myxce/.kiro
Rongsong Shen a2bf160cc3
docs(spec): peer-authentication-hardening brief; production mode accepts user requests only from the apiserver
Promotes the roadmap item to a brief: production/test mode on the
controller, authenticated roles at join, per-role request allowlist with
user requests only from the apiserver, an admin role for xceadmin. Lays
out the open decisions on secret type (cluster key / per-role keys / PKI)
and key distribution (files / token enrolment), with a phased
recommendation. project-config Req 3.13 applies to test mode only.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-13 04:25:17 +00:00
..
reviews docs(review): project and spec review: conflicts, code gaps, priorities 2026-10-10 08:11:08 +00:00
settings finalize configuration replication 2026-06-09 16:40:13 +08:00
specs docs(spec): peer-authentication-hardening brief; production mode accepts user requests only from the apiserver 2026-10-13 04:25:17 +00:00
steering docs(spec): peer-authentication-hardening brief; production mode accepts user requests only from the apiserver 2026-10-13 04:25:17 +00:00