jlab-bot jlab-git-bot
0 Followers · 0 Following
Joined on 2026-09-01
Repositories Projects Packages Public Activity Starred Repositories
jlab-bot commented on pull request jlab-cluster/helm-charts#138 2026-10-15 19:53:30 +02:00
fix(paperless-ngx): the egress rule names the Tika/Gotenberg pod ports, and CI now asserts it across charts

CI green, and the new assertion ran there rather than only locally. Validate Helm Charts / NetworkPolicy, run 994 job 4101, 12…

jlab-bot created pull request jlab-cluster/helm-charts#138 2026-10-15 19:47:37 +02:00
fix(paperless-ngx): the egress rule names the Tika/Gotenberg pod ports, and CI now asserts it across charts
jlab-bot commented on issue jlab-cluster/helm-charts#136 2026-10-15 19:33:40 +02:00
paperless-ngx: Egress-Regel nennt den Service-Port 80, braucht aber die Pod-Ports 9998/3000

Genehmigter Plan

Die Analyse des Rumpfs ist bestätigt, einschließlich der Eingrenzung. Unabhängig nachgemessen: vier Policy-Templates nennen Port 80, aber drei davon zielen ins Internet,…

jlab-bot opened issue jlab-cluster/helm-charts#136 2026-10-15 09:55:43 +02:00
paperless-ngx: Egress-Regel nennt den Service-Port 80, braucht aber die Pod-Ports 9998/3000
jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-15 01:18:45 +02:00
feat!: a NetworkPolicy in every chart, on by default

Post-merge verification — all four checks pass

Merged by @jklein as ec9e641. The in-flight PR checks showing "Canceled" are the merge cancelling its own run, not a…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-15 01:01:24 +02:00
feat!: a NetworkPolicy in every chart, on by default

Branch updated — the PR had gone mergeable: false under an automerge, now true again

Nothing to do with the review.…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-15 00:57:58 +02:00
feat!: a NetworkPolicy in every chart, on by default

CI re-proved on the new HEAD b31a189 — OVERALL: success, 95 tasks, 0 failures

Render tests, all over every…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-14 23:22:58 +02:00
feat!: a NetworkPolicy in every chart, on by default

Follow-up applied: the Gotenberg switch, plus three things that were load-bearing and written nowhere

Restrictive-by-default is unchanged everywhere. minecraft-server's game port stays…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-14 18:57:41 +02:00
feat!: a NetworkPolicy in every chart, on by default

Install-test evidence: all 28 installable charts green with their policy…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-14 17:27:37 +02:00
feat!: a NetworkPolicy in every chart, on by default

Release-side actions this PR creates — measured against the live cluster

I have not touched jk-cluster-config and opened no PR there, as instructed. This is the list of what the merge will…

jlab-bot commented on pull request jlab-cluster/helm-charts#133 2026-10-14 16:18:23 +02:00
feat!: a NetworkPolicy in every chart, on by default

The enforcement proof: measured, and the answer is not the one the plan assumed

Two experiments on this branch, run 888. Both are reverted; the commits are kept for the record (d3ef372,…

jlab-bot created pull request jlab-cluster/helm-charts#133 2026-10-14 16:00:57 +02:00
feat!: a NetworkPolicy in every chart, on by default
jlab-bot commented on issue jlab-cluster/helm-charts#5 2026-10-14 15:36:44 +02:00
Security: NetworkPolicies für alle Charts

Genehmigter Plan — und der Rumpf beschreibt einen Cluster, der seit heute nicht mehr existiert

Alles unten gemessen am 14.10.2026 am laufenden Cluster und an origin/main.

Die drei Fragen…

jlab-bot commented on pull request jlab-cluster/helm-charts#131 2026-10-13 21:24:23 +02:00
feat(paperless-ngx)!: quote every operator scalar, pin the consume mover, drop oidcSecretRef

CI green — run 850, all ten checks

Head 39844fc, rebased onto 59d2614 (the #128 merge). Job output rather than a…

jlab-bot created pull request jlab-cluster/helm-charts#131 2026-10-13 21:12:23 +02:00
feat(paperless-ngx): quote every operator scalar, pin the consume mover, drop oidcSecretRef
jlab-bot created pull request jlab-cluster/helm-charts#130 2026-10-13 20:48:41 +02:00
feat(ci): the chart bump follows the app bump
jlab-bot commented on issue jlab-cluster/helm-charts#128 2026-10-13 20:22:35 +02:00
Konvention: was ein "plain app-version bump" ist - ein Patch hat eine Sicherheitsvorgabe gekippt

Genehmigte Entscheidung: der Chart-Sprung folgt dem App-Sprung

Der Maintainer hat entschieden. Die Regel…

jlab-bot opened issue jlab-cluster/helm-charts#129 2026-10-13 13:25:49 +02:00
stalwart/bulwark: CORS als Chart-Werte - die Gateway-API hat einen CORS-Filter, aber nur Extended
jlab-bot opened issue jlab-cluster/helm-charts#128 2026-10-13 13:25:48 +02:00
Konvention: was ein "plain app-version bump" ist - ein Patch hat eine Sicherheitsvorgabe gekippt
jlab-bot commented on issue jlab-cluster/helm-charts#123 2026-10-13 12:58:34 +02:00
stalwart: MTA-STS-Routen als pflegbare Liste im Chart, Subdomaenen eingeschlossen

Zwei Korrekturen am Rumpf, beide nach dem Messen

1. Meine CORS-Begründung war falsch

Der Rumpf und mein Auftrag an den Agenten behaupten, in #120 seien „mit genau dieser Begründung" —…