Commit Graph

Select branches

Hide Pull Requests

main

v0.0.0

v0.1.0

Mono Color

• f32ff08365 fix: accept any Authentik provider issuer in JWT validation main Admin Bot 2026-09-05 06:02:11 -07:00
• c44a9b174f docs: incompatibility warnings for canvas connections Admin Bot 2026-09-05 01:01:24 -07:00
• f1030aae82 docs: add CanvasReasonerActivity for auto-inferring workflow connections Admin Bot 2026-09-05 00:54:30 -07:00
• dc97afb0ef docs: add JWT auth token to LLM inference activities Admin Bot 2026-09-05 00:47:27 -07:00
• eb4c2ff13d docs: add LLM inference in workflows section Admin Bot 2026-09-05 00:43:53 -07:00
• 4463508f29 fix: sanitize JWT error to prevent JWKS URL leak in 403 response Admin Bot 2026-09-05 00:31:37 -07:00
• 11ca4a5902 fix: move gateway config from plaintext ConfigMap to SOPS-encrypted Secret Admin Bot 2026-09-05 00:28:45 -07:00
• 33910fe8e9 fix: update gateway auth to use api-gw provider with llm:inference permission Admin Bot 2026-09-04 21:52:36 -07:00
• e7bd818459 temp: use portfolio-agent OIDC for LLM testing Admin Bot 2026-09-04 19:25:20 -07:00
• a55e4c7b43 fix: use pod ports (9000/9443) for authentik egress, not service ports Admin Bot 2026-09-04 19:09:43 -07:00
• d998d7e63c fix: add egress rules for iam, sqs, temporal, poimen, storage namespaces Admin Bot 2026-09-04 19:06:50 -07:00
• ea6974cdad fix: Use internal Authentik for JWKS in gateway auth config Admin Bot 2026-09-03 16:33:36 -07:00
• 8ba4e0facc fix: allow portfolio namespace to reach api-gateway for LLM chat Admin Bot 2026-09-01 11:15:23 -07:00
• 14cc67833c feat(auth): wire JWT validation into /v1/* LLM endpoints Admin Bot 2026-08-31 23:01:59 -07:00
• f9addf945d feat(tracing): add OpenTelemetry instrumentation to API gateway Admin Bot 2026-08-31 15:01:56 -07:00
• de34a6c8cc fix(network): allow poimen namespace to access api-gateway Admin Bot 2026-08-31 14:59:29 -07:00
• bc3ce9578f fix: skip Temporal integration tests when server not available Admin Bot 2026-08-30 09:45:20 -07:00
• 8862dbebb7 docs: rewrite README.md - remove stale content, reflect current state Admin Bot 2026-08-30 07:29:24 -07:00
• a0995edbd0 refactor: consolidate docs, write unified API reference Admin Bot 2026-08-29 22:38:20 -07:00
• 4935ea9f95 feat: wire Temporal gRPC into REST handler Admin Bot 2026-08-29 21:54:16 -07:00
• 4633989a46 docs: Add comprehensive SERVICE-USAGE guide for all endpoints Admin Bot 2026-08-28 13:06:19 -07:00
• 61abe529ad fix: Update Dockerfile golang version to 1.26 Admin Bot 2026-08-27 15:20:43 -07:00
• e1a5aca7d6 fix: Lazy-load JWKS in JWT validator + add unit tests Admin Bot 2026-08-27 15:13:49 -07:00
• 9d9395d938 feat: Phase 3.1 - SQS JWT validation against Authentik JWKS Admin Bot 2026-08-27 11:40:35 -07:00
• 55b32b97e0 mark: Phase 8.2, 8.10 GREEN; create Phase 3 auth tasks Admin Bot 2026-08-27 11:36:13 -07:00
• 95045e80f6 fix: SQS gateway JWT validation, MinIO/Temporal native JWT support Admin Bot 2026-08-27 11:33:04 -07:00
• 1dc688aec2 test: real integration tests for X-Service adapter routing Admin Bot 2026-08-27 11:31:17 -07:00
