T

ci / audit (push) Failing after 39s

Details

[#385 ] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN

ED25519 user/host CA keys generated; enableSSHCA on JWK provisioner;
24h root principal cert issued and used to ssh into sectestbed 5104
(passwordless, no static key). Host onboarding = 1 file + reload.
Rollout role queued in KNELIAC. Public CA key committed (private keys
never leave tsys-ca).
https://projects.knownelement.com/issues/385

2026-09-05 17:08:16 -05:00

.crush

[#385 ] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN

2026-09-05 17:08:16 -05:00

.gitea/workflows

[#784 ] add fleet CI workflow (shellcheck + secret scan + rule audit)

2026-09-05 06:10:16 -05:00

docker

[#800 ] prod step-ca ACME endpoint LIVE on tsys-ca (fleet-root chain); http-01 validation fetch open

2026-09-05 09:35:25 -05:00

docs

[#385 ] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN

2026-09-05 17:08:16 -05:00

legacy-tsys-ca

feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769 ][#783 ]

2026-09-04 07:01:46 -05:00

scripts

[#784 ] framework: set-e-safe cn_count fallback (|| true, not bare removal)

2026-09-05 07:29:02 -05:00

ssh-ca

[#385 ] SSH CA live on fleet step-ca: user cert issuance + e2e ssh auth PROVEN

2026-09-05 17:08:16 -05:00

tests

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

.env.example

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

.shellcheckrc

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

AGENTS.md

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

artifact-mirror.sh

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

ca-init.sh

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

issue-cert.sh

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

LICENSE

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

Makefile

feat: port legacy TSYS-CA (admin-code PKI + tsys-bits) [#769 ][#783 ]

2026-09-04 07:01:46 -05:00

questions-v1.md

[#697 ] point questions file at Redmine (model retired)

2026-09-05 05:33:18 -05:00

README.md

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

selftest.sh

[#784 ] CI gate alignment: prune legacy/agent dirs from shellcheck; fix SC2015/SC2002

2026-09-05 06:21:17 -05:00

STATUS.md

chore: initial import from KNEL/PFVCluster@041d311 [#769 ]

2026-09-03 21:30:47 -05:00

README.md

ca

Docs live on Discourse — this repo is the executable source of truth. Topic: https://community.turnsys.com/t/327 Redmine: https://projects.knownelement.com/issues/697 · Split from KNEL/PFVCluster@041d311 per #769

Fleet CA on tsys-ca: init/issue/selftest, fleet TLS rollout, HTTP artifact mirror (pinned wazuh-agent debs + SHA256SUMS). Roadmap: ACME endpoint, k8s CA integration, SSH certificates. [#697]

Layout

scripts/ — rule engine + hooks (see bash scripts/check-rules.sh --fast)
(imported content at repo root, mirroring its PFVCluster path layout)

Provenance

Code imported from KNEL/PFVCluster (041d311); full git history retained in PFVCluster. Enforcement layer copied per ADOPTING.md. IaC consumers: KNEL/KNELIAC references this repo.