b23794207d
feat(dev-config): add missing pieces
c1a8cefa67
feat(bin/build-faker): drop it
eaca596b3b
feat(bin/statcheck-web): add support for mTLS
bc752e5e5c
feat(web/auth): add mTLS middleware with arbitrary role support
f90b15873c
feat(web/certs): init loading of mTLS certificates
[Tracking Issue] Secret management at scale
OfBorg done in the-distro/infra#162. Next is PostgreSQL for Hydra. Terraform S3 requires a privileged sort of API to emit scoped keys which we do not have right now.…
fb8eea1057
feat(services/ofborg/rabbitmq): pre-provision accounts, vhosts and permissions
e02af55beb
feat(services/ofborg): add client mTLS for RabbitMQ via Vault
54bf48b1c9
feat(terraform/vault): add RabbitMQ server role
27e17b3f34
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
6774129851
feat(hosts/bagel-box): enable secrets-agent on this machine
feat: vault agent enablement on OfBorg
fb8eea1057
feat(services/ofborg/rabbitmq): pre-provision accounts, vhosts and permissions
e02af55beb
feat(services/ofborg): add client mTLS for RabbitMQ via Vault
54bf48b1c9
feat(terraform/vault): add RabbitMQ server role
27e17b3f34
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
6774129851
feat(hosts/bagel-box): enable secrets-agent on this machine
6466155768
feat(services/ofborg/rabbitmq): pre-provision accounts, vhosts and permissions
ab87514fe5
feat(services/ofborg): add client mTLS for RabbitMQ via Vault
4dab362c87
feat(terraform/vault): add RabbitMQ server role
3a7ae85502
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
e715a58d46
feat(hosts/bagel-box): enable secrets-agent on this machine
207f6c1393
refactor(vcs/generic): introduce ChangeStatus and remove CommitStatus
6eea6391cf
feat(contrib/frontend/gerrit): design a simple status & check frontend for Gerrit
e835be0bf6
feat(statcheck): introduce status & checks server
a27b48e617
refactor(vcs/generic): promote Gerrit checks as the generic variant
22111b3847
chore(devshell): add event streaming & VCS filter in the dev Procfile
89f60cfde1
refactor(vcs/generic): introduce ChangeStatus and remove CommitStatus
ddbbb8a910
feat(contrib/frontend/gerrit): design a simple status & check frontend for Gerrit
74e57749fe
feat(statcheck): introduce status & checks server
089c9192fd
refactor(vcs/generic): promote Gerrit checks as the generic variant
fee0f8c6e3
chore(devshell): add event streaming & VCS filter in the dev Procfile
0b190209dd
feat(services/ofborg): add client mTLS for RabbitMQ via Vault
5a0cd6f1cf
feat(terraform/vault): add RabbitMQ server role
c04781cf39
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
e9753ba650
feat(hosts/bagel-box): enable secrets-agent on this machine
a453595de2
feat(secrets): init the bagel-box vault token
82c12dfa67
refactor(vcs/generic): introduce ChangeStatus and remove CommitStatus
c930f8a2e7
feat(contrib/frontend/gerrit): design a simple status & check frontend for Gerrit
7dc6afc24f
feat(statcheck): introduce status & checks server
a915b664fb
refactor(vcs/generic): promote Gerrit checks as the generic variant
7e84133ad0
chore(devshell): add event streaming & VCS filter in the dev Procfile
582a893aed
refactor(vcs/generic): introduce ChangeStatus and remove CommitStatus
2f8d0160f4
feat(contrib/frontend/gerrit): design a simple status & check frontend for Gerrit
378b2a495e
feat(statcheck): introduce status & checks server
1ea8833954
refactor(vcs/generic): promote Gerrit checks as the generic variant
bcc8d1600d
chore(devshell): add event streaming & VCS filter in the dev Procfile
1f634346eb
feat(terraform/vault): add RabbitMQ server role
b107091d50
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
21fca37bce
feat(hosts/bagel-box): enable secrets-agent on this machine
6ba24ad1cb
feat(terraform/vault): add RabbitMQ server role
61aed32221
fix(terraform/vault/sub-ca): policy path calculation requires path resource IDs
a06e7b9747
feat(hosts/bagel-box): enable secrets-agent on this machine
c2b1d29cb6
feat(secrets): init the bagel-box vault token
9072613928
feat(services/secrets-agent): init
feat: vault agent enablement
517774270e
feat(systems): inject systemd-openbao project
3b9f1e24a6
feat(systems): trust our infra chain on all systems