Commit Graph
7 Commits
Author SHA1 Message Date
vpengops b30b2a73f1 docs: gardening after APISIX rewrite + production deploy
STATUS/README inventory updated (APISIX deployed at
apigw.knownelement.com); JOURNAL section 20 (rewrite + deploy).

Umbrella: https://projects.knownelement.com/issues/632
2026-09-07 10:02:16 -05:00
vpengops 26f335ed5a refactor(scripts): grind-stack fidelity - readonly rootfs, chown, sbom cmd
- emulate the Cloudron 8 app contract: --read-only + /tmp,/run tmpfs
- chown /app/data to the image uid (localstorage contract)
- wire the previously unreachable sbom subcommand into dispatch
- probe containers use --entrypoint (images wrap start.sh)

Umbrella: https://projects.knownelement.com/issues/632
2026-09-07 10:02:16 -05:00
vpengops 17a3e8e9c0 fix(api-gateway): rewrite APISIX package and deploy to production
The 09-01 package referenced a nonexistent Cloudron etcd addon and an
unpinned base image. Rewritten: digest-pinned apisix 3.18.0 with an
embedded single-node etcd, loopback-only Admin API, and read-only
rootfs support. Deployed live at apigw.knownelement.com (healthz 200).

Umbrella: https://projects.knownelement.com/issues/632
2026-09-07 10:02:09 -05:00
vpengops d8bc507741 feat: add EmonCMS to packaging set (Monitoring) [#907]
Founder direction. Active upstream (AGPL, official docker image
openenergymonitor/emoncms 11.6.10). AUTH GATE: local-only (no
OIDC/LDAP/SAML in core) - package does NOT ship until the founder
explicitly accepts local auth, per policy. Also restored wireviz-web
to GitUrlList (over-pruned during the wireviz CLI kill - it is a
shipped package). Set: 36 apps, 18 packaged.
2026-09-07 07:26:20 -05:00
vpengops 48f122da49 docs: sync ruling wave (kills, Keycloak SAML, keeps) + tables rebuilt [#632]
Closed: Tirreno (wazuh), Rundeck + HyperSwitch + SigNoz (sso-tax/
local-only). Kept: Database-Gateway + Easy-Gate (founder: on
Cloudron), Docassemble GO (native LDAP confirmed). Fleet GO -
Keycloak SAML IdP clears auth risk. KillBill recommended Cloudron-
behind-APISIX. OpenCAD evaluated: org fully archived - declined,
awaiting ruling. GitUrlList 40->35 (rundeck, hyperswitch, signoz,
tirreno, wireviz CLI); category tables rebuilt 18/35.
2026-09-06 20:32:51 -05:00
vpengops 72e932e151 docs: retire questions file - questions via Redmine, discussion via Discourse
Founder ruling: all questions go through Redmine (notes on the
relevant ticket, or umbrella #632), longer questions and durable
decision discussion through Discourse (community.turnsys.com).
Questions migrated to #639/#651 (netbird scope), #666 (SigNoz
reopen), #834 (SBOM format); Discourse API key provisioning
requested on #632.
2026-09-06 20:13:18 -05:00
vpengops e5a758ec6e feat: VpEngOps identity + SBOM/GLPI plans wired into lifecycle [#834]
Commits now authored as VpEngOps (vault: creds/vpengops-vpentops);
reachableceo is the human personal account. grind-stack gains `sbom`
(CycloneDX via pinned syft container, run before sweep) per #834;
GLPI catalog entries planned in #835 gated on #801 write access.
AGENTS.md packaging steps extended; questions-v1.md opened for the
founder (netbird scope, SigNoz reopen, SBOM format).
2026-09-06 20:08:41 -05:00