Andrew Stoltz
061a0d61a8
fix(gx10): point php autodns at gx10 vip
2026-06-18 17:34:07 -05:00
Andrew Stoltz
ae6dfe9144
deploy: bump GX10 PHP and MySQL bypass proof images
2026-06-18 17:22:49 -05:00
Andrew Stoltz
9cef99739a
security: add tenant allowlist and WAF canary proof
2026-06-18 16:21:08 -05:00
Robot
bd050c3d9b
deploy(devicemgmt): roll command result hotfix
2026-06-18 15:02:50 -05:00
Robot
a41b22bca4
deploy(devicemgmt): roll APK artifact endpoint image
2026-06-18 14:39:48 -05:00
Andrew Stoltz
38590d3d5a
deploy(knowledge): roll qwen3 canary profile image
2026-06-18 14:21:40 -05:00
Andrew Stoltz
27815cefca
deploy(knowledge): roll catalog filter image
2026-06-18 14:12:04 -05:00
Andrew Stoltz
6e0d33b5b9
deploy(tenant): add bluejay.dev edge controls
2026-06-18 12:56:41 -05:00
Andrew Stoltz
b015c8a8e1
deploy(updater): roll feed signed manifest image
2026-06-18 12:42:42 -05:00
Andrew Stoltz
d51e55c78d
deploy(updater): roll corrected GX10 containment image
2026-06-18 11:26:01 -05:00
Robot
f78e6747b4
deploy(apple-mdm): route scep to noc1 ca
...
Adds the GX10 /scep route to the noc1 Apple MDM SCEP CA without exposing NanoHUB APIs.
2026-06-18 11:23:00 -05:00
Andrew Stoltz
e543018bdc
deploy(updater): recover GX10 image after packaging failure
2026-06-18 11:20:11 -05:00
Andrew Stoltz
d0c9717d90
deploy(updater): roll GX10 containment image
2026-06-18 11:08:12 -05:00
Robot
aba9d7c995
deploy(gx10): pin DeviceManagement MDM-N8 image
2026-06-18 09:45:14 -05:00
Robot
a56e98422f
deploy(gx10): wire Apple MDM runtime secret keys
2026-06-18 08:41:44 -05:00
Robot
27600b8b99
deploy(gx10): roll DeviceManagement InstallProfile payloads
2026-06-18 07:55:48 -05:00
Robot
9929a91812
deploy(gx10): roll DeviceManagement MDM policy payloads
2026-06-18 07:03:58 -05:00
Robot
5af4d9077a
deploy(gx10): roll DeviceManagement readiness status
2026-06-18 05:55:52 -05:00
Robot
efa0434b9b
deploy(gx10): roll DeviceManagement signed profiles
2026-06-18 05:38:01 -05:00
Robot
ad709e2317
deploy(gx10): configure DeviceManagement Apple MDM trust anchor
2026-06-18 04:58:06 -05:00
Robot
f636b5092c
deploy(gx10): roll DeviceManagement MDM profile payloads
2026-06-18 04:56:05 -05:00
Robot
82d9d66f62
deploy(gx10): roll DeviceManagement app catalog endpoint
2026-06-18 01:14:54 -05:00
Robot
8b1f8df3dd
deploy(gx10): add DeviceManagement enrollment profile endpoint
2026-06-18 00:22:03 -05:00
Andrew Stoltz
65af283aea
deploy(updater): roll public exposure fix-forward image
2026-06-17 23:58:54 -05:00
Andrew Stoltz
b7d34da3d6
deploy(updater): gate public UpdateCenter host
2026-06-17 23:47:18 -05:00
Robot
63fde0a593
deploy(gx10): enable DeviceManagement NanoHUB bridge
2026-06-17 23:45:55 -05:00
Robot
764e4a8f49
deploy(gx10): use complete DeviceManagement NanoHUB image
2026-06-17 23:43:38 -05:00
Robot
3bdb9eee81
deploy(gx10): bump DeviceManagement web for NanoHUB bridge
2026-06-17 23:38:25 -05:00
Robot
83db2bbe6b
deploy(gx10): add NanoHUB Apple MDM workload
2026-06-17 22:45:10 -05:00
