Josh Avant
|
788f56f30f
|
Secrets: hard-fail unsupported SecretRef policy and fix gateway restart token drift (#58141)
* Secrets: enforce C2 SecretRef policy and drift resolution
* Tests: add gateway auth startup/reload SecretRef runtime coverage
* Docs: sync C2 SecretRef policy and coverage matrix
* Config: hard-fail parent SecretRef policy writes
* Secrets: centralize unsupported SecretRef policy metadata
* Daemon: test service-env precedence for token drift refs
* Config: keep per-ref dry-run resolvability errors
* Docs: clarify config-set parent-object policy checks
* Gateway: fix drift fallback and schema-key filtering
* Gateway: align drift fallback with credential planner
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
|
2026-03-31 02:37:31 -05:00 |
|
Josh Avant
|
a2cb81199e
|
secrets: harden read-only SecretRef command paths and diagnostics (#47794)
* secrets: harden read-only SecretRef resolution for status and audit
* CLI: add SecretRef degrade-safe regression coverage
* Docs: align SecretRef status and daemon probe semantics
* Security audit: close SecretRef review gaps
* Security audit: preserve source auth SecretRef configuredness
* changelog
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
---------
Signed-off-by: joshavant <830519+joshavant@users.noreply.github.com>
|
2026-03-15 21:55:24 -05:00 |
|
Josh Avant
|
25252ab5ab
|
gateway: harden shared auth resolution across systemd, discord, and node host
|
2026-03-07 18:28:32 -06:00 |
|
Josh Avant
|
72cf9253fc
|
Gateway: add SecretRef support for gateway.auth.token with auth-mode guardrails (#35094)
|
2026-03-05 12:53:56 -06:00 |
|
Peter Steinberger
|
72446f419f
|
docs: align CLI docs and help surface
|
2026-02-22 20:05:01 +01:00 |
|
Peter Steinberger
|
c129f0bbaa
|
docs: align gateway service naming
|
2026-01-21 17:45:26 +00:00 |
|
Peter Steinberger
|
39e24c9937
|
docs: update node CLI references
|
2026-01-21 16:48:42 +00:00 |
|
Peter Steinberger
|
3686bde783
|
feat: add exec approvals tooling and service status
|
2026-01-18 15:23:41 +00:00 |
|
Peter Steinberger
|
2b8ce3f06b
|
feat: add json output for daemon lifecycle
|
2026-01-16 05:40:47 +00:00 |
|
Peter Steinberger
|
0cbfea79fa
|
docs(cli): add per-command CLI pages
|
2026-01-15 06:13:10 +00:00 |
|