stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
10212d67c0dfa0dd849fd798c24502b773664749
git.stella-ops.org/docs/modules/registry
History
master 75c2bcafce
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
Add LDAP Distinguished Name Helper and Credential Audit Context 
- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.
2025-11-09 12:21:38 +02:00
..
operations
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00
AGENTS.md
Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.
2025-11-05 11:58:32 +02:00
architecture.md
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00
implementation_plan.md
Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.
2025-11-05 11:58:32 +02:00
README.md
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00

README.md

StellaOps Registry Token Service

The registry module issues scoped pull tokens for mirrored container registries while enforcing plan and licence constraints.

Responsibilities

  • Validate Authority-issued OpToks and tenant scopes before issuance.
  • Mint time-bound registry tokens and record issuance ledgers.
  • Expose revocation and audit endpoints for security teams.
  • Integrate with Offline Kit for deterministic token manifests.

Key components

  • StellaOps.Registry.TokenService minimal API host.
  • Mongo-backed issuance ledger.
  • Tests under src/Registry/__Tests.

Integrations & dependencies

  • Authority for identity & scope verification.
  • Export Center/Offline Kit for distribution.
  • DevOps runbooks for deployment and rotation.

Operational notes

  • Operational guide at ./operations/token-service.md.
  • Telemetry dashboards pending (see ../../TASKS.md).

Related resources

  • ./operations/token-service.md

Backlog references

  • DEVOPS-REGISTRY items in ../../TASKS.md (future work).
  • Registry automation stories tracked in src/Registry/TASKS.md if present.

Epic alignment

  • Epic 10 – Export Center: provide signed, auditable registry token bundles for mirror distribution.
  • Epic 14 – Identity & Tenancy: enforce tenant-aware scopes, PoE alignment, and revocation policies.