refactor: JobEngine cleanup + crypto compose refactor + sprint plans + timeline merge prep

- Remove zombie JobEngine WebService (no container runs it)
- Remove dangling STELLAOPS_JOBENGINE_URL, replace with RELEASE_ORCHESTRATOR_URL
- Update Timeline audit paths to release-orchestrator
- Extract smremote to docker-compose.crypto-provider.smremote.yml
- Rename crypto compose files for consistent naming
- Add crypto provider health probe API (CP-001) + tenant preferences (CP-002)
- Create sprint plans: crypto picker, VulnExplorer merge, scheduler plugins
- Timeline merge prep: ingestion worker relocated to infrastructure lib

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
master
2026-04-08 13:45:19 +03:00
parent 59e7f25d96
commit 886ff6f9d2
118 changed files with 1593 additions and 17761 deletions

View File

@@ -3,13 +3,13 @@
"ReverseProxy","/api/v1/vex","https://vexhub.stella-ops.local/api/v1/vex","/api/v1/vex/index","200"
"ReverseProxy","/api/v1/vexlens","http://vexlens.stella-ops.local/api/v1/vexlens","/api/v1/vexlens/stats","200"
"ReverseProxy","/api/v1/notify","http://notify.stella-ops.local/api/v1/notify","/api/v1/notify/audit","400"
"ReverseProxy","/api/v1/notifier","http://notifier.stella-ops.local/api/v1/notifier",,
"ReverseProxy","/api/v1/notifier","http://notify.stella-ops.local/api/v1/notifier",,
"ReverseProxy","/api/v1/concelier","http://concelier.stella-ops.local/api/v1/concelier","/api/v1/concelier/bundles","200"
"ReverseProxy","/api/v1/platform","http://platform.stella-ops.local/api/v1/platform","/api/v1/platform/search","401"
"ReverseProxy","/api/v1/scanner","http://scanner.stella-ops.local/api/v1/scanner",,
"ReverseProxy","/api/v1/findings","http://findings.stella-ops.local/api/v1/findings","/api/v1/findings/summaries","401"
"ReverseProxy","/api/v1/integrations","http://integrations.stella-ops.local/api/v1/integrations","/api/v1/integrations","200"
"ReverseProxy","/api/v1/policy","http://policy-gateway.stella-ops.local/api/v1/policy","/api/v1/policy/schema","404"
"ReverseProxy","/api/v1/policy","http://policy-engine.stella-ops.local/api/v1/policy","/api/v1/policy/schema","404"
"ReverseProxy","/api/v1/reachability","http://reachgraph.stella-ops.local/api/v1/reachability",,
"ReverseProxy","/api/v1/attestor","http://attestor.stella-ops.local/api/v1/attestor","/api/v1/attestor/policies","404"
"ReverseProxy","/api/v1/attestations","http://attestor.stella-ops.local/api/v1/attestations","/api/v1/attestations","401"
@@ -33,7 +33,7 @@
"ReverseProxy","/api/v1/lineage","http://sbomservice.stella-ops.local/api/v1/lineage","/api/v1/lineage/diff","400"
"ReverseProxy","/api/v1/export","https://exportcenter.stella-ops.local/api/v1/export","/api/v1/export/jobs","401"
"ReverseProxy","/api/v1/triage","http://scanner.stella-ops.local/api/v1/triage","/api/v1/triage/inbox","400"
"ReverseProxy","/api/v1/governance","http://policy-gateway.stella-ops.local/api/v1/governance","/api/v1/governance/audit/events","400"
"ReverseProxy","/api/v1/governance","http://policy-engine.stella-ops.local/api/v1/governance","/api/v1/governance/audit/events","400"
"ReverseProxy","/api/v1/determinization","http://policy-engine.stella-ops.local/api/v1/determinization",,
"ReverseProxy","/api/v1/opsmemory","http://opsmemory.stella-ops.local/api/v1/opsmemory","/api/v1/opsmemory/stats","400"
"ReverseProxy","/api/v1/secrets","http://scanner.stella-ops.local/api/v1/secrets","/api/v1/secrets/config/rules/categories","200"
@@ -45,20 +45,20 @@
"ReverseProxy","/v1/advisory-ai/adapters","http://advisoryai.stella-ops.local/v1/advisory-ai/adapters","/","200"
"ReverseProxy","/v1/advisory-ai","http://advisoryai.stella-ops.local/v1/advisory-ai","/v1/advisory-ai/consent","200"
"ReverseProxy","/v1/audit-bundles","https://exportcenter.stella-ops.local/v1/audit-bundles","/v1/audit-bundles","200"
"ReverseProxy","/policy","http://policy-gateway.stella-ops.local","/policy/snapshots","404"
"ReverseProxy","/api/cvss","http://policy-gateway.stella-ops.local/api/cvss","/api/cvss/policies","401"
"ReverseProxy","/api/policy","http://policy-gateway.stella-ops.local/api/policy","/api/policy/packs","401"
