This website requires JavaScript.
727b9e1cb0
fix(proxy): admission-control review fixes missing from the #65 merge (#66 )
2026-09-30 12:19:24 +00:00
d71c88498b
fix(proxy): address review findings on admission control (#64 )
Admin Bot
2026-09-30 19:32:10 +08:00
369d51a5c2
feat(proxy): engine-wide LLM admission control via vLLM gauges (#65 )
poimen and rock
2026-09-30 10:56:10 +00:00
c5a91cf647
feat(proxy): engine-wide LLM admission control via vLLM gauges (#64 )
Admin Bot
2026-09-30 17:39:47 +08:00
aac68386d8
fix(proxy): wire LLM latency metrics into the streaming response path (#63 )
rock
2026-09-29 15:46:39 +00:00
28753d11ed
fix(netpol): allow Prometheus scrape of gateway /metrics (#62 )
rock and Admin Bot
2026-09-29 14:40:31 +00:00
3068c68730
Merge pull request 'feat(sessions): SandboxFleet integration — fleet primary, k8s fallback' (#61 ) from feat/sessions-sandbox-fleet-integration into main
rock
2026-09-29 08:14:00 +00:00
da361f2a21
fix(sessions): nil map panic in updateSandboxSummary goroutine
Admin Bot
2026-09-29 11:28:43 +08:00
1e17706367
feat(sessions): SandboxFleet integration — fleet controller primary, SandboxManager fallback
Admin Bot
2026-09-29 11:15:20 +08:00
49c9071a59
Merge pull request 'feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4)' (#60 ) from feat/sessions-sandbox-manager into main
rock
2026-09-28 14:02:53 +00:00
16ddd6d4ad
feat(sessions): sandbox resource — per-session k8s Pod+PVC+Service (§4.15.4)
Admin Bot
2026-09-28 19:53:37 +08:00
fadc658ac0
Merge pull request 'fix(sessions): use entities query for list (hybridSearch requires project)' (#59 ) from fix/sessions-list-entities-query into main
rock
2026-09-28 10:43:24 +00:00
bb7a490f5c
fix(sessions): use entities query for list — hybridSearch requires project arg
Admin Bot
2026-09-28 18:43:00 +08:00
4a3768ac35
Merge pull request 'fix(netpol): add poimen:8090+6379 egress for sessions adapter' (#58 ) from fix/netpol-poimen-graphql into main
rock
2026-09-28 08:31:09 +00:00
f8882e86ae
fix(netpol): add poimen:8090 (graphql) + 6379 (redis) to egress
Admin Bot
2026-09-28 16:30:31 +08:00
f9093fe713
Merge pull request 'fix(test): update TestPromote_KustomizeSuccess for kustomize patch path' (#57 ) from fix/promoter-test-kustomize-path into main
rock
2026-09-28 07:18:56 +00:00
ecaaaa8792
fix(test): update TestPromote_KustomizeSuccess for new kustomize patch path
Admin Bot
2026-09-28 14:18:32 +07:00
6d304a3e5a
Merge pull request 'fix(promoter): correct Forgejo registry service hostname' (#56 ) from fix/promoter-registry-hostname into main
rock
2026-09-28 07:16:54 +00:00
3ca654513f
fix(promoter): correct Forgejo registry service hostname
Admin Bot
2026-09-28 12:24:56 +08:00
23fff1006a
feat(webhook): Forgejo package webhook → ArgoCD image promotion (#55 )
rock and Admin Bot
2026-09-28 02:45:41 +00:00
50bcd19634
feat(sessions): switch writes to GraphQL upsertEntity mutation (#53 )
rock and Admin Bot
2026-09-28 02:24:11 +00:00
a24e4f7174
feat(sessions): SessionAdapter — REST CRUD for sessions/milestones/episodes (#51 )
