b93594b7c8
Merge pull request 'feat(conformance): the in-cluster Job can now run a named commit and get its results out' (#20) from feat/conformance-job-template into main
jakman852026-09-30 04:09:28 +00:00
76b265cd62
docs(decisions): the PR #20 handoff moves out of DECISIONS-LOG.md into its own file
jakman85andClaude Opus 52026-09-29 22:48:05 -05:00
f6e8fb1fee
fix(sec): the trigger policy read containers and nothing else — initContainers, ephemeralContainers and env were all open
jakman85andClaude Opus 52026-09-29 22:44:07 -05:00
6ef4def2b5
feat(conformance): the in-cluster Job can now run a named commit and get its results out
jakman85andClaude Opus 52026-09-29 22:44:07 -05:00
cac5c9f2a3
Merge pull request 'feat(conformance): build the runner image the in-cluster L2/L3 Job could never have run' (#18) from feat/conformance-runner-image into main
jakman852026-09-30 03:59:26 +00:00
762c3833fc
Merge pull request 'feat(sec): provision the narrow conformance CI trigger credential -- and refuse to arm a fake green' (#19) from feat/conformance-trigger-kubeconfig into main
jakman852026-09-30 03:58:47 +00:00
6dd0914df9
Merge pull request 'fix(crafty): the Keycloak gate works — Crafty's own login was the wall' (#22) from fix/crafty-oauth2-proxy-signin into main
jakman852026-09-30 03:54:37 +00:00
ea0c0632d2
fix(crafty): the Keycloak gate works -- Crafty's own login was the wall
jakman85andClaude Opus 52026-09-29 19:31:36 -05:00
ae5c7385a5
docs(gitea): the README still named the ILLEGAL secret GITEA_SETTINGS_TOKEN
jakman85andClaude Opus 52026-09-29 19:22:13 -05:00
19f9a8ae0c
feat(sec): provision the narrow conformance CI trigger credential -- and refuse to arm a fake green
jakman85andClaude Opus 52026-09-29 19:10:35 -05:00
c59fe9f923
Merge pull request 'chore(log): the handoff log was serialising every parallel branch' (#24) from chore/decisions-log-conflict-free into main
jakman852026-09-30 03:40:18 +00:00
cadf64a514
Merge pull request 'docs(ci): the wiring comment named a secret Gitea cannot accept' (#21) from fix/gitea-settings-comment-names-impossible-secret into main
jakman852026-09-30 03:22:06 +00:00
cfbc596b8b
Merge pull request 'docs(crafty): Bedrock on 19132 RESOLVED — a player has joined; the wall was an empty allowlist' (#23) from fix/crafty-bedrock-19132 into main
jakman852026-09-30 03:19:04 +00:00
20ea70d221
Merge pull request 'fix(sec): the R-SEC-02 admission policy was never applied' (#16) from fix/kyverno-policy-was-never-applied into main
jakman852026-09-29 18:28:54 +00:00
1c5974013e
Merge pull request 'docs(decisions-log): end-of-session PM handoff' (#14) from docs/handoff-2026-09-29 into main
jakman852026-09-29 18:16:22 +00:00
4791d4a43a
Merge pull request 'feat(sec): constrain the conformance CI trigger at admission' (#13) from feat/conformance-trigger-admission-boundary into main
jakman852026-09-29 18:16:00 +00:00
dfd608ac32
Merge pull request 'fix(ci): CLUSTER_AVAILABLE=true would have faked a green' (#12) from fix/cluster-available-would-fake-a-green into main
jakman852026-09-29 18:14:55 +00:00
1d2d9d6549
Merge pull request 'fix(ci): the settings token could never have been stored' (#15) from fix/secret-name-and-require-gitea-settings into main
jakman852026-09-29 18:14:30 +00:00
911ead5fbd
docs(decisions-log): end-of-session PM handoff — six PRs open, and what a new machine needs
jakman85andClaude Opus 52026-09-29 03:25:11 -05:00
e8e6b9c681
Merge pull request 'fix(gitea): admins could override the gate' (#10) from fix/gitea-admins-could-override-the-gate into main
jakman852026-09-29 07:43:52 +00:00
b9e8a4f9e8
Merge pull request 'docs(ci): close out the hardening; correct a claim that shipped wrong' (#9) from docs/close-out-ci-hardening into main
jakman852026-09-29 07:32:52 +00:00
00efd4b828
Merge pull request 'fix(ci): convert dind to a native sidecar; delete both wait loops' (#7) from fix/dind-native-sidecar into main
jakman852026-09-29 07:22:50 +00:00
67a54a33a4
Merge pull request 'fix(ci): delete the per-branch push triggers instead of adding feat/**' (#6) from fix/gate-push-trigger-matches-feat-prefix into main
jakman852026-09-29 07:22:20 +00:00
db1a623073
Merge pull request 'docs(runbooks): the PR flow, not git push origin main' (#5) from docs/runbooks-pr-flow into main
jakman852026-09-29 07:21:28 +00:00
ce271225de
Merge pull request 'docs: correct CI/platform documentation that was stale or wrong' (#8) from docs/ci-reality-vs-phase-0 into main
jakman852026-09-29 07:20:48 +00:00
0391139240
Merge pull request 'feat(plex): wire PLEX_CLAIM from a SOPS Secret (placeholder value)' (#1) from feat/plex-claim-sops-secret into main
jakman852026-09-29 06:18:14 +00:00
e9f441b5ce
Merge pull request 'docs(gitea): a skipped job reports SUCCESS, not pending' (#3) from fix/conformance-context-is-fail-open into main
jakman852026-09-29 06:12:30 +00:00
69a0d1a1c7
Merge pull request 'docs: delivery contract for agents + record that the merge gate does not exist' (#2) from docs/ci-delivery-flow-for-agents into main
jakman852026-09-29 05:50:31 +00:00