jakman85 5ba3f9d46d fix(conformance): trusted-tls verifies LE-prod cert via system trust + split-horizon DNS (R-TLS-01/03) ...

Rewrote the probe for the LE-production switch: no embedded staging root, no --cacert
(system CA bundle validates ISRG Root X1), resolves the hostname via in-cluster
split-horizon DNS to the Gateway VIP (the real-client path). PASSES live (9s). Removed the
le-staging-root-ca fixture.

2026-08-25 08:21:55 -05:00

..

default-deny

Autonomous session: Phase-2 platform authoring + Flux bootstrap progress

2026-08-16 14:32:47 -05:00

deny-undeclared

K2 DONE: L2 network behavior tests pass against the live cluster

2026-08-16 15:46:00 -05:00

dns-exposure

feat(conformance): author R-TLS + R-DNS L2 tests; fix ExternalDNS zone filter

2026-08-17 08:24:51 -05:00

dns-internal-resolution

test(dns): internal split-horizon resolution conformance (R-DNS-01/R-DNS-03)

2026-08-24 22:28:53 -05:00

egress-class

conformance: fix invalid test-level spec.finally for chainsaw v0.2.12

2026-08-24 14:09:28 -05:00

gateway-ingress-reachable

test(net): L2 conformance — exposed app reachable through Gateway under default-deny (R-NET-03)

2026-08-25 00:13:35 -05:00

keycloak-config-as-code

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

keycloak-dashboard

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

keycloak-db-dr

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

keycloak-monitored

keycloak: coverage tests + dashboard + reword cross-cutting tags

2026-08-24 21:07:27 -05:00

oidc-sso-grafana

fix(conformance): busybox-compatible wget in oidc-sso-grafana probe (R-IDP-01)

2026-08-24 23:09:06 -05:00

onboarding-completeness

T-0.4 Chainsaw conformance harness + coverage + behavior scaffolds (R-TEST-01..06)

2026-08-16 00:08:32 -05:00

sso-forward-auth

WIP keycloak stack (gate probe)

2026-08-24 19:52:25 -05:00

trusted-tls

fix(conformance): trusted-tls verifies LE-prod cert via system trust + split-horizon DNS (R-TLS-01/03)

2026-08-25 08:21:55 -05:00

vm-default-deny

fix(kubevirt): boot VMs via CDI DataVolume + EFI + real KVM (Phase 5)

2026-08-24 23:07:10 -05:00

vm-lifecycle

fix(kubevirt): boot VMs via CDI DataVolume + EFI + real KVM (Phase 5)

2026-08-24 23:07:10 -05:00