stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions 16 Releases Wiki Activity
Files
3d01bf9edc04bde2b0480003a640e13ce6532ef2
git.stella-ops.org/ops/devops/telemetry
History
StellaOps Bot 885ce86af4
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
Details
AOC Guard CI / aoc-verify (push) Has been cancelled
Details
Docs CI / lint-and-preview (push) Has been cancelled
Details
Mirror Thin Bundle Sign & Verify / mirror-sign (push) Has been cancelled
Details
feat: Add VEX Lens CI and Load Testing Plan 
- Introduced a comprehensive CI job structure for VEX Lens, including build, test, linting, and load testing.
- Defined load test parameters and SLOs for VEX Lens API and Issuer Directory.
- Created Grafana dashboards and alerting mechanisms for monitoring API performance and error rates.
- Established offline posture guidelines for CI jobs and load testing.

feat: Implement deterministic projection verification script

- Added `verify_projection.sh` script for verifying the integrity of projection exports against expected hashes.
- Ensured robust error handling for missing files and hash mismatches.

feat: Develop Vuln Explorer CI and Ops Plan

- Created CI jobs for Vuln Explorer, including build, test, and replay verification.
- Implemented backup and disaster recovery strategies for MongoDB and Redis.
- Established Merkle anchoring verification and automation for ledger projector.

feat: Introduce EventEnvelopeHasher for hashing event envelopes

- Implemented `EventEnvelopeHasher` to compute SHA256 hashes for event envelopes.

feat: Add Risk Store and Dashboard components

- Developed `RiskStore` for managing risk data and state.
- Created `RiskDashboardComponent` for displaying risk profiles with filtering capabilities.
- Implemented unit tests for `RiskStore` and `RiskDashboardComponent`.

feat: Enhance Vulnerability Detail Component

- Developed `VulnerabilityDetailComponent` for displaying detailed information about vulnerabilities.
- Implemented error handling for missing vulnerability IDs and loading failures.
2025-12-02 07:18:28 +02:00
..
tests
feat: Add VEX Lens CI and Load Testing Plan
2025-12-02 07:18:28 +02:00
generate_dev_tls.sh
Add TLS certificates and private keys for telemetry components
2025-11-05 16:28:05 +02:00
package_offline_bundle.py
Align AOC tasks for Excititor and Concelier
2025-10-31 18:50:15 +02:00
README.md
feat: Add VEX Lens CI and Load Testing Plan
2025-12-02 07:18:28 +02:00
smoke_otel_collector.py
Restructure solution layout by module
2025-10-28 15:10:40 +02:00
tenant_isolation_smoke.py
Add tenant isolation smoke test for telemetry stack
2025-11-05 15:09:54 +02:00
validate_storage_stack.py
feat: Document completed tasks for KMS, Cryptography, and Plugin Libraries
2025-10-31 14:37:45 +02:00
verify-telemetry-bundle.sh
feat: Add VEX Lens CI and Load Testing Plan
2025-12-02 07:18:28 +02:00

README.md

Telemetry bundle verifier

Files:

  • verify-telemetry-bundle.sh: offline verifier (checksums + optional JSON schema)
  • tests/sample-bundle/telemetry-bundle.json: sample manifest
  • tests/sample-bundle/telemetry-bundle.sha256: checksum list for sample bundle
  • tests/telemetry-bundle.tar: deterministic sample bundle (ustar, mtime=0, owner/group 0)
  • tests/run-schema-tests.sh: validates sample config against config schema
  • tests/ci-run.sh: runs schema test + bundle verifier (use in CI)

Dependencies for full validation:

  • python with jsonschema installed (pip install jsonschema)
  • tar, sha256sum

Deterministic TAR flags used for sample bundle: tar --mtime=@0 --owner=0 --group=0 --numeric-owner --format=ustar

Exit codes:

  • 0 success
  • 21 missing manifest/checksums
  • 22 checksum mismatch
  • 23 schema validation failed
  • 64 usage error

Quick check:

./verify-telemetry-bundle.sh tests/telemetry-bundle.tar

CI suggestion:

ops/devops/telemetry/tests/ci-run.sh