v0.2 — Kubernetes management tab + fat-privileged container + CI repair - #1

Merged

tm4rtin17 merged 25 commits into

mainfrom

v0.2

May 9, 2026

Commits on May 8, 2026

logs: docker-logs fallback + clean 503 + Tailscale banner fix
tm4rtin17
committed
638fbdb
gitignore: ignore .claude/ and stray *.crt files
tm4rtin17
committed
8627e08
nav: hide Services / Containers tabs when backend lacks the capability
tm4rtin17
committed
395b640
docker: initialize slice/map fields so JSON encodes [] / {} not null
tm4rtin17
committed
74dd538
k8s: Phase A read-only Kubernetes tab + in-cluster deployment
tm4rtin17
committed
9e2d3fe
k8s: Phase B detail drawers + pod log streaming
tm4rtin17
committed
dff99cc

Commits on May 9, 2026

deploy: wire kubeconfig into docker-compose so K8s tab works
tm4rtin17
committed
246a6c7
deploy: fat-privileged container — host shell, journal, services, apt, network
tm4rtin17
committed
f52c126
terminal: spawn /bin/login (PAM auth) instead of root shell by default
tm4rtin17
committed
2d353e7
terminal: use bash+su instead of login(1) for the host-credentials prompt
tm4rtin17
committed
f0ca1f7
terminal: drop to nobody before su so PAM actually authenticates
tm4rtin17
committed
aca5187
network: initialize slice fields so JSON encodes [] / {} not null
tm4rtin17
committed
83deeaa
docs: refresh README + INSTALL + SECURITY for v0.2; add CONFIG.md
tm4rtin17
committed
f58ccf3
k8s: Phase C lifecycle actions — restart, scale, delete pod, cordon
tm4rtin17
committed
7755b9a
k8s: Phase D1 — pod exec via SPDY → WebSocket bridge
tm4rtin17
committed
4ffa357
k8s: Phase D2 — ConfigMap viewer + editor
tm4rtin17
committed
33d3b0c
ci: fix workflow drift — Go from go.mod, correct embed path, v* trigger
tm4rtin17
committed
f7917ac
ci: fix invalid YAML in 'inspect image size' step
tm4rtin17
committed
8ad0356
ci: track package-lock.json + bump golangci-lint to v2.5.0
tm4rtin17
committed
675dbb9
ci: add .golangci.yml + fix the two real lint findings
tm4rtin17
committed
0673ce8
ci: align Dockerfile COPY with vite outDir (web/dist, not internal/web/dist)
tm4rtin17
committed
c8fb01c
k8s: Phase D3 — read-only Secret viewer (masked + per-read audit)
tm4rtin17
committed
8bb8564
k8s: Phase D4 — Monaco YAML editor (Get + Update with dry-run)
tm4rtin17
committed
72b454d
deploy: declare controlroom-data volume as external
tm4rtin17
committed
a4187c8
docs: changelog + D3/D4 + volume-external for v0.2 release
tm4rtin17
committed
c49b84e

Navigation Menu

v0.2 — Kubernetes management tab + fat-privileged container + CI repair - #1

v0.2 — Kubernetes management tab + fat-privileged container + CI repair#1
tm4rtin17 merged 25 commits into
mainfrom
v0.2

Commits on May 8, 2026

logs: docker-logs fallback + clean 503 + Tailscale banner fix

gitignore: ignore .claude/ and stray *.crt files

nav: hide Services / Containers tabs when backend lacks the capability

docker: initialize slice/map fields so JSON encodes [] / {} not null

k8s: Phase A read-only Kubernetes tab + in-cluster deployment

k8s: Phase B detail drawers + pod log streaming

Commits on May 9, 2026

deploy: wire kubeconfig into docker-compose so K8s tab works

deploy: fat-privileged container — host shell, journal, services, apt, network

terminal: spawn /bin/login (PAM auth) instead of root shell by default

terminal: use bash+su instead of login(1) for the host-credentials prompt

terminal: drop to nobody before su so PAM actually authenticates

network: initialize slice fields so JSON encodes [] / {} not null

docs: refresh README + INSTALL + SECURITY for v0.2; add CONFIG.md

k8s: Phase C lifecycle actions — restart, scale, delete pod, cordon

k8s: Phase D1 — pod exec via SPDY → WebSocket bridge

k8s: Phase D2 — ConfigMap viewer + editor

ci: fix workflow drift — Go from go.mod, correct embed path, v* trigger

ci: fix invalid YAML in 'inspect image size' step

ci: track package-lock.json + bump golangci-lint to v2.5.0

ci: add .golangci.yml + fix the two real lint findings

ci: align Dockerfile COPY with vite outDir (web/dist, not internal/web/dist)

k8s: Phase D3 — read-only Secret viewer (masked + per-read audit)

k8s: Phase D4 — Monaco YAML editor (Get + Update with dry-run)

deploy: declare controlroom-data volume as external

docs: changelog + D3/D4 + volume-external for v0.2 release