stella-ops.org/git.stella-ops.org
1
0
Fork 0
Code Issues Pull Requests Actions Releases Wiki Activity
Files
691028fe6982aa129aebb8ad201da450b8df0a10
git.stella-ops.org/ops/devops/TASKS.completed.md
Vladimir Moushkov 691028fe69
Some checks failed
Docs CI / lint-and-preview (push) Has been cancelled
Details
feat: Document completed tasks across multiple components 
- Added completed tasks documentation for Scheduler WebService, ImpactIndex, Models, Queue, Storage.Mongo, Worker, Signals, Signer, UI, Zastava.Observer, Zastava.Webhook, Zastava.Core, Cryptography.Kms, Cryptography, and Plugin.
- Each task includes ID, status, owners, dependencies, descriptions, and exit criteria to ensure clarity and traceability.
- Enhanced integration and unit testing coverage across various components to validate functionality and compliance with specifications.
2025-10-30 18:20:31 +02:00

7.5 KiB
Raw Blame History

Completed Tasks

ID Status Owner(s) Depends on Description Exit Criteria
DEVOPS-HELM-09-001 DONE DevOps Guild SCANNER-WEB-09-101 Create Helm/Compose environment profiles (dev, staging, airgap) with deterministic digests. Profiles committed under deploy/; docs updated; CI smoke deploy passes.
DEVOPS-SCANNER-09-204 DONE (2025-10-21) DevOps Guild, Scanner WebService Guild SCANNER-EVENTS-15-201 Surface SCANNER__EVENTS__* environment variables across docker-compose (dev/stage/airgap) and Helm values, defaulting to share the Redis queue DSN. Compose/Helm configs ship enabled Redis event publishing with documented overrides; lint jobs updated; docs cross-link to new knobs.
DEVOPS-SCANNER-09-205 DONE (2025-10-21) DevOps Guild, Notify Guild DEVOPS-SCANNER-09-204 Add Notify smoke stage that tails the Redis stream and asserts scanner.report.ready/scanner.scan.completed reach Notify WebService in staging. CI job reads Redis stream during scanner smoke deploy, confirms Notify ingestion via API, alerts on failure.
DEVOPS-PERF-10-001 DONE DevOps Guild BENCH-SCANNER-10-001 Add perf smoke job (SBOM compose <5 s target) to CI. CI job runs sample build verifying <5 s; alerts configured.
DEVOPS-PERF-10-002 DONE (2025-10-23) DevOps Guild BENCH-SCANNER-10-002 Publish analyzer bench metrics to Grafana/perf workbook and alarm on ≥20 % regressions. CI exports JSON for dashboards; Grafana panel wired; Ops on-call doc updated with alert hook.
DEVOPS-REL-14-001 DONE (2025-10-26) DevOps Guild SIGNER-API-11-101, ATTESTOR-API-11-201 Deterministic build/release pipeline with SBOM/provenance, signing, manifest generation. CI pipeline produces signed images + SBOM/attestations, manifests published with verified hashes, docs updated.
DEVOPS-REL-14-004 DONE (2025-10-26) DevOps Guild, Scanner Guild DEVOPS-REL-14-001, SCANNER-ANALYZERS-LANG-10-309P Extend release/offline smoke jobs to exercise the Python analyzer plug-in (warm/cold scans, determinism, signature checks). Release/Offline pipelines run Python analyzer smoke suite; alerts hooked; docs updated with new coverage matrix.
DEVOPS-REL-17-002 DONE (2025-10-26) DevOps Guild DEVOPS-REL-14-001, SCANNER-EMIT-17-701 Persist stripped-debug artifacts organised by GNU build-id and bundle them into release/offline kits with checksum manifests. CI job writes .debug files under artifacts/debug/.build-id/, manifest + checksums published, offline kit includes cache, smoke job proves symbol lookup via build-id.
DEVOPS-MIRROR-08-001 DONE (2025-10-19) DevOps Guild DEVOPS-REL-14-001 Stand up managed mirror profiles for *.stella-ops.org (Concelier/Excititor), including Helm/Compose overlays, multi-tenant secrets, CDN caching, and sync documentation. Infra overlays committed, CI smoke deploy hits mirror endpoints, runbooks published for downstream sync and quota management.
DEVOPS-POLICY-20-001 DONE (2025-10-26) DevOps Guild, Policy Guild POLICY-ENGINE-20-001 Integrate DSL linting in CI (parser/compile) to block invalid policies; add pipeline step compiling sample policies. CI fails on syntax errors; lint logs surfaced; docs updated with pipeline instructions.
DEVOPS-POLICY-20-003 DONE (2025-10-26) DevOps Guild, QA Guild DEVOPS-POLICY-20-001, POLICY-ENGINE-20-005 Determinism CI: run Policy Engine twice with identical inputs and diff outputs to guard non-determinism. CI job compares outputs, fails on differences, logs stored; documentation updated.
DEVOPS-POLICY-20-004 DONE (2025-10-27) DevOps Guild, Scheduler Guild, CLI Guild SCHED-MODELS-20-001, CLI-POLICY-20-002 Automate policy schema exports: generate JSON Schema from PolicyRun* DTOs during CI, publish artefacts, and emit change alerts for CLI consumers (Slack + changelog). CI stage outputs versioned schema files, uploads artefacts, notifies #policy-engine channel on change; docs/CLI references updated.
DEVOPS-OBS-50-001 DONE (2025-10-26) DevOps Guild, Observability Guild TELEMETRY-OBS-50-001 Deliver default OpenTelemetry collector deployment (Compose/Helm manifests), OTLP ingestion endpoints, and secure pipeline (authN, mTLS, tenant partitioning). Provide smoke test verifying traces/logs/metrics ingestion. Collector manifests committed; smoke test green; docs updated; imposed rule banner reminder noted.
DEVOPS-OBS-50-003 DONE (2025-10-26) DevOps Guild, Offline Kit Guild DEVOPS-OBS-50-001 Package telemetry stack configs for air-gapped installs (Offline Kit bundle, documented overrides, sample values) and automate checksum/signature generation. Offline bundle includes collector+storage configs; checksums published; docs cross-linked; imposed rule annotation recorded.
DEVOPS-LAUNCH-18-100 DONE (2025-10-26) DevOps Guild - Finalise production environment footprint (clusters, secrets, network overlays) for full-platform go-live. IaC/compose overlays committed, secrets placeholders documented, dry-run deploy succeeds in staging.

