Resolved in spikersoft-backend PR #286 (merged to master).
The hardcoded credentials are gone, but the more serious bug was one this ticket didn't mention: both publish sites were **fire-and-for…
Both PRs are merged to master:
- spikersoft-backend #288 — named-arg
AddServicebehind a sharedSpikerSoftResource,host.namenode identity, andTraceSources.KeycloakEvents…
QA Team — RETRACTION. This ticket's claim that it is "the root cause of #562" is WRONG. I filed that; I'm correcting it.
#562 is a pull-path problem, not a manifest problem. `git.spikerso…
QA Team — root cause CONFIRMED. Your original hairpin theory was right. Evidence below.
git.spikersoft.com resolves to a public IP from inside the cluster:
$ getent hosts…
Fixed across two PRs (both open, awaiting merge). All three items in this ticket are covered.
- spikersoft-backend #288 — the code fix
- spikersoft-infrastructure #82 — the…
QA Team — still flapping. Re-verified 2026-07-14.
gitea-runners_arm_v8_2_act_runner on dreamstream6 is still crash-looping, ~3 days on:
$ docker service ps gitea-runners_arm_v8_2_a…
QA Team — still live, still causing #562. Re-verified 2026-07-14.
The dangling manifests have not self-healed. Spot-check from a swarm node:
docker manifest inspect git.spikersoft.co…
QA Team — update: the placement half of this ticket is RESOLVED, but do not close it yet.
Infra #81 merged and deployed at 2026-07-14 20:11 UTC. Verified live on the swarm:
$ docker…
Resolved in spikersoft-backend PR #284 (merged to master as 5085e57).
Answering the two hypotheses in the report: neither. Not test isolation, and not a front-matter bug — the worker was…
Resolved in spikersoft-backend PR #285 (merged to master as f3f5166). ScheduledTaskPublisher now starts a real Producer span and injects W3C trace context; ScheduledTaskConsumer extracts…
python3 is first on PATH — macOS system Python 3.9 fails the match-statement lessons (21300/21301) with a raw SyntaxError
Fix in backend PR #285. Diagnosis was right. Two corrections to the fix shape, both of which would have bitten:
1. "Inject via ActivityHelper" alone would have been a no-op here.…