myxce/.kiro/specs/admin-config-tool
Rongsong Shen 4835cf2b30 fix(security): replace exposed admin credential with placeholder
rshen/Letmein was a live, checked-in cluster_admin credential in
auth.yaml. Renamed to a non-identifying username with a clearly-marked
placeholder password.

docs: add full ops deployment guide (src/docs/deployment.md)

Covers building and running all four daemons plus xceadmin, based on
direct source verification (CLI flags, config file shapes, TLS posture)
and a live single-node deploy. Documents real production gaps (no
process supervision, plaintext non-controller traffic, exposed dev
creds) rather than treating the repo as a finished runbook.
2026-07-31 03:31:23 +00:00
..
brief.md docs(admin-config-tool): commit spec docs and example configs 2026-07-22 10:11:08 +00:00
design.md feat(admin-config-tool): wire xceadmin into meson + nix build 2026-07-22 10:46:45 +00:00
requirements.md feat(admin-config-tool): drop ha/data/ entirely, match real client TLS 2026-07-22 14:50:51 +00:00
research.md docs(admin-config-tool): clear stale OP_upgradeConfig dispatch blocker (bug-1468 already fixed) 2026-07-28 14:13:06 +00:00
spec.json fix(security): replace exposed admin credential with placeholder 2026-07-31 03:31:23 +00:00
tasks.md docs(admin-config-tool): mark task 6.3 blocked pending flake reproduction 2026-07-30 14:57:32 +00:00