Andrew Stoltz
c32327cdee
deploy(devicemgmt): roll responsive enrollment page on GX10
2026-06-17 21:45:06 -05:00
Andrew Stoltz
818463562e
deploy(devicemgmt): roll enrollment admin polish on GX10
2026-06-17 21:26:41 -05:00
Robot
f821c0e661
fc-devicemgmt: pin adopted GX10 prune hotpatch image
2026-06-17 20:51:58 -05:00
Andrew Stoltz
ee14d3a2d0
whc4: front bluejay tenant route with CRS WAF
2026-06-17 19:54:26 -05:00
Andrew Stoltz
193b167d10
whc4: quiet PHP WAF health probes
2026-06-17 19:27:02 -05:00
Andrew Stoltz
ef782ed56d
whc4: front PHP route with CRS WAF
2026-06-17 19:24:36 -05:00
Andrew Stoltz
41fb117ff0
whc4: deploy PHP tenant edge controls
2026-06-17 18:51:38 -05:00
Andrew Stoltz
ca1b1e8a3a
sec4: roll MySQL and PHP storage measurement images
2026-06-17 17:57:16 -05:00
Andrew Stoltz
51572de3b2
sec4: roll MySQL and PHP runtime-limit images
2026-06-17 15:45:24 -05:00
Andrew Stoltz
a07aae9487
sec4: bump MySQL and PHP web rate-limit images
2026-06-17 14:40:32 -05:00
Codex
cc6399c4f3
Bump GX10 DeviceManagement web image
2026-06-17 14:08:07 -05:00
Andrew Stoltz
a0d79eeb8c
hm4: own hosting operator CRDs and RBAC
2026-06-17 13:47:40 -05:00
Andrew Stoltz
4f7a5f3d20
fix(openbao): use arm64-resolving :2.5.5 tag (GX10 aarch64; amd64 digest won't pull)
...
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-17 13:42:17 -05:00
Andrew Stoltz
4aad74a8aa
feat(openbao): GX10 prod OpenBao StatefulSet (ADR-206 Phase-1)
...
Integrated-Raft single node, transit auto-unseal -> noc1 seal-bao
(10.0.56.10:8210, key gx10-unseal). Non-root (uid 100/gid 1000), internal
step-ca TLS listener. openbao-tls + openbao-seal secrets created out-of-band
(seal token + listener key never in git). local-path 2Gi Raft PVC.
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-17 13:41:02 -05:00
Andrew Stoltz
44608acae2
hm1: add GX10 MCP gateway wiring
2026-06-17 13:15:36 -05:00
Andrew Stoltz
54179a6c4c
fix(chat): roll fc-chat to chatfix-54fd549 (arm64) — /tickets redirect + send-button recovery
...
Bump fc-chat image to localhost/fc-chat-web:v20260617-chatfix-54fd549, built
for arm64 on GX10 from Chat master 54fd549 + Common 0a4174d:
- OperatorRouteRedirect bounces ANY unauthorized path to sign-in (was: only
operator/ops-chat prefixes, so /tickets sat on "Redirecting..." forever)
- FcAiChat send button stays clickable as Cancel while generating + closes
the reconnect-recovery gap so it re-enables after a circuit drop
Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com >
2026-06-17 12:49:35 -05:00
Andrew Stoltz
dfaae3cbce
deploy(segmentdisplay): roll non-root GX10 image
2026-06-17 10:52:19 -05:00
Andrew Stoltz
0020aa97ce
Pin GX10 Network web SEC-5 image
2026-06-17 10:05:12 -05:00
Andrew Stoltz
b353058b47
gx10: deploy hardened MessageBoard web image
2026-06-17 09:41:56 -05:00
Andrew Stoltz
435e60a3f0
Deploy MenuBoard SEC-5 non-root image to GX10
2026-06-17 09:13:01 -05:00
Andrew Stoltz
ed32a65873
Deploy Media SEC-5 non-root image to GX10
2026-06-17 08:47:40 -05:00
