093

#1094

#1095

#1096

#1097

#1098

#1099

#11

#110

#1100

#1100

#1101

#1102

#1103

#1104

#1105

#1107

#1108

#1109

#111

#1110

#1111

#1112

#1113

#1114

#1115

#1116

#1117

#1118

#1119

#112

#1120

#1121

#1122

#1123

#1124

#1125

#1126

#1127

#1129

#113

#1130

#1131

#1132

#1133

#1134

#1135

#1136

#1137

#1138

#1139

#114

#1140

#1141

#1142

#1143

#1144

#1145

#1146

#1147

#1148

#1149

#115

#1150

#1151

#1152

#1153

#1154

#1155

#1156

#1157

#1159

#116

#1160

#1161

#1162

#1163

#1164

#1165

#1166

#1167

#1168

#1169

#117

#1170

#1171

#1172

#1173

#1174

#1175

#1176

#1177

#1178

#1179

#118

#1180

#1181

#1182

#1183

#1184

#1185

#1186

#1187

#1188

#1189

#119

#1190

#1191

#1192

#1193

#1194

#1195

#1196

#1197

#1198

#1199

#12

#120

#1200

#1201

#1202

#1203

#1204

#1205

#1206

#1207

#1208

#1209

#121

#1210

#122

#123

#124

#125

#126

#127

#128

#129

#13

#130

#131

#132

#133

#134

#135

#136

#137

#138

#139

#14

#140

#141

#142

#143

#144

#145

#146

#147

#148

#149

#15

#150

#151

#152

#153

#154

#155

#156

#157

#158

#159

#16

#160

#161

#162

#163

#164

#165

#166

#167

#168

#169

#17

#170

#171

#172

#173

#174

#175

#176

#177

#178

#179

#18

#180

#181

#182

#183

#184

#185

#186

#187

#188

#189

#19

#190

#191

#192

#193

#194

#195

#196

#197

#198

#199

#2

#20

#200

#201

#202

#203

#204

#205

#206

#207

#208

#209

#21

#210

#211

#212

#213

#214

#215

#216

#217

#218

#219

#22

#220

#221

#222

#223

#224

#225

#226

#227

#228

#229

#23

#230

#231

#232

#233

#234

#235

#236

#237

#238

#239

#24

#240

#241

#242

#243

#244

#245

#246

#247

#248

#249

#25

#250

#251

#252

#253

#254

#255

#256

#257

#258

#259

#26

#260

#261

#262

#263

#264

#265

#266

#267

#268

#269

#27

#270

#271

#272

#273

#274

#275

#276

#277

#278

#279

#28

#280

#281

#282

#283

#284

#285

#286

#287

#288

#289

#29

#290

#291

#292

#293

#294

#295

#296

#297

#298

#299

#3

#30

#300

#301

#302

#303

#304

#305

#306

#307

#308

#309

#31

#310

#311

#312

#313

#314

#315

#316

#317

#318

#319

#32

#320

#321

#322

#323

#324

#325

#326

#327

#328

#329

#33

#330

#331

#332

#333

#334

#335

#336

#337

#338

#339

#34

#340

#341

#342

#343

#344

#345

#346

#347

#348

#349

#35

#350

#351

#352

#353

#354

#355

#356

#357

#358

#359

#36

#360

#361

#362

#363

#364

#365

#366

#367

#368

#369

#37

#370

#371

#372

#373

#374

#375

#376

#377

#378

#379

#38

#380

#381

#382

#383

#384

#385

#386

#387

#388

#389

#39

#390

#391

#392

#393

#394

#395

#396

#397

#398

#399

#4

#40

#400

#401

#402

#403

#404

#405

#406

#407

#408

#409

#41

#410

#411

#412

#413

#414

#415

#416

#417

#418

#419

#42

#420

#421

#422

#423

#424

#425

#426

#427

#428

#429

#43

#430

#431

#432

#433

#434

#435

#436

#437

#438

#439

#44

#440

#441

#442

#443

#444

#445

#446

#447

#448

#449

#45

#450

#451

#452

#453

#454

#455

#456

#457

#458

#459

#46

#460

#461

#462

#463