| DEVOPS-CONSOLE-23-002 | TODO | DevOps Guild, Console Guild | DEVOPS-CONSOLE-23-001, CONSOLE-REL-23-301 | Produce stella-console container build + Helm chart overlays with deterministic digests, SBOM/provenance artefacts, and offline bundle packaging scripts. | Container published to registry mirror, Helm values committed, SBOM/attestations generated, offline kit job passes smoke test, docs updated. | | DEVOPS-LAUNCH-18-100 | DONE (2025-10-26) | DevOps Guild | - | Finalise production environment footprint (clusters, secrets, network overlays) for full-platform go-live. | IaC/compose overlays committed, secrets placeholders documented, dry-run deploy succeeds in staging. | | DEVOPS-LAUNCH-18-900 | DONE (2025-10-26) | DevOps Guild, Module Leads | Wave 0 completion | Collect “full implementation” sign-off from module owners and consolidate launch readiness checklist. | Sign-off record stored under docs/modules/devops/runbooks/launch-readiness.md; outstanding gaps triaged; checklist approved. | | DEVOPS-LAUNCH-18-001 | DONE (2025-10-26) | DevOps Guild | DEVOPS-LAUNCH-18-100, DEVOPS-LAUNCH-18-900 | Production launch cutover rehearsal and runbook publication. | docs/modules/devops/runbooks/launch-cutover.md drafted, rehearsal executed with rollback drill, approvals captured. | | DEVOPS-NUGET-13-001 | DONE (2025-10-25) | DevOps Guild, Platform Leads | DEVOPS-REL-14-001 | Add .NET 10 preview feeds / local mirrors so Microsoft.Extensions.* 10.0 preview packages restore offline; refresh restore docs. | NuGet.config maps preview feeds (or local mirrored packages), dotnet restore succeeds for Excititor/Concelier solutions without ad-hoc feed edits, docs updated for offline bootstrap. | | DEVOPS-NUGET-13-002 | DONE (2025-10-26) | DevOps Guild | DEVOPS-NUGET-13-001 | Ensure all solutions/projects prefer local-nuget before public sources and document restore order validation. | NuGet.config and solution-level configs resolve from local-nuget first; automated check verifies priority; docs updated for restore ordering. | | DEVOPS-NUGET-13-003 | DONE (2025-10-26) | DevOps Guild, Platform Leads | DEVOPS-NUGET-13-002 | Sweep Microsoft.* NuGet dependencies pinned to 8.* and upgrade to latest .NET 10 equivalents (or .NET 9 when 10 unavailable), updating restore guidance. | Dependency audit shows no 8.* Microsoft.* packages remaining; CI builds green; changelog/doc sections capture upgrade rationale. |