• a8d8b17a03 test: add integration test suite + canary deployment script Admin Bot 2026-08-27 11:17:51 -07:00
• 8dfd17127b chore: remove unused internal/auth package Admin Bot 2026-08-27 11:16:40 -07:00
• 139bc80529 refactor: dispatcher as dumb pipe + add gRPC detection for Temporal Admin Bot 2026-08-27 11:16:15 -07:00
• 57d64039d5 config: set memory to public (no JWT required), only iam protected Admin Bot 2026-08-27 11:11:37 -07:00
• df33203a72 feat: add JWT validation against Authentik JWKS for protected adapters Admin Bot 2026-08-27 11:07:20 -07:00
• 46dc24a26c fix: remove workflow adapter (temporal-frontend is gRPC-only, not HTTP) Admin Bot 2026-08-27 09:48:46 -07:00
• e7536a80ce fix: correct SQS port from 8080 to 9090 Admin Bot 2026-08-27 09:07:12 -07:00
• f4193fe6e1 fix: correct service names in adapter upstreams (management-service.sqs, minio.storage, authentik-server.iam) Admin Bot 2026-08-27 09:03:58 -07:00
• bd4cbbd0a3 feat: proxy requests to service adapter upstreams instead of echoing Admin Bot 2026-08-27 08:55:41 -07:00
• 50503445f7 fix: add serviceaccount manifest (was in deleted rbac.yaml) Admin Bot 2026-08-26 19:49:11 -07:00
• 62e23d6876 chore: remove CRD, RBAC, and CR manifests (adapters now in ConfigMap) Admin Bot 2026-08-26 16:47:15 -07:00
• 81e228e818 feat: add stakater reloader annotation for configmap auto-reload Admin Bot 2026-08-26 16:41:42 -07:00
• 9c5fb0ce84 feat: load service adapters from ConfigMap, remove k8s API dependency Admin Bot 2026-08-26 16:39:30 -07:00
• 0cdfae2a93 feat: integrate 8.2 X-Service dispatcher into main router Admin Bot 2026-08-26 14:05:43 -07:00
• 951a4399d6 feat: unblock 8.9 memory adapter extended (all 33 tasks GREEN) Admin Bot 2026-08-26 13:54:23 -07:00
• 425611ec42 feat: phase 8 serviceadapter crd rollout (32/33 tasks) Admin Bot 2026-08-26 13:47:36 -07:00
• 63893d41a5 feat(phase3): Complete Temporal REST API Gateway with gRPC integration Admin Bot 2026-08-22 23:17:12 -07:00
• 65c8978d21 test(ci): verify main-branch CI trigger Story Crater Bot 2026-08-21 21:07:43 -07:00
• abcc6dd4a9 ci(main): tag both SHA and latest during build, push both in one step Story Crater Bot 2026-08-21 21:00:36 -07:00
• 9740334d24 ci(main): push latest tag on main commits, auto-deploy via kustomization Story Crater Bot 2026-08-21 20:56:47 -07:00
• 0f2cd7565a ci(main): trigger image builds on main branch commits Story Crater Bot 2026-08-21 20:55:27 -07:00
• 60a7dea072 test(ci): verify REGISTRY_PAT secret works Story Crater Bot 2026-08-21 20:52:41 -07:00
• 0fe9de6fbd fix(ci): use universal REGISTRY_PAT secret for Forgejo registry auth Story Crater Bot 2026-08-21 20:52:32 -07:00
• afcc28fca0 ci(prod): add prod build workflow for image push to Forgejo registry Story Crater Bot 2026-08-21 20:47:02 -07:00
• b6767e247c fix(deps,ci): update module path to forgejo.riotpiao.com/rock/homelab-frontend, switch to GITHUB_TOKEN Story Crater Bot 2026-08-21 20:46:42 -07:00
• 6cf5c3e5a9 fix(server): stop WriteTimeout from killing in-progress LLM streams Story Crater Bot 2026-08-21 20:06:10 -07:00
• 0aaf4116f1 fix(ci): target the golang runner, generic docker runner retired Story Crater Bot 2026-08-21 16:53:05 -07:00