#464

#465

#466

#467

#468

#469

#47

#470

#472

#473

#474

#475

#476

#477

#478

#479

#48

#480

#481

#482

#483

#484

#485

#486

#487

#488

#489

#49

#490

#491

#492

#493

#494

#495

#496

#497

#498

#499

#5

#50

#500

#501

#502

#503

#504

#505

#506

#507

#508

#509

#51

#510

#511

#512

#513

#514

#515

#516

#517

#518

#519

#52

#520

#521

#522

#523

#524

#525

#526

#527

#528

#529

#53

#530

#531

#532

#533

#534

#535

#536

#537

#538

#539

#54

#540

#541

#542

#543

#544

#545

#546

#547

#548

#549

#55

#550

#551

#552

#553

#554

#555

#556

#557

#558

#559

#56

#560

#561

#562

#563

#564

#565

#566

#567

#568

#569

#57

#570

#571

#572

#573

#574

#575

#576

#577

#578

#579

#58

#580

#581

#582

#583

#584

#585

#586

#587

#588

#589

#59

#590

#591

#592

#593

#594

#595

#596

#597

#598

#599

#6

#60

#600

#601

#602

#603

#604

#605

#606

#607

#608

#609

#61

#610

#611

#612

#613

#614

#615

#616

#617

#618

#619

#62

#620

#621

#622

#623

#624

#625

#626

#627

#628

#629

#63

#630

#631

#632

#633

#634

#635

#636

#637

#638

#639

#64

#640

#641

#642

#643

#644

#645

#646

#647

#648

#649

#65

#650

#651

#652

#653

#654

#655

#656

#657

#658

#659

#66

#660

#661

#662

#663

#664

#665

#666

#667

#668

#669

#67

#670

#671

#672

#673

#674

#675

#676

#677

#678

#679

#68

#680

#681

#682

#683

#684

#685

#686

#687

#688

#689

#69

#690

#691

#692

#693

#694

#7

#70

#71

#72

#727

#728

#729

#73

#730

#731

#732

#733

#734

#735

#736

#737

#738

#739

#74

#740

#741

#742

#743

#744

#745

#746

#747

#748

#749

#75

#750

#751

#752

#753

#754

#755

#756

#757

#758

#759

#76

#760

#761

#762

#763

#764

#765

#766

#767

#768

#769

#77

#770

#771

#772

#773

#774

#775

#776

#777

#778

#779

#78

#780

#781

#782

#783

#784

#785

#786

#787

#788

#789

#79

#790

#791

#792

#793

#794

#795

#796

#797

#798

#799

#8

#80

#800

#801

#802

#804

#805

#806

#807

#809

#81

#810

#811

#812

#813

#814

#815

#816

#817

#818

#819

#82

#820

#821

#822

#823

#824

#825

#826

#827

#828

#829

#83

#830

#831

#832

#833

#834

#835

#836

#837

#838

#839

#84

#840

#841

#842

#843

#844

#845

#846

#847

#848

#849

#85

#850

#851

#852

#853

#854

#855

#856

#857

#858

#859

#86

#860

#861

#862

#863

#864

#865

#866

#867

#868

#869

#87

#870

#871

#872

#873

#874

#875

#876

#877

#878

#879

#88

#880

#881

#882

#883

#884

#885

#886

#887

#888

#889

#89

#890

#891

#892

#893

#894

#895

#896

#897

#898

#899

#9

#900

#901

#902

#903

#904

#905

#906

#907

#908

#909

#91

#910

#911

#912

#913

#914

#915

#916

#917

#918

#92

#920

#921

#922

#923

#924

#925

#927

#928

#929

#93

#930

#931

#932

#933

#934

#935

#936

#937

#938

#939

#94

#940

#941

#942

#943

#944

#945

#946

#947

#948

#949

#95

#950

#951

#952

#953

#954

#955

#956

#957

#958

#959

#96

#960

#961

#962

#963

#964

#965

#966

#967

#968

#969

#97

#970

#971

#972

#973

#974

#976