"ReverseProxy","/policy","http://policy-engine.stella-ops.local","/policy/snapshots","404"
"ReverseProxy","/api/cvss","http://policy-engine.stella-ops.local/api/cvss","/api/cvss/policies","401"
"ReverseProxy","/api/policy","http://policy-engine.stella-ops.local/api/policy","/api/policy/packs","401"
"ReverseProxy","/api/risk","http://policy-engine.stella-ops.local/api/risk","/api/risk/events","401"
"ReverseProxy","/api/analytics","http://platform.stella-ops.local/api/analytics","/api/analytics/backlog","401"
"ReverseProxy","/api/release-orchestrator","http://orchestrator.stella-ops.local/api/release-orchestrator","/api/release-orchestrator/releases","200"
"ReverseProxy","/api/releases","http://orchestrator.stella-ops.local/api/releases",,
"ReverseProxy","/api/approvals","http://orchestrator.stella-ops.local/api/approvals",,
"ReverseProxy","/api/gate","http://policy-gateway.stella-ops.local/api/gate",,
"ReverseProxy","/api/gate","http://policy-engine.stella-ops.local/api/gate",,
"ReverseProxy","/api/risk-budget","http://policy-engine.stella-ops.local/api/risk-budget",,
"ReverseProxy","/api/fix-verification","http://scanner.stella-ops.local/api/fix-verification",,
"ReverseProxy","/api/compare","http://sbomservice.stella-ops.local/api/compare",,
"ReverseProxy","/api/change-traces","http://sbomservice.stella-ops.local/api/change-traces",,
"ReverseProxy","/api/exceptions","http://policy-gateway.stella-ops.local/api/exceptions",,
"ReverseProxy","/api/exceptions","http://policy-engine.stella-ops.local/api/exceptions",,
"ReverseProxy","/api/verdicts","https://evidencelocker.stella-ops.local/api/verdicts",,
"ReverseProxy","/api/orchestrator","http://orchestrator.stella-ops.local/api/orchestrator",,
"ReverseProxy","/api/v1/gateway/rate-limits","http://platform.stella-ops.local/api/v1/gateway/rate-limits","/api/v1/gateway/rate-limits","401"
@@ -79,12 +79,12 @@
"ReverseProxy","/rekor","http://rekor.stella-ops.local:3322",,
"ReverseProxy","/envsettings.json","http://platform.stella-ops.local/platform/envsettings.json","/","200"
"ReverseProxy","/scanner","http://scanner.stella-ops.local",,
"ReverseProxy","/policyGateway","http://policy-gateway.stella-ops.local",,
"ReverseProxy","/policyGateway","http://policy-engine.stella-ops.local",,
"ReverseProxy","/policyEngine","http://policy-engine.stella-ops.local",,
"ReverseProxy","/concelier","http://concelier.stella-ops.local","/concelier/observations","404"
"ReverseProxy","/attestor","http://attestor.stella-ops.local",,
"ReverseProxy","/notify","http://notify.stella-ops.local",,
"ReverseProxy","/notifier","http://notifier.stella-ops.local",,
"ReverseProxy","/notifier","http://notify.stella-ops.local",,
"ReverseProxy","/scheduler","http://scheduler.stella-ops.local",,
"ReverseProxy","/signals","http://signals.stella-ops.local","/signals/ping","404"
"ReverseProxy","/excititor","http://excititor.stella-ops.local","/excititor/status","404"
1 RouteType RoutePath RouteTarget SelectedOpenApiPath StatusCode
3 ReverseProxy /api/v1/vex https://vexhub.stella-ops.local/api/v1/vex /api/v1/vex/index 200
4 ReverseProxy /api/v1/vexlens http://vexlens.stella-ops.local/api/v1/vexlens /api/v1/vexlens/stats 200
5 ReverseProxy /api/v1/notify http://notify.stella-ops.local/api/v1/notify /api/v1/notify/audit 400
6 ReverseProxy /api/v1/notifier http://notifier.stella-ops.local/api/v1/notifier http://notify.stella-ops.local/api/v1/notifier
7 ReverseProxy /api/v1/concelier http://concelier.stella-ops.local/api/v1/concelier /api/v1/concelier/bundles 200
8 ReverseProxy /api/v1/platform http://platform.stella-ops.local/api/v1/platform /api/v1/platform/search 401
9 ReverseProxy /api/v1/scanner http://scanner.stella-ops.local/api/v1/scanner
10 ReverseProxy /api/v1/findings http://findings.stella-ops.local/api/v1/findings /api/v1/findings/summaries 401
11 ReverseProxy /api/v1/integrations http://integrations.stella-ops.local/api/v1/integrations /api/v1/integrations 200
12 ReverseProxy /api/v1/policy http://policy-gateway.stella-ops.local/api/v1/policy http://policy-engine.stella-ops.local/api/v1/policy /api/v1/policy/schema 404
13 ReverseProxy /api/v1/reachability http://reachgraph.stella-ops.local/api/v1/reachability