• fb1a97e8d0 Add Temporal worker and test client programs Story Crater Bot 2026-08-21 16:49:44 -07:00
• 9127076f1b test: retry after host network config Story Crater Bot 2026-08-21 16:15:15 -07:00
• 3d63df9ba8 fix(ci): drop ineffective --network host option, runner sets it globally now Story Crater Bot 2026-08-21 16:14:16 -07:00
• aef122b854 test: retry docker build connect flake Story Crater Bot 2026-08-21 16:07:40 -07:00
• bc26ab9340 test: retry after egress NetworkPolicy fix Story Crater Bot 2026-08-21 16:06:01 -07:00
• f06edf6a54 test: retry after runner config.yaml rollout Story Crater Bot 2026-08-21 15:59:10 -07:00
• 7b265b8338 fix(ci): mount /docker-certs/client into the build job container Story Crater Bot 2026-08-21 15:55:23 -07:00
• 0e6ebe7353 test: retry build with FORGEJO_RIOTPIAO_PAT secret set Story Crater Bot 2026-08-21 14:08:12 -07:00
• 7ebbf2bd03 fix: install node in job containers so actions/checkout can exec Story Crater Bot 2026-08-21 13:49:24 -07:00
• dac1a5da4b fix: move workflows from .forgejo/workflows to .gitea/workflows Story Crater Bot 2026-08-21 11:36:34 -07:00
• e71034c3ef test: probe .gitea/workflows path Story Crater Bot 2026-08-21 11:34:17 -07:00
• 31ed81a737 test: probe .yml extension detection Story Crater Bot 2026-08-21 11:16:37 -07:00
• 4d33b1db9b test: live log capture Story Crater Bot 2026-08-20 22:47:09 -07:00
• dcbc72b8ae test: verify runner picks up task post-DNS-recovery Story Crater Bot 2026-08-20 22:44:07 -07:00
• f3f71ea90d test: verify forgejo actions after global enable Story Crater Bot 2026-08-20 22:12:01 -07:00
• ef87f44f4e test: verify stage 1 build workflow Story Crater Bot 2026-08-20 21:32:16 -07:00
• d3a9d3966c ci: split workflows into ci.yaml (verify) and build.yaml (push) Story Crater Bot 2026-08-20 21:30:40 -07:00
• a949707aaf deploy: bump gateway to v0.1.1 with llm-client label Story Crater Bot 2026-08-20 00:10:27 -07:00
• 2aabd4288b fix: label gateway pods llm-client=true so upstreams accept them Story Crater Bot 2026-08-20 00:06:23 -07:00
• 500eb74577 fix: match namespaces by kubernetes.io/metadata.name in netpol egress Story Crater Bot 2026-08-20 00:04:17 -07:00
• d7362985f9 deploy: bump gateway image to v0.1.0 Story Crater Bot 2026-08-19 23:57:21 -07:00
• 8feee6754b test: check request errors and stop asserting PathRewrite on /v1/models v0.1.0 Story Crater Bot 2026-08-19 23:55:42 -07:00
• c8c656046a docs: comprehensive api and testing documentation Story Crater Bot 2026-08-19 23:55:22 -07:00
• a8dfd5b2f0 feat(phase2): complete openai api surfaces 2.3-2.7 Story Crater Bot 2026-08-19 23:49:11 -07:00
• fd45c2c0d3 deploy: pin gateway image to v0.0.0 Story Crater Bot 2026-08-19 22:50:03 -07:00
• 818c9881be build: cross-compile the image to the target arch v0.0.0 Story Crater Bot 2026-08-19 22:18:40 -07:00
• b0ce2fb67c feat: build and publish the gateway image via Forgejo Actions Story Crater Bot 2026-08-19 21:48:11 -07:00
• 058f11cf2b chore: initial commit of Go API gateway Story Crater BotandClaude Opus 5 2026-08-19 20:52:13 -07:00