Files
git.stella-ops.org/docs/implplan/SPRINT_502_ops_deployment_ii.md
master cef4cb2c5a Add support for ГОСТ Р 34.10 digital signatures
- Implemented the GostKeyValue class for handling public key parameters in ГОСТ Р 34.10 digital signatures.
- Created the GostSignedXml class to manage XML signatures using ГОСТ 34.10, including methods for computing and checking signatures.
- Developed the GostSignedXmlImpl class to encapsulate the signature computation logic and public key retrieval.
- Added specific key value classes for ГОСТ Р 34.10-2001, ГОСТ Р 34.10-2012/256, and ГОСТ Р 34.10-2012/512 to support different signature algorithms.
- Ensured compatibility with existing XML signature standards while integrating ГОСТ cryptography.
2025-11-09 21:59:57 +02:00

2.4 KiB

Sprint 502 - Ops & Offline · 190.A) Ops Deployment.II

Active items only. Completed/historic work now resides in docs/implplan/archived/tasks.md (updated 2025-11-08).

[Ops & Offline] 190.A) Ops Deployment.II Depends on: Sprint 190.A - Ops Deployment.I Summary: Ops & Offline focus on Ops Deployment (phase II).

Task ID State Task description Owners (Source)
DEPLOY-POLICY-27-002 TODO Document rollout/rollback playbooks for policy publish/promote (canary strategy, emergency freeze toggle, evidence retrieval) under /docs/runbooks/policy-incident.md. Dependencies: DEPLOY-POLICY-27-001. Deployment Guild, Policy Guild (ops/deployment)
DEPLOY-VEX-30-001 TODO Provide Helm/Compose overlays, scaling defaults, and offline kit instructions for VEX Lens service. Deployment Guild, VEX Lens Guild (ops/deployment)
DEPLOY-VEX-30-002 TODO Package Issuer Directory deployment manifests, backups, and security hardening guidance. Dependencies: DEPLOY-VEX-30-001. Deployment Guild, Issuer Directory Guild (ops/deployment)
DEPLOY-VULN-29-001 TODO Produce Helm/Compose overlays for Findings Ledger + projector, including DB migrations, Merkle anchor jobs, and scaling guidance. Deployment Guild, Findings Ledger Guild (ops/deployment)
DEPLOY-VULN-29-002 TODO Package stella-vuln-explorer-api deployment manifests, health checks, autoscaling policies, and offline kit instructions with signed images. Dependencies: DEPLOY-VULN-29-001. Deployment Guild, Vuln Explorer API Guild (ops/deployment)
DOWNLOADS-CONSOLE-23-001 TODO Maintain signed downloads manifest pipeline (images, Helm, offline bundles), publish JSON under deploy/downloads/manifest.json, and document sync cadence for Console + docs parity. Deployment Guild, DevOps Guild (ops/deployment)
HELM-45-001 TODO Scaffold deploy/helm/stella chart with values, component toggles, and pinned image digests for all services; include migration Job templates. Deployment Guild (ops/deployment)
HELM-45-002 TODO Add TLS/Ingress, NetworkPolicy, PodSecurityContexts, Secrets integration (external secrets), and document security posture. Dependencies: HELM-45-001. Deployment Guild, Security Guild (ops/deployment)
HELM-45-003 TODO Implement HPA, PDB, readiness gates, Prometheus scraping annotations, OTel configuration hooks, and upgrade hooks. Dependencies: HELM-45-002. Deployment Guild, Observability Guild (ops/deployment)