#977

#978

#979

#98

#980

#981

#982

#983

#984

#985

#986

#987

#988

#989

#99

#990

#991

#992

#993

#994

#995

#996

#997

#998

#999

pre-dev-merge-backup

v0.1.0

v0.2.0

v0.2.1

v0.2.2

v0.2.3

v0.2.4

v0.3.0

v0.4.0

v0.4.1

v0.4.2

v0.5.0

v1.0.0

v1.0.0-hotfix

v1.0.1

v1.0.2

v1.1.0

v1.10.0

v1.11.0

v1.12.0

v1.12.1

v1.13.0

v1.14.0

v1.15.0

v1.16.0

v1.17.0

v1.18.0

v1.19.0

v1.2.0

v1.20.0

v1.21.0

v1.22.0

v1.22.0-50-g5865fc41-dev

v1.22.0-53-g4c4ca253-dev

v1.22.0-55-gb5879f44-dev

v1.22.0-56-gbd14e2d6-dev

v1.22.0-57-ga7a774a7-dev

v1.3.0

v1.4.0

v1.5.0

v1.6.0

v1.6.1

v1.7.0

v1.8.0

v1.9.0

Mono Color

• 1fd4373b35 fix: verify caller-supplied role ARNs against the stored canonical ARN (#972) Julian Sommer 2026-09-01 17:06:31 +10:00
• e2c38ca7ef refactor: one paging walk and one client-token store, not six and two (#971) Josh Siviour 2026-09-01 15:27:43 +10:00
• 4d4f7f84f1 fix: wait for the NATS subscriber callback before asserting on recorded spans Julian Sommer 2026-09-01 14:55:46 +10:00
• db97c90a9a fix: bind the EKS internal control-plane routes to the calling CP VM (#970) Julian Sommer 2026-09-01 14:51:42 +10:00
• 12408268be chore: trim unused entries from the go build cache before saving Julian Sommer 2026-09-01 14:26:54 +10:00
• da92c7a083 chore: only save the go build cache from dev and main Julian Sommer 2026-09-01 14:19:56 +10:00
• bbd0ebebed feat: retry a transient reconcile failure before the resync, not after it (#969) Josh Siviour 2026-09-01 14:08:36 +10:00
• 91bab3b910 chore: merge integration job into lint Julian Sommer 2026-09-01 13:58:03 +10:00
• 3cfa94d49a chore: drop the go build cache age census Julian Sommer 2026-09-01 13:54:32 +10:00
• eccf068a25 fix: run the instance handler subtests in parallel too Julian Sommer 2026-09-01 13:02:46 +10:00
• a0dfd311b2 refactor: make the elected reconcile node the only DNS zone writer (#968) Josh Siviour 2026-09-01 12:59:37 +10:00
• 805dab275c chore: measure go build cache staleness in CI Julian Sommer 2026-09-01 12:57:36 +10:00
• 07dce613eb fix: replace fixed test waits with exact barriers and overridable deadlines Julian Sommer 2026-09-01 12:54:08 +10:00
• 4d429f231b fix: run the parallelised handler subtests in parallel too Julian Sommer 2026-09-01 12:46:01 +10:00
• 6c68c236aa fix: run the vpc, elbv2 and iam handler tests in parallel Julian Sommer 2026-09-01 12:32:27 +10:00
• d143757598 fix: stop the eks tests waiting out fixed fan-out and backoff windows Julian Sommer 2026-09-01 12:25:10 +10:00
• 01cf08c22b refactor: replace hand-rolled loops with stdlib slices and maps helpers Julian Sommer 2026-09-01 12:21:22 +10:00
• 16c2425184 fix: stop the utils tests waiting out production defaults Julian Sommer 2026-09-01 12:11:10 +10:00
• dfd2760af4 refactor: apply the DNS reconcile batch on the elected node instead of publishing it (#965) Josh Siviour 2026-09-01 12:10:54 +10:00
• 3423b2b08f fix: speed up the kvstore tests Julian Sommer 2026-09-01 12:07:25 +10:00
• ee258fd248 refactor: back the e2e Eventually helpers with testify Julian Sommer 2026-09-01 12:02:39 +10:00
