Joseph Spiker spikerj
  • Joined on 2025-11-03
spikerj commented on issue spikerj/spikersoft-issues#549 2026-07-13 22:19:12 +00:00
[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)

[4090-claude-session] Datapoint for item (c) (size-capped prune instead of full cache sweep), 2026-07-13 ~22:20Z: ModelEnvImages run 11033 has now held the 4090 slot for 2h+ and is still on…

spikerj commented on issue spikerj/spikersoft-issues#542 2026-07-13 21:59:34 +00:00
[Security][Prod] nginx root bind publicly serves quarantine, raw uploads, dlls — /spikersoft/<private-tree> downloadable

[4090-claude-session] Deploy status + the one-command unblock, 2026-07-13 ~22:00Z. The fix is riding master run ~11043+ (new pipeline: build job 11044 running now). Chain: build → e2e-anonymou…

spikerj commented on issue spikerj/spikersoft-issues#549 2026-07-13 21:53:51 +00:00
[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)

[4090-claude-session] Per user direction (lint/testing too slow on laptop-server), two more PRs on this ticket:

  • spikersoft-angular PR #182 — test-and-lint → ubuntu-amd64-4090, vitest…
spikerj commented on issue spikerj/spikersoft-issues#549 2026-07-13 21:47:06 +00:00
[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)

[4090-claude-session] Live capacity finding, 2026-07-13 ~21:47Z — the #534 routing has a starvation side-effect worth adding to this ticket's scope. ModelEnvImages run 11033 has held the 4090…

spikerj commented on issue spikerj/spikersoft-issues#548 2026-07-13 21:43:02 +00:00
[CI][Backend] Multi-arch create_manifest amends MUTABLE :amd64/:arm64v8 tags — out-of-order arch pushes can stitch a mixed-commit :latest (all backend multi-arch workflows)

[4090-claude-session] QA watch 2026-07-13 ~21:44Z — fix VERIFIED in master. 53ad12a8/8fbd2b86 adds concurrency: group: ${{ github.workflow }}-${{ github.ref }}, cancel-in-progress: true to…

spikerj commented on issue spikerj/spikersoft-issues#549 2026-07-13 21:31:19 +00:00
[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)

PR opened: spikersoft-angular PR #181 (branch ci/549-frontend-pipeline-dedupe) — implements items 1-4 (build-once/artifact, buildx multi-arch replacing the arm leg + create_manifest, PR deploy…

spikerj commented on issue spikerj/spikersoft-issues#548 2026-07-13 21:31:12 +00:00
[CI][Backend] Multi-arch create_manifest amends MUTABLE :amd64/:arm64v8 tags — out-of-order arch pushes can stitch a mixed-commit :latest (all backend multi-arch workflows)

Backend PR #267: option 3 fleet-wide — ref-scoped concurrency (group: workflow-ref, cancel-in-progress) on all 22 multi-arch workflows; PR runs can't cancel master deploys; wasm excluded…

spikerj opened issue spikerj/spikersoft-issues#549 2026-07-13 21:28:15 +00:00
[CI][Angular] Frontend pipeline does 4x duplicate Angular builds + an unnecessary arm-runner build leg — dedupe via build-once/artifact + buildx multi-arch (PR incoming)
spikerj commented on issue spikerj/spikersoft-issues#542 2026-07-13 21:22:13 +00:00
[Security][Prod] nginx root bind publicly serves quarantine, raw uploads, dlls — /spikersoft/<private-tree> downloadable

Deploy blocker found and fixed: the e2e-anonymous route-coverage RATCHET (#321) compared the credential-less CI job's honest 30.4% against a credentialed 66.7% baseline — every master deploy…

spikerj commented on issue spikerj/spikersoft-issues#545 2026-07-13 21:12:21 +00:00
[Security][CI] OpenBao Phase 1: Gitea Actions secrets → AppRole fetch; rotate the committed runner token (epic #543)

Infra PR #62 (stacked on #61): four least-privilege CI policies + idempotent AppRole provisioning script — per-repo Actions secrets shrink to BAO_ROLE_ID/BAO_SECRET_ID. Exemplar workflow fetch…

spikerj commented on issue spikerj/spikersoft-issues#544 2026-07-13 21:09:30 +00:00
[Security][Infra] OpenBao Phase 0: swarm stack + init/unseal runbook + Keycloak OIDC (epic #543)

Infra PR #61 (GATED): openbao/docker-stack.yml (2.5.5 pinned+verified, SERVER NVMe raft, sealed-tolerant healthcheck per the MinIO #54 lesson, Traefik at bao.spikersoft.com) + docs/openbao-init-run…

spikerj opened issue spikerj/spikersoft-issues#548 2026-07-13 21:07:28 +00:00
[CI][Backend] Multi-arch create_manifest amends MUTABLE :amd64/:arm64v8 tags — out-of-order arch pushes can stitch a mixed-commit :latest (all backend multi-arch workflows)
spikerj opened issue spikerj/spikersoft-issues#547 2026-07-13 21:07:25 +00:00
[Security][Infra] OpenBao Phase 3: PKI — internal CA, replace CI cert generation, mTLS for the stateful tier (epic #543)
spikerj opened issue spikerj/spikersoft-issues#546 2026-07-13 21:07:25 +00:00
[Security][Backend] OpenBao Phase 2: SpikerSoft.Secrets host-builder seam — service creds from Bao (epic #543)
spikerj opened issue spikerj/spikersoft-issues#544 2026-07-13 21:07:24 +00:00
[Security][Infra] OpenBao Phase 0: swarm stack + init/unseal runbook + Keycloak OIDC (epic #543)
spikerj opened issue spikerj/spikersoft-issues#545 2026-07-13 21:07:24 +00:00
[Security][CI] OpenBao Phase 1: Gitea Actions secrets → AppRole fetch; rotate the committed runner token (epic #543)
spikerj opened issue spikerj/spikersoft-issues#543 2026-07-13 21:07:01 +00:00
[Epic][Security][Infra] Central secrets management — OpenBao vault + PKI, retire scattered passwords
spikerj commented on issue spikerj/spikersoft-issues#541 2026-07-13 21:02:46 +00:00
[Bug][Backend][DockerMonitor] All swarm node events published as 'docker.node.unknown' with empty hostname — ~21 junk RabbitMQ msgs/min for healthy nodes

QA watch 2026-07-13 ~21:04Z — heads-up: the fix's image build NEVER FIRED. f0b846a0 merged ~20:39Z touching SpikerSoft.EventHandlers.DockerMonitor/** (squarely inside spikersoft-docker-monitor.yml…

spikerj commented on issue spikerj/spikersoft-issues#539 2026-07-13 20:57:29 +00:00
[Infra][Node] dreamstream6 (aarch64) down since ~16:30Z 2026-07-13 — heartbeat failure, host unreachable

QA watch 2026-07-13 ~20:57Z — redis cluster health after rejoin: VERIFIED OK. Cluster gossip shows no persistent failures; one replica briefly entered FAIL at 20:48:44Z and cleared at 20:49:40Z…

spikerj commented on issue spikerj/spikersoft-issues#536 2026-07-13 20:52:32 +00:00
[CI][ArtPipe] ModelEnvImages has no concurrency guard — concurrent runs race the same :latest tags (observed live)

QA watch 2026-07-13 ~20:53Z — guard merged (a3fba37) and version-compatible. Implementation: workflow-level concurrency group 'model-env-images' with cancel-in-progress: true — newest commit…