stremblay
  • Joined on 2024-02-08
stremblay created pull request NationTech/harmony#333 2026-06-11 18:04:08 +00:00
feat(fleet): device secret access via headless Zitadel→OpenBao JWT-bearer (consolidates #319, #316, #332)
stremblay created branch feat/fleet-device-secret-access in NationTech/harmony 2026-06-11 18:01:42 +00:00
stremblay pushed to feat/fleet-device-secret-access at NationTech/harmony 2026-06-11 18:01:42 +00:00
6515590bac docs(adr-025): reconcile to as-built entity-by-policy design
04f210fc33 fix(examples/openbao): drop removed entities field from OpenbaoSetupScore
e2c5dcfab4 feat(harmony_config): wire OpenBao JWT-bearer rung from env
62471e2edf fix: break harmony_secret↔harmony_zitadel_auth dependency cycle
4ff7dcc9dd Merge fleet device-secret-access (JWT-bearer OpenBao auth) into master
Compare 5 commits »
stremblay created branch feat/cli in NationTech/harmony 2026-06-11 10:08:10 +00:00
stremblay pushed to feat/cli at NationTech/harmony 2026-06-11 10:08:10 +00:00
51c9499c55 docs(adr): add ADR-025 application lifecycle CLI
stremblay created pull request NationTech/harmony#311 2026-05-29 20:47:33 +00:00
feat(example-harmony-sso): example aligned to AGENTS.md minimalism bar
stremblay created branch pr/harmony-sso-example in NationTech/harmony 2026-05-29 19:44:29 +00:00
stremblay pushed to pr/harmony-sso-example at NationTech/harmony 2026-05-29 19:44:29 +00:00
4eee06a1f2 feat(example-harmony-sso): example aligned to AGENTS.md minimalism bar
stremblay created pull request NationTech/harmony#304 2026-05-28 18:13:27 +00:00
feat(harmony_config): unified config layer (ADR-020) — ConfigClient, ConfigClass, masking
stremblay created pull request NationTech/harmony#303 2026-05-28 18:10:57 +00:00
feat(harmony): harmony-sso deploy hardening (Zitadel + OpenBao Scores)
stremblay created pull request NationTech/harmony#302 2026-05-28 18:09:56 +00:00
feat(harmony_secret): SSO auth hardening — silent refresh, renewal, namespacing
stremblay created branch pr/harmony-sso-deploy-hardening in NationTech/harmony 2026-05-28 17:48:54 +00:00
stremblay pushed to pr/harmony-sso-deploy-hardening at NationTech/harmony 2026-05-28 17:48:54 +00:00
d0fff742f4 feat(harmony): harmony-sso deploy hardening (Zitadel + OpenBao Scores)
stremblay created branch pr/harmony-config-layer in NationTech/harmony 2026-05-28 17:48:53 +00:00
stremblay pushed to pr/harmony-config-layer at NationTech/harmony 2026-05-28 17:48:53 +00:00
aa709aa68b fix(harmony_config): migrate example-harmony-sso call site to ConfigClient
08b55ee36d feat(harmony_config): unified config layer — ConfigClient, ConfigClass, masking
Compare 2 commits »
stremblay created branch pr/harmony-secret-auth in NationTech/harmony 2026-05-28 17:48:52 +00:00
stremblay pushed to pr/harmony-secret-auth at NationTech/harmony 2026-05-28 17:48:52 +00:00
9eb6bda257 feat(harmony_secret): SSO auth hardening — silent refresh, renewal, namespacing
stremblay pushed to feat/unified-config-and-secrets at NationTech/harmony 2026-05-28 17:07:55 +00:00
2a556ed6d8 docs(config): warn against #[config(secret)] + #[serde(rename)]
aba36b1b69 refactor(config): drop dead APIs, log swallowed store errors, fix stale docs
820c37674b docs(harmony_sso): correct audit pod-restart + jq attribution recipe
effe0cfcd5 fix(harmony_secret): validate cached token via lookup-self, not lookup
389f5cffb5 fix(openbao): declare audit device in server config, not via runtime API
Compare 10 commits »
stremblay created branch feat/unified-config-and-secrets in NationTech/harmony 2026-05-27 20:05:30 +00:00
stremblay pushed to feat/unified-config-and-secrets at NationTech/harmony 2026-05-27 20:05:30 +00:00
19947ef1a5 feat(harmony_secret): renew-self on cached token + auto-open device-flow browser
c3ff720ea1 fix(harmony_config): echo * per keystroke on Secret-class password prompts
576babf6b1 feat(harmony_config): per-class secret masking (input + output)
3e9f952bc5 feat(harmony_config): OpenbaoConnection overrides remove env mutation from example
ee84b12cfc feat(harmony_config): ConfigManagerBuilder for opt-out customization
Compare 10 commits »