• a5d942ec24 ci: skip the e2e suites on test-only pushes Julian Sommer 2026-09-01 11:57:49 +10:00
• 30815e33ea refactor: use slices.Sorted(maps.Keys()) for sorted action name lists Julian Sommer 2026-09-01 11:54:01 +10:00
• 4abbab59af fix: drop NeedDeps from the slog duration guard's package load Julian Sommer 2026-09-01 11:48:30 +10:00
• 481df170f5 fix: run the reconciler tests in parallel Julian Sommer 2026-09-01 11:33:55 +10:00
• 609b4121f0 fix: report an IGW attachment only once the OVN gateway is up (#962) Julian Sommer 2026-09-01 11:25:35 +10:00
• cde092cbfb fix: speedup daemon tests Julian Sommer 2026-09-01 11:19:50 +10:00
• 7923545fc1 fix: speedup viperblockd tests Julian Sommer 2026-09-01 11:17:21 +10:00
• 6bb854ee62 fix: build the EC2 DNS desired set from the instance records so stale records prune (#960) Josh Siviour 2026-09-01 11:05:08 +10:00
• 3e02fc7613 fix: release the ENI and external address of an abandoned partial launch (#961) Julian Sommer 2026-09-01 09:31:21 +10:00
• ebc95260ac refactor: wake the vpcd drift loop on intent changes, not a fixed 5-minute ticker (#959) Josh Siviour 2026-09-01 07:39:17 +10:00
• 4c948512d1 fix: follow ListObjectsV2 continuation tokens on every production caller (#958) Josh Siviour 2026-08-31 21:59:12 +10:00
• d028637920 refactor: drive the ECS scheduler from the bus and deadlines, not four tickers (#956) Josh Siviour 2026-08-31 21:18:13 +10:00
• 580777d867 fix: release an ENI's EIP association and reap ENIs whose instance is gone (#955) Julian Sommer 2026-08-31 16:44:14 +10:00
• e291d546c0 fix: follow continuation tokens when listing metadata documents (#957) Josh Siviour 2026-08-31 16:41:27 +10:00
• 6a533eb639 fix: run ping under CAP_NET_RAW instead of escalating it through sudo (#954) Julian Sommer 2026-08-31 15:38:54 +10:00
• ce9b6e5b41 fix: gate cluster-wide IPsec on every chassis being configured (#953) Julian Sommer 2026-08-31 15:31:59 +10:00
• e9404f1d70 feat: wake the EKS cluster reconciler on the signals it already receives (#952) Josh Siviour 2026-08-31 14:50:32 +10:00
• c4e5ceb5e6 fix: re-read intent before SG and ENI orphan sweeps (#951) Julian Sommer 2026-08-31 14:29:14 +10:00
• fd11077b3a fix: skip the guest-port datapath probe when the LSP is absent Julian Sommer 2026-08-31 13:36:26 +10:00
• 11e0939652 feat: give a reconcile pass its own revisit deadline, and convert the RDS loop (#948) Josh Siviour 2026-08-31 13:29:31 +10:00
• e30ec82f6a feat: feature-flag the Ochre console (off by default until release) (#950) Josh Siviour 2026-08-31 12:58:27 +10:00
• 7052411306 feat: Ochre console — Knowledge Base + data source create/delete (#949) Josh Siviour 2026-08-31 12:48:44 +10:00
• d1de76b630 fix: never create a switch port in zero port groups Julian Sommer 2026-08-31 12:28:45 +10:00
• f919a257ef fix: make the SG default-deny ACLs match every ethertype (#947) Julian Sommer 2026-08-31 12:15:56 +10:00
• 69c7a6ba4a fix: reject unsupported SG protocols instead of emitting an allow-all ACL (#946) Julian Sommer 2026-08-31 10:48:08 +10:00
• 6960ef6620 fix: never lower a quota counter from a stale instance view (#943) Josh Siviour 2026-08-31 10:46:57 +10:00
