feat(sre): register privileged authority and isolate Kubernetes credentials - #551

Merged

Pal Lakatos-Toth (pallakatos) merged 64 commits into

kars-bridgefrom

public/pr7-sre-authority

Sep 10, 2026

Commits on Sep 8, 2026

feat(sre): require registered authority and isolate Kubernetes credentials
Pal Lakatos-Toth (pallakatos)
committed
5543c40
fix(cli): reject invalid push targets before SRE preflight
Pal Lakatos-Toth (pallakatos)
committed
05b3a77
fix(sre): complete status conventions and verify request boundaries
Pal Lakatos-Toth (pallakatos)
committed
941d6c2
test(sre): initialize TLS provider in isolated boundary regression
Pal Lakatos-Toth (pallakatos)
committed
9978768
test(sre): repair schema-valid authority acceptance fixtures
Pal Lakatos-Toth (pallakatos)
committed
3c9523e
ci(sre): validate public registration schema before image-dependent tests

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
e9e1038
test(sre): compare API-evidenced CEL namespace accessors

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
e2aefef
fix(sre): escape custom namespace fields in registration CEL
Pal Lakatos-Toth (pallakatos)
committed
447312d
fix(cli): preserve SRE release discovery on Helm 3 and 4
Pal Lakatos-Toth (pallakatos)
committed
8616229
test(sre): defer custom readiness until explicit migration
Pal Lakatos-Toth (pallakatos)
committed
7f7a4ac
Merge assembled credential foundations into SRE prerequisite
Pal Lakatos-Toth (pallakatos)
committed
ee24037
test(sre): capture controller admission before teardown

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
bc392ce
test(sre): parse kubectl multi-object diagnostic output

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
9a3921c
test(sre): retain fatal policy wait while collecting Pod evidence

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
cc3c008
test(sre): capture control-plane health without log contents

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
436fa33
test(sre): prove preserved JSON schema candidate on actual API

Pal Lakatos-Toth (pallakatos)
and
Copilot
committed
b19d597
fix(sre): preserve action JSON without the Kubernetes nil-schema crash
Pal Lakatos-Toth (pallakatos)
committed
4e012ec
test(sre): stabilize real token fixtures without minting credentials
Pal Lakatos-Toth (pallakatos)
committed
d9910d4
test(sre): retain sanitized migration rejection coordinates
Pal Lakatos-Toth (pallakatos)
committed
ae692a3
test(sre): preserve token fixture parents after cleanup conflicts
Pal Lakatos-Toth (pallakatos)
committed
59f25ac
test(sre): prove controller retirement bind authority on real Kind
Pal Lakatos-Toth (pallakatos)
committed
fa09d3b
test(sre): use the exact pinned legacy chart file set
Pal Lakatos-Toth (pallakatos)
committed
b935015
test(sre): distinguish the real immutable-UID retirement rejection
Pal Lakatos-Toth (pallakatos)
committed
c1d14fa
fix(sre): preflight reviewed binding retirement with narrow authority
Pal Lakatos-Toth (pallakatos)
committed
b8d130d

Commits on Sep 9, 2026

Commits on Sep 10, 2026