14 ReverseProxy /api/v1/attestor http://attestor.stella-ops.local/api/v1/attestor /api/v1/attestor/policies 404
15 ReverseProxy /api/v1/attestations http://attestor.stella-ops.local/api/v1/attestations /api/v1/attestations 401
33 ReverseProxy /api/v1/lineage http://sbomservice.stella-ops.local/api/v1/lineage /api/v1/lineage/diff 400
34 ReverseProxy /api/v1/export https://exportcenter.stella-ops.local/api/v1/export /api/v1/export/jobs 401
35 ReverseProxy /api/v1/triage http://scanner.stella-ops.local/api/v1/triage /api/v1/triage/inbox 400
36 ReverseProxy /api/v1/governance http://policy-gateway.stella-ops.local/api/v1/governance http://policy-engine.stella-ops.local/api/v1/governance /api/v1/governance/audit/events 400
37 ReverseProxy /api/v1/determinization http://policy-engine.stella-ops.local/api/v1/determinization
38 ReverseProxy /api/v1/opsmemory http://opsmemory.stella-ops.local/api/v1/opsmemory /api/v1/opsmemory/stats 400
39 ReverseProxy /api/v1/secrets http://scanner.stella-ops.local/api/v1/secrets /api/v1/secrets/config/rules/categories 200
45 ReverseProxy /v1/advisory-ai/adapters http://advisoryai.stella-ops.local/v1/advisory-ai/adapters / 200
46 ReverseProxy /v1/advisory-ai http://advisoryai.stella-ops.local/v1/advisory-ai /v1/advisory-ai/consent 200
47 ReverseProxy /v1/audit-bundles https://exportcenter.stella-ops.local/v1/audit-bundles /v1/audit-bundles 200
48 ReverseProxy /policy http://policy-gateway.stella-ops.local http://policy-engine.stella-ops.local /policy/snapshots 404
49 ReverseProxy /api/cvss http://policy-gateway.stella-ops.local/api/cvss http://policy-engine.stella-ops.local/api/cvss /api/cvss/policies 401
50 ReverseProxy /api/policy http://policy-gateway.stella-ops.local/api/policy http://policy-engine.stella-ops.local/api/policy /api/policy/packs 401
51 ReverseProxy /api/risk http://policy-engine.stella-ops.local/api/risk /api/risk/events 401
52 ReverseProxy /api/analytics http://platform.stella-ops.local/api/analytics /api/analytics/backlog 401
53 ReverseProxy /api/release-orchestrator http://orchestrator.stella-ops.local/api/release-orchestrator /api/release-orchestrator/releases 200
54 ReverseProxy /api/releases http://orchestrator.stella-ops.local/api/releases
55 ReverseProxy /api/approvals http://orchestrator.stella-ops.local/api/approvals
56 ReverseProxy /api/gate http://policy-gateway.stella-ops.local/api/gate http://policy-engine.stella-ops.local/api/gate
57 ReverseProxy /api/risk-budget http://policy-engine.stella-ops.local/api/risk-budget
58 ReverseProxy /api/fix-verification http://scanner.stella-ops.local/api/fix-verification
59 ReverseProxy /api/compare http://sbomservice.stella-ops.local/api/compare
60 ReverseProxy /api/change-traces http://sbomservice.stella-ops.local/api/change-traces
61 ReverseProxy /api/exceptions http://policy-gateway.stella-ops.local/api/exceptions http://policy-engine.stella-ops.local/api/exceptions
62 ReverseProxy /api/verdicts https://evidencelocker.stella-ops.local/api/verdicts
63 ReverseProxy /api/orchestrator http://orchestrator.stella-ops.local/api/orchestrator
64 ReverseProxy /api/v1/gateway/rate-limits http://platform.stella-ops.local/api/v1/gateway/rate-limits /api/v1/gateway/rate-limits 401
79 ReverseProxy /rekor http://rekor.stella-ops.local:3322
80 ReverseProxy /envsettings.json http://platform.stella-ops.local/platform/envsettings.json / 200
81 ReverseProxy /scanner http://scanner.stella-ops.local
82 ReverseProxy /policyGateway http://policy-gateway.stella-ops.local http://policy-engine.stella-ops.local
83 ReverseProxy /policyEngine http://policy-engine.stella-ops.local
84 ReverseProxy /concelier http://concelier.stella-ops.local /concelier/observations 404
85 ReverseProxy /attestor http://attestor.stella-ops.local
86 ReverseProxy /notify http://notify.stella-ops.local
87 ReverseProxy /notifier http://notifier.stella-ops.local http://notify.stella-ops.local
88 ReverseProxy /scheduler http://scheduler.stella-ops.local
89 ReverseProxy /signals http://signals.stella-ops.local /signals/ping 404
90 ReverseProxy /excititor http://excititor.stella-ops.local /excititor/status 404