rock and Admin Bot
2026-09-28 01:53:20 +00:00
0bde5dd8fe
fix(netpol): allow api-gateway egress to notifications:80 (Gotify) (#48 )
rock and Admin Bot
2026-09-27 14:13:36 +00:00
ef5e736673
feat(cag): CAG integration — memory adapter, warmup semaphore, cache-aware routing (#47 )
rock and Admin Bot
2026-09-27 11:16:40 +00:00
aaa9a5d1cb
fix: use query params for workflow_id in Poimen endpoints (#42 )
rock
2026-09-26 12:52:19 +00:00
ea7bd8336b
ci: skip canary deploy, kubeconfig, and k8s promotion (RBAC not ready) (#41 )
rock and Admin Bot
2026-09-26 12:20:12 +00:00
f2c085b688
ci: skip canary deploy, kubeconfig, and k8s promotion (RBAC not ready)
Admin Bot
2026-09-26 19:15:50 +08:00
ad5ba583ac
ci: skip canary deploy + integration tests (RBAC not ready) (#39 )
rock and Admin Bot
2026-09-26 11:26:06 +00:00
63ec2ddf68
Merge pull request 'fix(ci): use namespace-scoped kubeconfig check, guard empty pod name' (#38 ) from fix/ci-kubeconfig-rbac into main
rock
2026-09-26 11:05:16 +00:00
e4fed02809
fix(ci): use namespace-scoped kubeconfig check, guard empty pod name
Admin Bot
2026-09-26 19:04:53 +08:00
eab6bc50c9
Merge pull request 'feat: Poimen AI orchestrator API (Stream A: #31 , #32 , #33 , #34 )' (#37 ) from feat/poimen-orchestrator-api into main
rock
2026-09-26 10:51:58 +00:00
a8e20f437b
ci: use -short flag on tests to skip integration tests for now
Admin Bot
2026-09-26 18:51:38 +08:00
4487ac99b4
feat: add typed Poimen REST endpoints and wire workflow types (#32 , #34 )
Admin Bot
2026-09-26 18:49:17 +08:00
23f909b9d8
fix: clean up dead Temporal operations.go stubs (#31 )
Admin Bot
2026-09-26 18:18:31 +08:00
6b089ff223
feat: add SSE streaming endpoint for workflow events (#36 )
rock and Poimen
2026-09-26 10:50:16 +00:00
a86c22fba8
fix: clean up dead Temporal operations.go stubs (#31 )
Admin Bot
2026-09-26 18:18:31 +08:00
f2cff13629
fix(ci): relax namespace validation test + add webhook endpoint test (#30 )
rock and poimen
2026-09-16 03:08:20 +00:00
bd8c64862c
Merge pull request 'feat(webhook): Forgejo → Gotify notification bridge' (#29 ) from feat/forgejo-gotify-webhook into main
rock
2026-09-15 22:50:47 +00:00
2171424220
feat(webhook): Forgejo → Gotify notification bridge
Admin Bot
2026-09-16 07:49:15 +09:00
3c6c855761
fix: require namespace for workflow operations, return 400 if missing
Admin Bot
2026-09-15 21:27:05 +09:00
7237e47854
ci: retrigger build after integration test configmap fix
Admin Bot
2026-09-15 21:22:31 +09:00
f18e6331ea
fix: workflow auth.required=false to match gateway config
Admin Bot
2026-09-15 18:07:22 +09:00
bb792d463f
fix: config adapters must not overwrite code-registered internal handlers
Admin Bot
2026-09-15 18:02:30 +09:00
d439536ca9
Add TTFT & ITL Metrics for LLM Inference (#28 )
rock and poimen
2026-09-15 08:53:58 +00:00
30e0a83a50
feat(network): SSE optimization for local LLM streaming (#31 #32 #33 ) (#26 )
2026-09-13 23:37:33 +00:00
db09d546e0
fix: check scope claim for client_credentials JWT auth
Admin Bot
2026-09-14 08:18:15 +09:00
cc9a32f53a
