lei.chen/myxce
1
0
Fork 1
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
myxce/src
History
Rongsong Shen 4ec401672b fix(xcecli): restore dangling CA-cert cleanup misses, enable https support 
bug-1463: commit 94f50ce6 (bug-1453 CA-cert-plumbing removal) missed
GetJobOutput's dead tls.Config/loadRootCAs block in request.go, plus
peek.go's SetRootCAs call and serverInfo.CACert field access (the
field no longer exists on APIServerInfo) -- broke the xcecli build.

Removed all three dangling references. Also enabled NewAPIClient's
previously-commented-out InsecureSkipVerify TLS config, since no
xcecli method set any TLS config at all -- any https:// apiserver URL
would have failed cert verification, not just GetJobOutput. Matches
bug-1453's documented design (server-side TLS only, no peer
verification, mTLS deferred as P3 hardening).

Documented both the api-server (http+https) and controller
(server-side-cert-only, no client certs) TLS postures in
.kiro/steering/security.md, replacing a stale line claiming TLS is
handled at the network layer, plus a follow-up note for the planned
HAProxy TLS-termination reverse proxy once its cert type and
apiserver's own listener fate are decided.
2026-07-23 07:28:01 +00:00
..
autoscaler support shared libxce(for api server) 2026-01-19 11:02:49 +08:00
configs feat(controller): wire real limits.yaml config through cluster_config 2026-07-23 04:24:01 +00:00
controller merge 2026-07-23 12:35:10 +08:00
docs Merge branch 'working' into job_peek_lchen 2026-07-22 13:57:25 +08:00
frontend fix(xcecli): restore dangling CA-cert cleanup misses, enable https support 2026-07-23 07:28:01 +00:00
include merge 2026-07-23 12:35:10 +08:00
lib merge 2026-07-23 12:35:10 +08:00
nixSupport feat(admin-config-tool): task 1.3 - nix and xce-build.sh integration 2026-07-22 03:57:43 +00:00
scheduler merge 2026-07-23 12:35:10 +08:00
schema merge 2026-07-23 12:35:10 +08:00
tools feat(admin-config-tool): drop ha/data/ entirely, match real client TLS 2026-07-22 14:50:51 +00:00
worker merge 2026-07-23 12:35:10 +08:00
xceadmin feat(admin-config-tool): drop ha/data/ entirely, match real client TLS 2026-07-22 14:50:51 +00:00
flake.lock chore(nix): repin librtti to fix makeInstance leak-on-init-failure 2026-07-17 09:28:47 +00:00
flake.nix save works 2026-03-04 18:18:53 +08:00
meson.build feat(admin-config-tool): wire xceadmin into meson + nix build 2026-07-22 10:46:45 +00:00
meson.options Merge Go frontend (apiserver + xcecli) into meson build 2026-04-14 11:23:18 +08:00