Files

Docs CI / lint-and-preview (push) Has been cancelled

Details

Add LDAP Distinguished Name Helper and Credential Audit Context

- Implemented LdapDistinguishedNameHelper for escaping RDN and filter values.
- Created AuthorityCredentialAuditContext and IAuthorityCredentialAuditContextAccessor for managing credential audit context.
- Developed StandardCredentialAuditLogger with tests for success, failure, and lockout events.
- Introduced AuthorityAuditSink for persisting audit records with structured logging.
- Added CryptoPro related classes for certificate resolution and signing operations.

2025-11-09 12:21:38 +02:00

AGENTS.md

Update AGENTS.md files across multiple modules to standardize task status update instructions and introduce a new document for Secret Leak Detection operations.

2025-11-05 11:58:32 +02:00

architecture.md

Add OpenSslLegacyShim to ensure OpenSSL 1.1 libraries are accessible on Linux

2025-11-02 21:41:03 +02:00

implementation_plan.md

Align AOC tasks for Excititor and Concelier

2025-10-31 18:50:15 +02:00

README.md

feat: Implement approvals workflow and notifications integration

2025-11-06 08:48:13 +02:00

README.md

StellaOps Source & Job Orchestrator

The Orchestrator schedules, observes, and recovers ingestion and analysis jobs across the StellaOps platform.

Latest updates (2025-11-01)

Authority added orch:quota and orch:backfill scopes for quota/backfill operations, plus token reason/ticket auditing (docs/updates/2025-11-01-orch-admin-scope.md). Operators must supply quota_reason / quota_ticket (or backfill_reason / backfill_ticket) when requesting elevated tokens and surface those claims in change reviews.

Responsibilities

Track job state, throughput, and errors for Concelier, Excititor, Scheduler, and export pipelines.
Expose dashboards and APIs for throttling, replays, and failover.
Enforce rate-limits, concurrency and dependency chains across queues.
Stream structured events and audit logs for incident response.

Key components

Orchestrator WebService (control plane).
Queue adapters (Redis/NATS) and job ledger.
Console dashboard module and CLI integration for operators.

Integrations & dependencies

Authority for authN/Z on operational actions.
Telemetry stack for job metrics and alerts.
Scheduler/Concelier/Excititor workers for job lifecycle.
Offline Kit for state export/import during air-gap refreshes.

Operational notes

Job recovery runbooks and dashboard JSON as described in Epic 9.
Audit retention policies for job history.
Rate-limit reconfiguration guidelines.
When using the new orch:quota / orch:backfill scopes, ensure reason/ticket fields are captured in runbooks and audit checklists per the 2025-11-01 Authority update.

Epic alignment

Epic 9: Source & Job Orchestrator Dashboard.
ORCH stories in ../../TASKS.md.