feat(network): SSE optimization for local LLM streaming (#31 #32 #33 )
Admin Bot
2026-09-14 08:12:03 +09:00
7de71180b3
feat: add Tekton Pipelines for integration testing (#25 )
2026-09-13 22:50:12 +00:00
1e8b0c4ad6
fix: allow paperless namespace ingress to api-gateway
Admin Bot
2026-09-13 13:52:37 +09:00
1dd71de97f
refactor: use in-cluster authentication instead of kubeconfig secret
Admin Bot
2026-09-13 13:51:46 +09:00
fa9938df8e
refactor: use Kubernetes Job for integration testing instead of manual pod management
Admin Bot
2026-09-13 13:47:02 +09:00
a700ac065b
fix: remove kubectl installation, assume available in runner
Admin Bot
2026-09-13 13:44:15 +09:00
e0622449cc
fix: ensure test pod can reach all downstream services
Admin Bot
2026-09-13 11:48:04 +09:00
52c36e587b
feat: proper CI/CD workflow with integration testing
Admin Bot
2026-09-13 11:46:46 +09:00
0943df8a42
feat: add comprehensive integration tests and CI pipeline
Admin Bot
2026-09-13 11:42:55 +09:00
d7e1cbc62b
feat: implement gRPC forwarding for workflow adapter
Admin Bot
2026-09-13 11:39:23 +09:00
f888df8be2
fix: use decrypted gateway config secret for reliable pod startup
Admin Bot
2026-09-13 11:24:12 +09:00
4341b1109b
security: restore old public key in .sops.yaml for cluster decryption
Admin Bot
2026-09-13 11:10:34 +09:00
4a00312906
security: rotate SOPS age key - update to new public key only
Admin Bot
2026-09-13 11:00:14 +09:00
b8f95506ca
feat: add Temporal config and update routing with memory service integration
Admin Bot
2026-09-13 10:56:18 +09:00
67f24ea763
docs: improve .sops.yaml with public key and encryption guidance
Admin Bot
2026-09-13 09:20:05 +09:00
d53b7632cf
Merge branch 'fix/gateway-authentik-port'
Admin Bot
2026-09-13 09:09:31 +09:00
d82cc5a697
fix: gateway authentik port from 80 to 9000 (#22 )
poimen and rock
2026-09-13 00:07:58 +00:00
04619a269f
fix: gateway authentik port 80→9000 + encrypt internal infrastructure URLs
Admin Bot
2026-09-13 08:58:07 +09:00
45254a48b0
fix: gateway authentik port from 80 to 9000
Admin Bot
2026-09-13 08:48:00 +09:00
fc73ca3075
feat(audit): log successful JWT auth with subject, acting_party, roles
Admin Bot
2026-09-10 04:33:56 +09:00
69c506c9f9
feat(audit): log successful JWT auth with subject, acting_party, roles
Admin Bot
2026-09-10 04:33:56 +09:00
e61885254b
feat: route qwen2.5:3b-instruct to CPU service (#20 )
rock
2026-09-09 02:10:59 +00:00
dba718e87b
feat: route qwen2.5:3b-instruct to CPU service on cp-2
Admin Bot and poimen
2026-09-08 18:26:32 -07:00
8177f8b92f
feat(proxy): add /auth/exchange token exchange endpoint
rock
2026-09-09 00:31:10 +00:00
05d6321302
feat(proxy): add /auth/token and /auth/refresh endpoints (#18 )
rock
2026-09-09 00:00:07 +00:00
1c64d8ff0e
feat(config): add tokenUrl, clientId, clientSecret to auth config (#17 )
poimen and rock
2026-09-08 23:43:29 +00:00
74ecfe7107
feat(serviceadapter): enforce JWT auth on X-Service dispatch (#16 )
poimen and rock
2026-09-08 23:20:31 +00:00
97707aa2f2
feat(identity): inject X-Forwarded-User headers after JWT validation (#15 )