• a213af1289 fix(ui): content-hash asset filenames so a deploy cannot mix builds (#945) Julian Sommer 2026-08-31 09:59:33 +10:00
• 82ce31626b fix: reject PermissionsBoundary on CreateRole and CreateUser (#944) Julian Sommer 2026-08-31 09:51:29 +10:00
• e90dfa4ea3 chore: rebuild ui with latest deps Julian Sommer 2026-08-31 09:24:56 +10:00
• 465231680c chore: bump the npm-dependencies group (#942) dependabot[bot] 2026-08-31 09:23:42 +10:00
• 7ff125a343 chore: bump the go-dependencies group with 12 updates (#941) dependabot[bot] 2026-08-31 09:01:55 +10:00
• 3409d50ec4 feat: sweep quota from the instance record space on the per-key reconciler (#940) Josh Siviour 2026-08-30 13:48:04 +10:00
• 423c6bee26 feat: add a per-key path to the reconciler (#939) Josh Siviour 2026-08-30 09:52:46 +10:00
• 4804c77946 feat: cut instance records over to one key per instance (#938) Josh Siviour 2026-08-30 08:46:29 +10:00
• 6dd1862476 feat: add guardrail create, edit and delete to the console (#937) Josh Siviour 2026-08-28 16:03:31 +10:00
• 3680e5b5bc feat: render predastore admin_port and gate deploys on /readyz (#936) Josh Siviour 2026-08-28 15:19:35 +10:00
• 1d0a53a4b8 feat: add admin Model Access console page (#935) Josh Siviour 2026-08-28 14:43:57 +10:00
• da0216767c feat: mirror each node's running set onto the i.<id> key space (#933) Josh Siviour 2026-08-28 13:38:10 +10:00
• fb499a8c6a fix: cover the embedder cold-start window with retry and Retry-After (#934) Josh Siviour 2026-08-28 13:04:25 +10:00
• 3f55b89cd1 feat: dual write and read the i/<id> instance record key space (#932) Josh Siviour 2026-08-28 11:04:49 +10:00
• 9799ea410c fix: preserve escaped path through the console proxy for SigV4 (#931) Josh Siviour 2026-08-28 10:47:40 +10:00
• aa997b7b45 feat: Ochre console Playground page (#929) Josh Siviour 2026-08-28 10:47:22 +10:00
• 82dd056fa2 feat: add the i/<id> instance record store (#930) Josh Siviour 2026-08-28 09:21:11 +10:00
• a6a8d30349 feat: add the instance spec/status record type (#928) Josh Siviour 2026-08-28 08:54:28 +10:00
• 266ef05c56 feat: add the resource envelope for spec/status records (#927) Josh Siviour 2026-08-28 07:48:48 +10:00
• 1a49f15283 refactor: give StateReason and the hostfwd map a single writer each (#925) Josh Siviour 2026-08-27 23:30:33 +10:00
• 81c73573bc refactor: replace persisted command attributes with desired state (#924) Josh Siviour 2026-08-27 23:30:33 +10:00
• b94ed1285d feat: add awserrors.IsTerminal for reconcile retry decisions (#923) Josh Siviour 2026-08-27 22:07:05 +10:00
• da5b7de2bb feat: open staged self-host models to all accounts (#922) Josh Siviour 2026-08-27 21:42:35 +10:00
• 7e36922931 refactor: store the node instance-state record in the local state envelope (#921) Josh Siviour 2026-08-27 21:42:18 +10:00
• 196b7c8111 refactor: report kvstore.ErrNotFound from the StateStore interfaces (#920) Josh Siviour 2026-08-27 21:41:50 +10:00
• 5760b74bf6 feat: add Ochre Model Catalog console page (#918) Josh Siviour 2026-08-27 21:20:47 +10:00
• abb817c7d5 feat: add admin Ochre catalog read and drop provider-direct model (#917) Josh Siviour 2026-08-27 21:13:44 +10:00
