bluejay/bluejay-infra
1
0
Fork 0
Code Issues Pull Requests 14 Actions Packages Projects Releases Wiki Activity

Draft: Sprint 62 Cx-10 broader exposure hardening #43

Merged
bluejay merged 2 commits from codex/s62-cx10 into main 2026-06-05 02:51:37 +00:00
Conversation 0 Commits 2 Files Changed 22 +535 -29
bluejay commented 2026-06-04 23:22:35 +00:00
Owner
Copy Link

Sprint 62 Cx-10 carryforward from the unmerged Sprint 61 hardening branch.

Summary:

  • Carries the broader app exposure hardening from codex/s61-cx10 onto current origin/main.
  • Adds/keeps healthz/probe annotations and safe-exposure comments across the GitOps app set.
  • Extends BluejayInfraLint.Tests to cover the hardening rules.

Validation:

  • git diff --check origin/main...HEAD passed.
  • dotnet.exe test tests/bluejay-infra-lint/BluejayInfraLint.Tests.csproj --nologo passed: 100/100.

Live side action performed outside this PR:

  • pfSense bsnmpd was found stopped, restarted through the documented admin diag path, and verified listening on UDP 161 as pid 44560.

Safety:

  • No public exposure flip.
  • No OIDC enforcement flip.
  • No SignalControl/piez/pirelay signal-plane edits.
Sprint 62 Cx-10 carryforward from the unmerged Sprint 61 hardening branch. Summary: - Carries the broader app exposure hardening from `codex/s61-cx10` onto current `origin/main`. - Adds/keeps healthz/probe annotations and safe-exposure comments across the GitOps app set. - Extends `BluejayInfraLint.Tests` to cover the hardening rules. Validation: - `git diff --check origin/main...HEAD` passed. - `dotnet.exe test tests/bluejay-infra-lint/BluejayInfraLint.Tests.csproj --nologo` passed: 100/100. Live side action performed outside this PR: - pfSense `bsnmpd` was found stopped, restarted through the documented admin diag path, and verified listening on UDP 161 as pid 44560. Safety: - No public exposure flip. - No OIDC enforcement flip. - No SignalControl/piez/pirelay signal-plane edits.
bluejay added 2 commits 2026-06-04 23:22:35 +00:00
test(lint): reconcile baseline infra assertions 417d3830ae
feat(infra): prestage broader app exposure hardening c4b08f41ab
bluejay merged commit ac0f665323 into main 2026-06-05 02:51:37 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
No items
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
bluejay
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bluejay/bluejay-infra#43
Delete Branch "codex/s62-cx10"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?