Rongsong Shen
4835cf2b30
rshen/Letmein was a live, checked-in cluster_admin credential in auth.yaml. Renamed to a non-identifying username with a clearly-marked placeholder password. docs: add full ops deployment guide (src/docs/deployment.md) Covers building and running all four daemons plus xceadmin, based on direct source verification (CLI flags, config file shapes, TLS posture) and a live single-node deploy. Documents real production gaps (no process supervision, plaintext non-controller traffic, exposed dev creds) rather than treating the repo as a finished runbook.
34 lines
2 KiB
JSON
34 lines
2 KiB
JSON
{
|
|
"feature_name": "admin-config-tool",
|
|
"created_at": "2026-07-06T01:30:00Z",
|
|
"updated_at": "2026-07-30T02:01:00Z",
|
|
"language": "en",
|
|
"phase": "tasks-generated",
|
|
"approvals": {
|
|
"requirements": {
|
|
"generated": true,
|
|
"approved": true
|
|
},
|
|
"design": {
|
|
"generated": true,
|
|
"approved": true
|
|
},
|
|
"tasks": {
|
|
"generated": true,
|
|
"approved": true
|
|
}
|
|
},
|
|
"ready_for_implementation": true,
|
|
"blocked_on": [
|
|
"RESOLVED 2026-07-25 (bug-1468, commit 959b0cda): controller OP_upgradeConfig dispatch defect (cluster.c) -- myreq_handler's dispatch guard was inverted (introduced by commit fd93997f, 2026-05-31), rejecting the only role that could ever legitimately reach it and making handle_upgrade_config() permanently unreachable from any network client. Fixed by config-upgrade-snapshot task 8.6 (which independently hit the same wall building a live OP_upgradeConfig sender). The controller-side path this blocker described has since been exercised live and successfully many times via config-upgrade-snapshot's --config-upgrade soak. push_config() itself (xceadmin's TLS/redirect/framing code) remains mock-tested only -- a live `xceadmin config push` run against a deployed cluster would give first-hand confirmation of the CLI's own wire code, but the blocking condition (dispatch unreachable) no longer exists.",
|
|
"RESOLVED 2026-07-22 (bug-1461, commit e53c086): controller.capnp's struct Data shadowed the capnp builtin blob type, miscompiling UpgradeConfigRequest.sha256/.bytes — fixed at the schema root (renamed to XceData), unblocking push_config()'s request construction. The dispatch defect above (bug-1468) is a separate issue and is now ALSO resolved (see entry above) — push_config() remains mock-tested only, no live xceadmin-specific E2E run yet, but nothing blocks one."
|
|
],
|
|
"gitea": {
|
|
"milestone_id": 1,
|
|
"issues": {
|
|
"requirements_design": 22,
|
|
"implementation": 23,
|
|
"validation": 24
|
|
}
|
|
}
|
|
}
|