rock and poimen
2026-09-08 23:08:39 +00:00
2e4e7e4855
Merge pull request 'fix(s3): correct MinIO service port and allow egress' (#14 ) from fix/s3-adapter-port into main
rock
2026-09-08 17:03:52 +00:00
c2fa3445bd
fix(s3): correct MinIO service port and allow egress
Admin Bot
2026-09-08 09:58:36 -07:00
0605754445
ci: unified workflow - single job, DOCKER_HOST, build+push on all events (#4 )
rock and Admin Bot
2026-09-07 21:01:02 +00:00
fe6bc67ec3
ci: unified workflow - single job, DOCKER_HOST, build+push on all events
Admin Bot
2026-09-07 13:47:14 -07:00
fbcb8989cd
fix: use env vars for docker registry credentials (#2 )
rock and Admin Bot
2026-09-07 06:50:48 +00:00
a23f5b3f31
fix: remove container override, install deps in workflow steps
Admin Bot
2026-09-06 22:49:53 -07:00
3faed02dbf
fix: accept multi-issuer JWTs from any Authentik provider (#1 )
rock and Admin Bot
2026-09-06 13:45:04 +00:00
4effbf47bc
ci: fix docker dind access, remove container override
Admin Bot
2026-09-06 05:55:54 -07:00
619dc62de6
fix: accept any Authentik provider issuer in JWT validation
Admin Bot
2026-09-05 06:02:11 -07:00
0ff38e2e7a
docs: incompatibility warnings for canvas connections
Admin Bot
2026-09-05 01:01:24 -07:00
3836835dd0
docs: add CanvasReasonerActivity for auto-inferring workflow connections
Admin Bot
2026-09-05 00:54:30 -07:00
afd548c9bb
docs: add JWT auth token to LLM inference activities
Admin Bot
2026-09-05 00:47:27 -07:00
e09e2270e2
docs: add LLM inference in workflows section
Admin Bot
2026-09-05 00:43:53 -07:00
dd9356c669
fix: sanitize JWT error to prevent JWKS URL leak in 403 response
Admin Bot
2026-09-05 00:31:37 -07:00
2bcf6c82fc
fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret
Admin Bot
2026-09-05 00:28:45 -07:00
33910fe8e9
fix: update gateway auth to use api-gw provider with llm:inference permission
Admin Bot
2026-09-04 21:52:36 -07:00
e7bd818459
temp: use portfolio-agent OIDC for LLM testing
Admin Bot
2026-09-04 19:25:20 -07:00
a55e4c7b43
fix: use pod ports (9000/9443) for authentik egress, not service ports
Admin Bot
2026-09-04 19:09:43 -07:00
d998d7e63c
fix: add egress rules for iam, sqs, temporal, poimen, storage namespaces
Admin Bot
2026-09-04 19:06:50 -07:00
ea6974cdad
fix: Use internal Authentik for JWKS in gateway auth config
Admin Bot
2026-09-03 16:33:36 -07:00
8ba4e0facc
fix: allow portfolio namespace to reach api-gateway for LLM chat
Admin Bot
2026-09-01 11:15:23 -07:00
14cc67833c
feat(auth): wire JWT validation into /v1/* LLM endpoints
Admin Bot
2026-08-31 23:01:59 -07:00
f9addf945d
feat(tracing): add OpenTelemetry instrumentation to API gateway
Admin Bot
2026-08-31 15:01:56 -07:00
de34a6c8cc
fix(network): allow poimen namespace to access api-gateway
Admin Bot
2026-08-31 14:59:29 -07:00
bc3ce9578f
fix: skip Temporal integration tests when server not available
Admin Bot
2026-08-30 09:45:20 -07:00
8862dbebb7
docs: rewrite README.md - remove stale content, reflect current state
Admin Bot
2026-08-30 07:29:24 -07:00
poimenandrock
rock