-
fca9a8b187
ci: bump image digests to
7a3dfb06db
master
svcforge-ci
2026-07-22 06:28:37 +00:00
-
7a3dfb06db
ci: exercise the runner CPU limit and webhook end to end
gitea_admin
2026-07-22 06:18:22 +00:00
-
d40bc682ce
runbook: the Gitea webhook now covers the broken poll [skip ci]
gitea_admin
2026-07-22 06:17:32 +00:00
-
cbd0709281
ci: bump image digests to
cd61eca12e
svcforge-ci
2026-07-22 03:58:22 +00:00
-
cd61eca12e
runbook: correct
1b56cda -- the poll never runs, watch breaks are not the cause
gitea_admin
2026-07-22 03:49:04 +00:00
-
1b56cda231
runbook: name the ArgoCD wedge instead of describing its symptoms
gitea_admin
2026-07-22 03:37:22 +00:00
-
173acc8612
ci: bump image digests to
60ee0f1cbf
svcforge-ci
2026-07-22 03:15:59 +00:00
-
60ee0f1cbf
runbook: correct the wedge-detection metrics
gitea_admin
2026-07-22 02:58:36 +00:00
-
9249051ee2
ci: bump image digests to
c691f4f4aa
svcforge-ci
2026-07-22 02:42:54 +00:00
-
c691f4f4aa
runbook: reconciledAt is not a heartbeat
gitea_admin
2026-07-22 02:25:10 +00:00
-
a0215ef63f
runbook: ArgoCD synced-but-stale, and how to tell a wedged controller from a slow poll
gitea_admin
2026-07-22 01:23:20 +00:00
-
b2cdcecdc1
ci: bump image digests to
e7496562b3
svcforge-ci
2026-07-22 01:08:19 +00:00
-
e7496562b3
ci: pull the BuildKit frontend from the mirror too
Nguyen Minh Phuc
2026-07-21 15:50:12 +00:00
-
3b957a8566
ci: bump image digests to
08a529fa63
svcforge-ci
2026-07-21 15:42:05 +00:00
-
08a529fa63
Get off Docker Hub, add a catalog values passthrough, fix the dind prune
Nguyen Minh Phuc
2026-07-21 15:32:12 +00:00
-
58ffb9c2e0
ci: tag the trivy image so the reclaim step stops deleting it
Nguyen Minh Phuc
2026-07-21 15:11:20 +00:00
-
95a894d816
ci: bump image digests to
c53734d2bc
svcforge-ci
2026-07-21 15:05:04 +00:00
-
c53734d2bc
docs: add USER_GUIDE.md, tighten comments, fix CLI needing a DSN
Nguyen Minh Phuc
2026-07-21 11:18:57 +00:00
-
7918dc2b37
ci: bump image digests to
64b18d2823
svcforge-ci
2026-07-21 06:33:09 +00:00
-
64b18d2823
ci: set UV_LINK_MODE=copy to stop the hardlink warning
Nguyen Minh Phuc
2026-07-21 06:02:30 +00:00
-
51a1bb62c0
ci: bump image digests to
6974b3620f
svcforge-ci
2026-07-21 05:59:55 +00:00
-
6974b3620f
catalog: two tiny services, so the loop can be exercised on a full cluster
Nguyen Minh Phuc
2026-07-21 05:47:41 +00:00
-
bb8b14ef03
api: make the OpenAPI spec usable as documentation
Nguyen Minh Phuc
2026-07-21 05:33:43 +00:00
-
72296ace84
ci: bump image digests to
e971e04d75
svcforge-ci
2026-07-21 02:52:27 +00:00
-
e971e04d75
fix: shared runtime helper must live where every image packages it
Nguyen Minh Phuc
2026-07-21 02:40:37 +00:00
-
9c8d10ce1f
ci: bump image digests to
7079d6340f
svcforge-ci
2026-07-21 02:25:04 +00:00
-
7079d6340f
docs: bring RUNBOOK and ARCHITECTURE up to date
Nguyen Minh Phuc
2026-07-21 01:45:09 +00:00
-
66eb6cb0ee
refactor: converge the patterns multiple authors left divergent
Nguyen Minh Phuc
2026-07-21 01:42:25 +00:00
-
d64c3c9f39
fix: three correctness bugs found in review + a dropped-log
Nguyen Minh Phuc
2026-07-21 01:31:11 +00:00
-
d6c1b64512
ci: bump image digests to
76cadca8e3
svcforge-ci
2026-07-20 15:27:19 +00:00
-
76cadca8e3
fix: Kubernetes serialises an empty item list as null, not []
Nguyen Minh Phuc
2026-07-20 15:16:45 +00:00
-
66336d3648
ci: bump image digests to
a843494627
svcforge-ci
2026-07-20 15:01:21 +00:00
-
a843494627
runbook: the runner's three ephemeral caches and the boot cascade
Nguyen Minh Phuc
2026-07-20 14:10:28 +00:00
