jakman85andClaude Opus 5.5 92944486d1 feat(dns): publish public names as proxied CNAMEs to the Cloudflare Tunnel ...

Gateway target -> fc81938b-...cfargotunnel.com, --cloudflare-proxied globally,
L4 service publishers (unifi, crafty-mc) pinned DNS-only, Plex web UI and
Headlamp disowned (LAN/VPN-only). L0 internal-services-publish-no-public-dns
gains assertion (9) tying the Gateway target to the tunnel UUID, requiring
cloudflare-proxied=false on every service-source publisher, and keeping the
tunnel's 404 list and the unpublished set consistent. L2 dns-exposure fixture
opts out of proxying.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

2026-11-08 17:55:41 -06:00

..

cert-lifecycle-automated

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

default-deny

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

deny-undeclared

K2 DONE: L2 network behavior tests pass against the live cluster

2026-08-16 15:46:00 -05:00

dns-exposure

feat(dns): publish public names as proxied CNAMEs to the Cloudflare Tunnel

2026-11-08 17:55:41 -06:00

dns-internal-resolution

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

egress-class

conformance: fix invalid test-level spec.finally for chainsaw v0.2.12

2026-08-24 14:09:28 -05:00

egress-default-path

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

gateway-ingress-reachable

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

ha-control-plane

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

keycloak-client-secrets-match-git

test(conformance): gate the URL desired state, and prove the selftest can fail

2026-09-12 21:26:12 -05:00

keycloak-config-as-code

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

keycloak-dashboard

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

keycloak-db-dr

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

keycloak-monitored

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

oidc-sso-grafana

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

onboarding-completeness

T-0.4 Chainsaw conformance harness + coverage + behavior scaffolds (R-TEST-01..06)

2026-08-16 00:08:32 -05:00

sso-forward-auth

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

trusted-tls

feat(prod): observability for the two failure modes that went unseen, plus OIDC self-healing

2026-09-07 00:59:22 -05:00

vm-default-deny

test(conformance): correct stale ImageVolume-gate rationale for k3s v1.36.4

2026-08-31 01:19:46 -05:00

vm-lifecycle

test(conformance): correct stale ImageVolume-gate rationale for k3s v1.36.4

2026-08-31 01:19:46 -05:00