• d5d5d3defc refactor: move instance state onto kvstore typed stores (#916) Josh Siviour 2026-08-27 20:59:25 +10:00
• 286e11da03 feat: recover kvstore buckets from stream loss (#915) Josh Siviour 2026-08-27 16:19:41 +10:00
• 8336a73e4d fix: stop the leader-bucket test racing its own create advisory Julian Sommer 2026-08-27 16:12:22 +10:00
• 9133c48fdb fix: wait for the EC2 command outcome instead of racing the handler Julian Sommer 2026-08-27 16:02:26 +10:00
• 4ae281bd1f fix: give reachable-agent RDS tests a realistic apply-params budget Julian Sommer 2026-08-27 15:56:44 +10:00
• c9da4221b9 refactor: move stream-loss detection into kvutil (#914) Josh Siviour 2026-08-27 15:52:48 +10:00
• fbbb9fb30b fix: route every running-state write through the local file (#912) Josh Siviour 2026-08-27 15:20:48 +10:00
• c81abd1836 fix: add fipsboot guard to missing services Julian Sommer 2026-08-27 15:05:49 +10:00
• 8c7e3dfa7b refactor: use bluebottle/pkg/safecast for the numeric conversions (#913) Julian Sommer 2026-08-27 14:55:44 +10:00
• 68156c7348 feat: semantic topic detection for guardrails via embedding similarity (#908) Josh Siviour 2026-08-27 14:54:42 +10:00
• 95afec6a76 refactor: use bluebottle/pkg/fipsboot for the FIPS 140-3 startup guard (#911) Julian Sommer 2026-08-27 14:38:36 +10:00
• 97acfbbd80 refactor: use bluebottle/pkg/tlsconfig for the TLS curve allowlist (#910) Julian Sommer 2026-08-27 14:31:29 +10:00
• fc1e950518 fix: keep a node's instances when its KV record is absent at boot (#909) Josh Siviour 2026-08-27 14:26:31 +10:00
• f410b1b868 feat: converge DNS on change rather than on a timer (#902) Josh Siviour 2026-08-27 12:43:40 +10:00
• 63f47b202b feat: Ochre console — Guardrails page (#906) Josh Siviour 2026-08-27 12:33:40 +10:00
• 347c2b2f80 fix: emit required IAM list members when nothing matches Julian Sommer 2026-08-27 11:51:35 +10:00
• fae6b08acc fix: conform DescribeImages BootMode and IAM list required members Julian Sommer 2026-08-27 11:46:39 +10:00
• 23f7081a2a test: pin the ListVolumes/ListSnapshots page-size clamp Julian Sommer 2026-08-27 11:34:40 +10:00
• 40a73a8bba fix: project instance status state through vm.EC2APIState Julian Sommer 2026-08-27 11:08:57 +10:00
• 35a00a14be fix: project Placement.AvailabilityZone for every instance (mulga-2ep36) Julian Sommer 2026-08-27 10:58:05 +10:00
• 62c1378b79 fix: raise the Ubuntu minimum to 24.04 (mulga-ucvsq) Julian Sommer 2026-08-27 10:49:46 +10:00
• d82ee71b54 refactor: drop duplicated bluebottle logic and hand-rolled token buckets (#905) Julian Sommer 2026-08-27 10:29:06 +10:00
• db2bf8cf0d feat: Ochre console — Knowledge Bases page (mulga-0t256) (#901) Josh Siviour 2026-08-27 09:45:46 +10:00
• 0362cdf371 refactor: drop the forked HTTP middleware for the shared one (#904) Julian Sommer 2026-08-27 09:30:40 +10:00
• 2da27c4e2a fix: return InsufficientInstanceCapacity with a 5xx status (#903) Julian Sommer 2026-08-27 09:14:30 +10:00
• 3bf0379daa fix: gate sts:AssumeRole on the caller's identity policy (#889) Julian Sommer 2026-08-27 09:04:25 +10:00