[DRAFT] fix(auth): harden public infra routes #41

Open
bluejay wants to merge 1 commits from codex/s60-cx3 into main
Owner

Draft Cx-3 lane for Sprint 60 bluejay-infra auth-safe hardening.

Hard constraints preserved:

  • no new public host or route
  • no Auth:Enabled flip
  • no apps/monitoring changes
  • public routes now carry explicit Method() predicates
  • healthz probe contracts are visible in manifests

Proof:

  • focused Cx-3 lint: 4/4 passed
  • full lint baseline remains blocked by four pre-existing failures (Updater sibling public POST expectation, fc-devicemgmt missing argocd-application.yaml, github-runner-sharedpos replicas=1)
Draft Cx-3 lane for Sprint 60 bluejay-infra auth-safe hardening. Hard constraints preserved: - no new public host or route - no Auth:Enabled flip - no apps/monitoring changes - public routes now carry explicit Method() predicates - healthz probe contracts are visible in manifests Proof: - focused Cx-3 lint: 4/4 passed - full lint baseline remains blocked by four pre-existing failures (Updater sibling public POST expectation, fc-devicemgmt missing argocd-application.yaml, github-runner-sharedpos replicas=1)
bluejay added 1 commit 2026-06-04 18:21:14 +00:00
bluejay changed title from fix(auth): harden public infra routes to [DRAFT] fix(auth): harden public infra routes 2026-06-04 18:21:33 +00:00
This pull request has changes conflicting with the target branch.
  • tests/bluejay-infra-lint/FleetManifestLintTests.cs
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin codex/s60-cx3:codex/s60-cx3
git checkout codex/s60-cx3
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: bluejay/bluejay-infra#41