6c5288998f
All checks were successful
ci/woodpecker/push/default Pipeline was successful
Completes the Goldmane who-talks-to-whom trail (ADR-0014), implemented by a subagent workflow (distinct stacks in parallel, docs last): - #57 Whisker gated ingress: ingress_factory (whisker.viktorbarzin.me, auth=required, Authentik-gated) + a NetworkPolicy allowing traefik->whisker:8081 (the operator's whisker NP default-denies ingress). calico stack. - #61 pipeline health: AggregatorDown + DigestFailing Prometheus alerts (prometheus_chart_values.tpl) + cluster-health check #48. - #59 service-identity labels on the multi-Service namespaces (monitoring's 5 TF-managed deployments + dbaas), with the KYVERNO_LIFECYCLE_V1 marker so they update in-place. - #62/#63 docs: docs/runbooks/goldmane-flow-trail.md (new), service-catalog, security.md + monitoring.md east-west sections, ADR-0014 as-built, CONTEXT.md. #62 = the SQL to derive the Wave-1 per-namespace egress allowlist from the edge table (feeds code-8ywc; enforce-flips out of scope). Also fixes the digest's Slack target: #security override 404s channel_not_found because the shared alertmanager_slack_api_url webhook's app isn't a member of #security (this likely also breaks alertmanager's slack-security receiver — flagged in the runbook). Routed to #alerts (the webhook's working channel) until the app is invited; verified a real digest run posts cleanly (360 edges). Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com> |
||
|---|---|---|
| .. | ||
| 0001-android-emulator-in-cluster.md | ||
| 0002-all-image-builds-off-infra-gha-ghcr.md | ||
| 0003-keep-forgejo-canonical-complete-mirror.md | ||
| 0004-homelab-unified-cli.md | ||
| 0005-homelab-v01-scope.md | ||
| 0006-homelab-work-and-tf.md | ||
| 0007-homelab-k8s-verbs.md | ||
| 0008-homelab-memory-verbs.md | ||
| 0009-homelab-ci-deploy-verbs.md | ||
| 0010-homelab-net-obs-verbs.md | ||
| 0011-homelab-usage-telemetry.md | ||
| 0012-homelab-ha-verbs.md | ||
| 0013-homelab-browser-verbs.md | ||
| 0014-service-identity-and-east-west-observability.md | ||