-
4193a18cae
reconciler: read release secrets directly instead of shelling helm
Nguyen Minh Phuc
2026-07-20 13:05:25 +00:00
-
2356ac4ef3
reconciler: scope the drift check to svcforge's own releases
Nguyen Minh Phuc
2026-07-20 12:53:16 +00:00
-
c2a27952d1
runbook: fix section ordering and a duplicate number
Nguyen Minh Phuc
2026-07-20 07:39:23 +00:00
-
0dbb5af1d3
runbook: record the dind liveness probe as an open issue
Nguyen Minh Phuc
2026-07-20 07:38:51 +00:00
-
d4ac3801a3
runbook: salvaging a faulted Longhorn volume
Nguyen Minh Phuc
2026-07-20 07:10:04 +00:00
-
6093c52160
argocd: ignore the cpu request this cluster rewrites
Nguyen Minh Phuc
2026-07-20 06:58:28 +00:00
-
31fa9165ff
chart: give the migrate hook its own ServiceAccount
Nguyen Minh Phuc
2026-07-20 06:33:31 +00:00
-
89ad9625f3
chart: disable externalSecret on this cluster
Nguyen Minh Phuc
2026-07-20 06:26:13 +00:00
-
e8b6116a58
ci: age-filter the image prune so digest-pulled images survive
Nguyen Minh Phuc
2026-07-20 05:17:06 +00:00
-
5f18f9eeeb
runbook: correct the claim that runner restarts orphan jobs
Nguyen Minh Phuc
2026-07-20 04:56:07 +00:00
-
1a36f43c69
ci: bump image digests to
37b297bf5c
svcforge-ci
2026-07-20 05:12:26 +00:00
-
37b297bf5c
ci: reclaim dind disk after each image build
Nguyen Minh Phuc
2026-07-20 04:48:48 +00:00
-
5d7f46483e
runbook: recovering the queue after a runner restart
Nguyen Minh Phuc
2026-07-20 04:41:15 +00:00
-
b02d4e85c6
ci: record that act_runner ignores max-parallel
Nguyen Minh Phuc
2026-07-20 04:27:48 +00:00
-
d70a7b622c
ci: cache the trivy vuln DB in a named volume, not a $PWD bind
Nguyen Minh Phuc
2026-07-20 04:13:30 +00:00
-
2098443f31
ci: build images one at a time
Nguyen Minh Phuc
2026-07-20 04:11:04 +00:00
-
b35c551160
ci: the digest-guard test depended on state CI itself mutates
Nguyen Minh Phuc
2026-07-20 03:48:34 +00:00
-
f87d8d4d78
runbook: the 14-minute 'Set up job' failure and its cause
Nguyen Minh Phuc
2026-07-20 03:35:12 +00:00
-
c537073c21
deps: everything to latest stable
Nguyen Minh Phuc
2026-07-19 09:39:25 +00:00
-
4544765ec5
test: scope the process-group assertion to this run's own children
Nguyen Minh Phuc
2026-07-19 09:25:56 +00:00
-
f2b159ef7e
ci: bump image digests to
ca21b6e70d
svcforge-ci
2026-07-19 09:18:15 +00:00
-
ca21b6e70d
ci: gitleaks was passing without scanning anything
Nguyen Minh Phuc
2026-07-19 09:11:22 +00:00
-
dc51bd1d9d
ci: move the bump job's master guard from job level to step level
Nguyen Minh Phuc
2026-07-19 09:00:43 +00:00
-
78a0a6d500
runbook: record how the image gate was taken to zero findings
Nguyen Minh Phuc
2026-07-19 08:48:51 +00:00
-
4a426dbe50
worker: create namespaces with helm, drop the kubectl binary
Nguyen Minh Phuc
2026-07-18 13:05:22 +00:00
-
a59d3848ae
ci: kubectl v1.35.3 -> v1.36.2 to clear CVE-2026-35469
Nguyen Minh Phuc
2026-07-18 12:43:36 +00:00
-
a51227d952
ci: run helm from a checksum-pinned binary, not a container
Nguyen Minh Phuc
2026-07-18 12:20:16 +00:00
-
c76154aeaa
review: fix 26 findings from a 4-agent audit
Nguyen Minh Phuc
2026-07-18 12:13:49 +00:00
-
77d560ddae
ci: move buildx layer cache to the registry
Nguyen Minh Phuc
2026-07-18 11:24:44 +00:00
-
c9d0176bb3
ci: run trivy directly; document CI/CD setup in RUNBOOK
Nguyen Minh Phuc
2026-07-17 11:05:45 +00:00
-
851f8919a8
ci: fix coverage target, pip-audit scope, bandit config
Nguyen Minh Phuc
2026-07-17 10:51:59 +00:00
-
50c2fe2a1e
svcforge: reference implementation
Nguyen Minh Phuc
2026-07-17 10:44:54 +00:00