Block a user
Phase C roadmap — live trace viewer (remaining increments)
Increment 3 done: live CD/deploy state (roadmap item 3). Stage 07 shows the pod's own deployed image tag + N/M replicas ready, green only when fully rolled out, read from the k8s Deployment…
Phase C roadmap — live trace viewer (remaining increments)
Increment 2 done: per-job status (roadmap item 1). Stage 06 now shows the latest run's per-job outcomes (Detect/Lint/Build/Deploy), coloured, in pipeline order, from /actions/tasks per-job…
Phase C roadmap — live trace viewer (remaining increments)
Wire INFRA_DEPLOY_KEY so the CI deploy job auto-deploys
Wire INFRA_DEPLOY_KEY so the CI deploy job auto-deploys
Done — CI auto-deploy wired and verified end-to-end
- Generated a dedicated ed25519 keypair for cad-atlas CI.
- Public key registered as a write deploy-key (
cad-atlas-ci) on `mathias/inf…
Gate atlas.d-ma.be — tapir-style Dex/OIDC auth (currently public)
Gitea integration — logged-in user sees their projects + issues in the atlas
Update: auth is now Authentik forward-auth (#3), so the authenticated user identity arrives as request headers — no in-app OIDC needed. The ingress passes X-authentik-username, `X-authentik-…
Gate atlas.d-ma.be — tapir-style Dex/OIDC auth (currently public)
Resolved — gated via Authentik forward-auth, not in-app OIDC
atlas.d-ma.be is now Authentik-only, gated at the edge (ingress-nginx forward-auth → embedded outpost) with zero app code…
Gitea integration — logged-in user sees their projects + issues in the atlas
Gate atlas.d-ma.be — tapir-style Dex/OIDC auth (currently public)