Commit Graph

  • fca9a8b187 ci: bump image digests to 7a3dfb06db master svcforge-ci 2026-07-22 06:28:37 +00:00
  • 7a3dfb06db ci: exercise the runner CPU limit and webhook end to end gitea_admin 2026-07-22 06:18:22 +00:00
  • d40bc682ce runbook: the Gitea webhook now covers the broken poll [skip ci] gitea_admin 2026-07-22 06:17:32 +00:00
  • cbd0709281 ci: bump image digests to cd61eca12e svcforge-ci 2026-07-22 03:58:22 +00:00
  • cd61eca12e runbook: correct 1b56cda -- the poll never runs, watch breaks are not the cause gitea_admin 2026-07-22 03:49:04 +00:00
  • 1b56cda231 runbook: name the ArgoCD wedge instead of describing its symptoms gitea_admin 2026-07-22 03:37:22 +00:00
  • 173acc8612 ci: bump image digests to 60ee0f1cbf svcforge-ci 2026-07-22 03:15:59 +00:00
  • 60ee0f1cbf runbook: correct the wedge-detection metrics gitea_admin 2026-07-22 02:58:36 +00:00
  • 9249051ee2 ci: bump image digests to c691f4f4aa svcforge-ci 2026-07-22 02:42:54 +00:00
  • c691f4f4aa runbook: reconciledAt is not a heartbeat gitea_admin 2026-07-22 02:25:10 +00:00
  • a0215ef63f runbook: ArgoCD synced-but-stale, and how to tell a wedged controller from a slow poll gitea_admin 2026-07-22 01:23:20 +00:00
  • b2cdcecdc1 ci: bump image digests to e7496562b3 svcforge-ci 2026-07-22 01:08:19 +00:00
  • e7496562b3 ci: pull the BuildKit frontend from the mirror too Nguyen Minh Phuc 2026-07-21 15:50:12 +00:00
  • 3b957a8566 ci: bump image digests to 08a529fa63 svcforge-ci 2026-07-21 15:42:05 +00:00
  • 08a529fa63 Get off Docker Hub, add a catalog values passthrough, fix the dind prune Nguyen Minh Phuc 2026-07-21 15:32:12 +00:00
  • 58ffb9c2e0 ci: tag the trivy image so the reclaim step stops deleting it Nguyen Minh Phuc 2026-07-21 15:11:20 +00:00
  • 95a894d816 ci: bump image digests to c53734d2bc svcforge-ci 2026-07-21 15:05:04 +00:00
  • c53734d2bc docs: add USER_GUIDE.md, tighten comments, fix CLI needing a DSN Nguyen Minh Phuc 2026-07-21 11:18:57 +00:00
  • 7918dc2b37 ci: bump image digests to 64b18d2823 svcforge-ci 2026-07-21 06:33:09 +00:00
  • 64b18d2823 ci: set UV_LINK_MODE=copy to stop the hardlink warning Nguyen Minh Phuc 2026-07-21 06:02:30 +00:00
  • 51a1bb62c0 ci: bump image digests to 6974b3620f svcforge-ci 2026-07-21 05:59:55 +00:00
  • 6974b3620f catalog: two tiny services, so the loop can be exercised on a full cluster Nguyen Minh Phuc 2026-07-21 05:47:41 +00:00
  • bb8b14ef03 api: make the OpenAPI spec usable as documentation Nguyen Minh Phuc 2026-07-21 05:33:43 +00:00
  • 72296ace84 ci: bump image digests to e971e04d75 svcforge-ci 2026-07-21 02:52:27 +00:00
  • e971e04d75 fix: shared runtime helper must live where every image packages it Nguyen Minh Phuc 2026-07-21 02:40:37 +00:00
  • 9c8d10ce1f ci: bump image digests to 7079d6340f svcforge-ci 2026-07-21 02:25:04 +00:00
  • 7079d6340f docs: bring RUNBOOK and ARCHITECTURE up to date Nguyen Minh Phuc 2026-07-21 01:45:09 +00:00
  • 66eb6cb0ee refactor: converge the patterns multiple authors left divergent Nguyen Minh Phuc 2026-07-21 01:42:25 +00:00
  • d64c3c9f39 fix: three correctness bugs found in review + a dropped-log Nguyen Minh Phuc 2026-07-21 01:31:11 +00:00
  • d6c1b64512 ci: bump image digests to 76cadca8e3 svcforge-ci 2026-07-20 15:27:19 +00:00
  • 76cadca8e3 fix: Kubernetes serialises an empty item list as null, not [] Nguyen Minh Phuc 2026-07-20 15:16:45 +00:00
  • 66336d3648 ci: bump image digests to a843494627 svcforge-ci 2026-07-20 15:01:21 +00:00
  • a843494627 runbook: the runner's three ephemeral caches and the boot cascade Nguyen Minh Phuc 2026-07-20 14:10:28 +00:00
