KNEL/KNELCa
9
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
17 Commits 3 Branches 0 Tags
main
Commit Graph
3 Commits
Author SHA1 Message Date
ic-builder 99a634e944 [ca] fix SC2015 for CI shellcheck 0.9
ci / audit (pull_request) Successful in 23s
Details 
Unambiguous if-form for the two-condition guard. CI (node:20-bookworm,
Debian shellcheck 0.9) flags the A && B || C pattern where the koalaman
stable docker path passed. No behavior change.

CI evidence: https://git.knownelement.com/KNEL/ca/actions/runs/117821
Ticket: https://projects.knownelement.com/issues/784
 2026-09-06 09:24:59 -05:00
mrcharles 6e4f794b03 [#800] prod step-ca ACME endpoint LIVE on tsys-ca (fleet-root chain); http-01 validation fetch open
ci / audit (push) Failing after 1m1s
Details 
compose.yaml: host networking (bridge+embedded-DNS broke rooted-name
lookups), :8443 via ca.json address, image digest-pinned; init-stepca.sh:
scaffold + ECDSA-P256 intermediate signed by /root/ca-root fleet root
(verified), ACME provisioner, managed password. Directory serving
RFC8555 on tailnet. OPEN: step-ca validation GET fails instantly with
zero dial attempts (authz says could-not-connect) — bisected caps,
read_only, bridge vs host, container DNS. Debug continues next run
(GODEBUG=netdns=2 + strace plan).
https://projects.knownelement.com/issues/800
 2026-09-05 09:35:25 -05:00
mrcharles a66dbaf20f feat(ca): step-ca ACME pilot — mechanics verified e2e with lego [#697] 
test-root container pilot (loopback+bridge binds); HTTP-01 issuance
proven; phase design for prod ACME/k8s/SSH on t/327#2.

https://community.turnsys.com/t/327/2
 2026-09-04 17:30:39 -05:00