Joseph Spiker

spikerj closed issue spikerj/spikersoft-issues#590

2026-07-15 18:08:34 +00:00

[Bug][CI][Deploy] cancel-in-progress on master kills DEPLOY jobs — back-to-back merges cancel each other and fixes silently never ship

spikerj commented on issue spikerj/spikersoft-issues#590

2026-07-15 18:07:26 +00:00

[Bug][CI][Deploy] cancel-in-progress on master kills DEPLOY jobs — back-to-back merges cancel each other and fixes silently never ship

Fleet fix up as spikersoft-backend PR #305. Gates cancel-in-progress to ${{ github.ref != 'refs/heads/master' }} on the 14 remaining workflows that still cancelled master deploys (the batch-1…

spikerj commented on issue spikerj/spikersoft-issues#540

2026-07-15 18:04:38 +00:00

[Bug][Infra][CI] SpikerSoft.EventHandlers.Scheduler is built nowhere and deployed nowhere — scheduled tasks (GeoIpUpdate incl.) never run

Progress (not a close): the CI blocker is cleared. The scheduler workflow + stack file exist, but until now every deploy was rejected by its own non-empty guard because SCHEDULER_S3_SECRET_KEY…

spikerj commented on issue spikerj/spikersoft-issues#545

2026-07-15 18:04:38 +00:00

[Security][CI] OpenBao Phase 1: Gitea Actions secrets → AppRole fetch; rotate the committed runner token (epic #543)

Batch 3b merged — spikersoft-backend PR #304 to master (merge d152c626). api/blog-media-processor/scheduler now fetch every secret (registry, deploy, discord, and their *_S3_SECRET_KEY)…

spikerj commented on issue spikerj/spikersoft-issues#545

2026-07-15 18:02:30 +00:00

[Security][CI] OpenBao Phase 1: Gitea Actions secrets → AppRole fetch; rotate the committed runner token (epic #543)

Phase 1 rollout progress (spikersoft-backend)

spikerj commented on issue spikerj/spikersoft-issues#581

2026-07-15 18:02:09 +00:00

[Bug][CI][Deploy] lesson-video-processor has NEVER deployed — the VIDEOS_S3_SECRET_KEY Actions secret was never created, so its own deploy guard rejects every run

Resolved in spikersoft-backend PR #303 (batch 3a, merged to master — commit 13d6ffb3). spikersoft-lesson-video-processor.yml now fetches VIDEOS_S3_SECRET_KEY from OpenBao (`secret/ci/backe…

spikerj closed issue spikerj/spikersoft-issues#581

2026-07-15 18:02:09 +00:00

[Bug][CI][Deploy] lesson-video-processor has NEVER deployed — the VIDEOS_S3_SECRET_KEY Actions secret was never created, so its own deploy guard rejects every run

spikerj pushed to master at spikerj/gitea-actions

2026-07-15 16:57:27 +00:00

a67d0cf3f3 fix(bao-secrets): retry login+fetch with backoff on 429/504/non-JSON (#545/#590-adjacent)

spikerj commented on issue spikerj/spikersoft-issues#544

2026-07-15 16:19:15 +00:00

[Security][Infra] OpenBao Phase 0: swarm stack + init/unseal runbook + Keycloak OIDC (epic #543)

Progress update (2026-07-15) — Phase 0 is deployed and OIDC is live.

Stack deployed: 3-node Raft HA (openbao-1/2/3 on dreamstream1/3/4) behind an nginx router (only the router on…

spikerj commented on issue spikerj/spikersoft-issues#545

2026-07-15 16:19:15 +00:00

[Security][CI] OpenBao Phase 1: Gitea Actions secrets → AppRole fetch; rotate the committed runner token (epic #543)

Progress update (2026-07-15) — Phase 1 underway; first service fully cut over.

bao-secrets composite action (AppRole login → export KV v2 secrets into the job env, masked).
**New…

spikerj pushed to master at spikerj/gitea-actions

2026-07-15 15:50:45 +00:00

db71896903 feat: add bao-secrets composite action (public, no secrets) (#545)

spikerj created repository spikerj/gitea-actions

2026-07-15 15:48:59 +00:00

spikerj commented on issue spikerj/spikersoft-issues#594

2026-07-14 23:02:10 +00:00

[Bug][Backend][Observability] Serilog MinimumLevel is hardcoded to Debug in EventHandlerHostBuilder — EVERY appsettings log-level setting is dead config, and ~2.9M Debug events/day are shipped to Seq

PR up: spikersoft-backend #298 (not yet merged — leaving this open until it lands).

Confirmed the ticket's diagnosis and found it was understated in two ways:

Root mechanism. The…

spikerj opened issue spikerj/spikersoft-issues#604

2026-07-14 23:01:09 +00:00

[Bug][Backend][CodeExecution] GitService stages files by absolute path — 2 unit tests fail on macOS (/var→/private/var symlink), and prod breaks if Git:RepositoryPath is ever a symlinked path

spikerj commented on issue spikerj/spikersoft-issues#530

2026-07-14 22:49:15 +00:00

[Backend][MinIO] GeoLite2 → reference-data bucket; self-provisioning GeoIP (epic #413, resolves GeoIP half of #489)

QA verification — code complete, leaving OPEN pending runtime verification.

The S3 self-provisioning code is fully implemented on current master (HEAD bc55a9ff):

Reader: `GeoIpService.Resol…

spikerj commented on issue spikerj/spikersoft-issues#540

2026-07-14 22:49:15 +00:00

[Bug][Infra][CI] SpikerSoft.EventHandlers.Scheduler is built nowhere and deployed nowhere — scheduled tasks (GeoIpUpdate incl.) never run

QA verification — code complete, leaving OPEN pending deploy verification.

The literal defect ("built nowhere, deployed nowhere") is resolved in code across both repos on current master: -…

spikerj closed issue spikerj/spikersoft-issues#585

2026-07-14 22:48:54 +00:00

[Bug][Prod][AI] Book embeddings are WRITE-ONLY — nothing in production ever reads them; RedisVectorSearchService is registered nowhere

spikerj commented on issue spikerj/spikersoft-issues#585

2026-07-14 22:48:54 +00:00

[Bug][Prod][AI] Book embeddings are WRITE-ONLY — nothing in production ever reads them; RedisVectorSearchService is registered nowhere

QA verification — closing. Both of this ticket's factual claims are now false in current master (HEAD bc55a9ff), resolved by the #568 book-search work (commit f50df33b, verified ancestor of…

spikerj closed issue spikerj/spikersoft-issues#557

2026-07-14 22:48:36 +00:00

[Bug][Backend] BookAnalysisService (ExtractChapters / AnalyzeBookWithLLM) silently ships degraded book data on GPU/model-load failure — same class as quiz-gen #553, different pipeline

spikerj commented on issue spikerj/spikersoft-issues#549

2026-07-14 22:48:36 +00:00

[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)

QA verification — closing. Fix confirmed in current master (spikersoft-angular HEAD 8e392ebd). .gitea/workflows/main.yml now builds Angular exactly once (single pnpm run build at :171),…