harmony

Use entity policies for secret store access instead of through jwt

Run Check Script / check (pull_request) Failing after 53s

Details

#332 opened 2026-06-07 16:55:07 +00:00 by reda

docs/fleet-secrets-device-access

feat/jwt-bearer-openbao-auth

feat(fleet): graceful roll-forward upgrade + container-ID identity (Ch5)

Run Check Script / check (pull_request) Successful in 2m36s

Details

#331 opened 2026-06-05 01:35:16 +00:00 by johnride

feat/fleet-ch4-agent-upgrade

feat/fleet-ch5-graceful-deploy-upgrade

feat(fleet): agent self-upgrade + auto-rollback protocol, ADR-022 (Ch4)

Run Check Script / check (pull_request) Successful in 2m35s

Details

#330 opened 2026-06-05 01:35:00 +00:00 by johnride

feat/fleet-ch3-log-streaming

feat/fleet-ch4-agent-upgrade

feat(fleet-operator): live-tail device logs via 2s frontend polling (Ch3)

Run Check Script / check (pull_request) Successful in 2m34s

Details

#329 opened 2026-06-05 01:34:36 +00:00 by johnride

feat/fleet-ch2-operator-recovery

feat/fleet-ch3-log-streaming

feat(fleet-operator): aggregator recovery signal + orphan GC + recovery e2e (Ch2)

Run Check Script / check (pull_request) Failing after 52s

Details

#328 opened 2026-06-05 01:34:12 +00:00 by johnride

feat/fleet-device-exec-logs

feat/fleet-ch2-operator-recovery

1

feat(fleet-auth): unify Zitadel role extraction + request roles via scope (Ch1)

Run Check Script / check (pull_request) Successful in 2m31s

Details

#327 by johnride was merged 2026-06-09 19:44:32 +00:00

feat/fleet-device-exec-logs

feat/fleet-ch1-role-gate-followups

1

Add claims fields to struct

Run Check Script / check (pull_request) Successful in 2m15s

Details

#326 by reda was closed 2026-06-03 11:30:58 +00:00

docs/fleet-secrets-device-access

feat/add-claims-for-openbao

add Zitadel JWT-bearer auth rung to OpenbaoSecretStore

Run Check Script / check (pull_request) Successful in 2m17s

Details

#325 by reda was closed 2026-06-03 11:30:52 +00:00

docs/fleet-secrets-device-access

feat/jwt-bearer-openbao-auth

Move ZitadelJwt to stand alone module

Run Check Script / check (pull_request) Failing after 50s

Details

#324 by reda was closed 2026-06-03 11:30:44 +00:00

docs/fleet-secrets-device-access

refactor/move-zitadel-jwt-to-module

fix(fleet-operator): dashboard UI bugs (mostly CSP-blocked inline JS)

Run Check Script / check (pull_request) Successful in 2m15s

Details

#323 by johnride was merged 2026-06-02 09:45:01 +00:00

master

feat/fleet-operator-real-data

feat(fleet-operator): real dashboard data from kube CRs + NATS KV

Run Check Script / check (pull_request) Successful in 2m17s

Details

#322 by johnride was merged 2026-06-02 03:48:30 +00:00

master

feat/fleet-operator-real-data

1

feat(fleet): expose operator UI via cert-manager TLS ingress

Run Check Script / check (pull_request) Successful in 2m15s

Details

#321 by johnride was merged 2026-06-01 20:26:50 +00:00

master

feat/fleet-operator-ui-ingress

2

chore: Refactor FLEET_OPERATOR_CREDENTIALS string that appeared in multiple places into a constant shared across all consumers

Run Check Script / check (pull_request) Successful in 2m14s

Details

#320 by johnride was merged 2026-06-01 19:09:24 +00:00

master

chore/fleet_operator_creds_constant

docs: ADR on how to handle securely fleet device secrets with openbao + zitadel SSO

Run Check Script / check (pull_request) Successful in 2m16s

Details

#319 opened 2026-06-01 18:59:16 +00:00 by johnride

master

docs/fleet-secrets-device-access

chore/rename-release-to-publish

Run Check Script / check (pull_request) Successful in 2m16s

Details

#318 by johnride was closed 2026-06-01 15:51:48 +00:00

master

chore/rename-release-to-publish

1

fix: fleet operator chart name was conflicting with the container name. Append -chart to the chart name

Run Check Script / check (pull_request) Successful in 2m16s

Details

#317 by johnride was merged 2026-06-01 15:42:57 +00:00

chore/rename-release-to-publish

fix/fleet-operator-chart-name

Allow redirect url path when user signs in

Run Check Script / check (pull_request) Failing after 51s

Details

#316 opened 2026-05-31 19:01:32 +00:00 by reda

master

feat/auth-add-next-url-redirect

2 conflicting files

refactor(fleet-deploy): rename harmony-fleet-release to harmony-fleet-publish

Run Check Script / check (pull_request) Successful in 2m27s

Details

#315 by johnride was merged 2026-06-01 15:42:44 +00:00

refactor/config-namespace-env-var

chore/rename-release-to-publish

refactor(fleet-deploy): rename HARMONY_SECRET_NAMESPACE to HARMONY_CONFIG_NAMESPACE

Run Check Script / check (pull_request) Successful in 2m26s

Details

#314 by johnride was merged 2026-06-01 15:42:35 +00:00

feat/fleet-staging-openbao

refactor/config-namespace-env-var

feat/fleet-staging-openbao

Run Check Script / check (pull_request) Successful in 2m17s

Details

#313 opened 2026-05-30 02:41:26 +00:00 by johnride

master

feat/fleet-staging-openbao

3 conflicting files