  • 4193a18cae reconciler: read release secrets directly instead of shelling helm Nguyen Minh Phuc 2026-07-20 13:05:25 +00:00
  • 2356ac4ef3 reconciler: scope the drift check to svcforge's own releases Nguyen Minh Phuc 2026-07-20 12:53:16 +00:00
  • c2a27952d1 runbook: fix section ordering and a duplicate number Nguyen Minh Phuc 2026-07-20 07:39:23 +00:00
  • 0dbb5af1d3 runbook: record the dind liveness probe as an open issue Nguyen Minh Phuc 2026-07-20 07:38:51 +00:00
  • d4ac3801a3 runbook: salvaging a faulted Longhorn volume Nguyen Minh Phuc 2026-07-20 07:10:04 +00:00
  • 6093c52160 argocd: ignore the cpu request this cluster rewrites Nguyen Minh Phuc 2026-07-20 06:58:28 +00:00
  • 31fa9165ff chart: give the migrate hook its own ServiceAccount Nguyen Minh Phuc 2026-07-20 06:33:31 +00:00
  • 89ad9625f3 chart: disable externalSecret on this cluster Nguyen Minh Phuc 2026-07-20 06:26:13 +00:00
  • e8b6116a58 ci: age-filter the image prune so digest-pulled images survive Nguyen Minh Phuc 2026-07-20 05:17:06 +00:00
  • 5f18f9eeeb runbook: correct the claim that runner restarts orphan jobs Nguyen Minh Phuc 2026-07-20 04:56:07 +00:00
  • 1a36f43c69 ci: bump image digests to 37b297bf5c svcforge-ci 2026-07-20 05:12:26 +00:00
  • 37b297bf5c ci: reclaim dind disk after each image build Nguyen Minh Phuc 2026-07-20 04:48:48 +00:00
  • 5d7f46483e runbook: recovering the queue after a runner restart Nguyen Minh Phuc 2026-07-20 04:41:15 +00:00
  • b02d4e85c6 ci: record that act_runner ignores max-parallel Nguyen Minh Phuc 2026-07-20 04:27:48 +00:00
  • d70a7b622c ci: cache the trivy vuln DB in a named volume, not a $PWD bind Nguyen Minh Phuc 2026-07-20 04:13:30 +00:00
  • 2098443f31 ci: build images one at a time Nguyen Minh Phuc 2026-07-20 04:11:04 +00:00
  • b35c551160 ci: the digest-guard test depended on state CI itself mutates Nguyen Minh Phuc 2026-07-20 03:48:34 +00:00
  • f87d8d4d78 runbook: the 14-minute 'Set up job' failure and its cause Nguyen Minh Phuc 2026-07-20 03:35:12 +00:00
  • c537073c21 deps: everything to latest stable Nguyen Minh Phuc 2026-07-19 09:39:25 +00:00
  • 4544765ec5 test: scope the process-group assertion to this run's own children Nguyen Minh Phuc 2026-07-19 09:25:56 +00:00
  • f2b159ef7e ci: bump image digests to ca21b6e70d svcforge-ci 2026-07-19 09:18:15 +00:00
  • ca21b6e70d ci: gitleaks was passing without scanning anything Nguyen Minh Phuc 2026-07-19 09:11:22 +00:00
  • dc51bd1d9d ci: move the bump job's master guard from job level to step level Nguyen Minh Phuc 2026-07-19 09:00:43 +00:00
  • 78a0a6d500 runbook: record how the image gate was taken to zero findings Nguyen Minh Phuc 2026-07-19 08:48:51 +00:00
  • 4a426dbe50 worker: create namespaces with helm, drop the kubectl binary Nguyen Minh Phuc 2026-07-18 13:05:22 +00:00
  • a59d3848ae ci: kubectl v1.35.3 -> v1.36.2 to clear CVE-2026-35469 Nguyen Minh Phuc 2026-07-18 12:43:36 +00:00
  • a51227d952 ci: run helm from a checksum-pinned binary, not a container Nguyen Minh Phuc 2026-07-18 12:20:16 +00:00
  • c76154aeaa review: fix 26 findings from a 4-agent audit Nguyen Minh Phuc 2026-07-18 12:13:49 +00:00
  • 77d560ddae ci: move buildx layer cache to the registry Nguyen Minh Phuc 2026-07-18 11:24:44 +00:00
  • c9d0176bb3 ci: run trivy directly; document CI/CD setup in RUNBOOK Nguyen Minh Phuc 2026-07-17 11:05:45 +00:00
  • 851f8919a8 ci: fix coverage target, pip-audit scope, bandit config Nguyen Minh Phuc 2026-07-17 10:51:59 +00:00
  • 50c2fe2a1e svcforge: reference implementation Nguyen Minh Phuc 2026-07-17 10:44:54 +00:00