-
c3b258847c
docs: drop the redundant README H1, centre the intro
jcoffey-dev
2026-08-22 21:30:04 -07:00
-
4685902ba9
docs: put the Cairn OBS logo at the top of the README
jcoffey-dev
2026-08-22 21:25:39 -07:00
-
5db3083696
Stop committing the alerting-evaluator service password
jcoffey-dev
2026-08-22 20:44:48 -07:00
-
5e6c0e918c
docs: correct the ClickHouse rotation runbook -- it had it backwards
jcoffey-dev
2026-08-22 20:41:49 -07:00
-
cf2d0437d3
ci: ignore RUSTSEC-2025-0134 (rustls-pemfile unmaintained) for agent
jcoffey-dev
2026-08-22 19:26:06 -07:00
-
81ee47b1cd
ci: fix the security scan, which has failed on every push
jcoffey-dev
2026-08-22 19:22:42 -07:00
-
99718d7252
docs: add ClickHouse credential rotation runbook
jcoffey-dev
2026-08-22 19:01:41 -07:00
-
03a4587a06
Correct the CLICKHOUSE_PASSWORD comment: it is a real secret now
jcoffey-dev
2026-08-22 18:58:44 -07:00
-
9690b657b2
Merge branch 'main' into work/demo-fleet-and-display-timezone
jcoffey-dev
2026-08-22 18:44:03 -07:00
-
-
7a86008062
Complete the low-risk half of the Sentry -> Cairn OBS rebrand
jcoffey-dev
2026-08-22 18:39:25 -07:00
-
774543da47
Fix stale provider binary name in .gitignore
jcoffey-dev
2026-08-22 18:30:28 -07:00
-
914c0af467
docs: split project status out of CLAUDE.md
jcoffey-dev
2026-08-22 18:28:43 -07:00
-
0add3c3607
docs: add repository README
jcoffey-dev
2026-08-22 18:20:46 -07:00
-
8e33f4cb0b
Adopt the v2 "faceted glow" logo package, with the wordmark outlined
jcoffey-dev
2026-08-22 17:26:26 -07:00
-
e9ab528c08
Read query times in the display timezone, and stop capping result width
jcoffey-dev
2026-08-22 16:15:41 -07:00
-
6ee918d15f
Let each user pick the timezone timestamps are displayed in
jcoffey-dev
2026-08-22 16:15:16 -07:00
-
04e83f64a9
Prefill the demo's login and say on its home page that it's a simulation
jcoffey-dev
2026-08-22 16:13:10 -07:00
-
bcb9a01cd6
Give the demo a live synthetic fleet, dashboards, and alert rules
jcoffey-dev
2026-08-22 16:12:35 -07:00
-
e6a58f58ea
Add a demo host-metrics fixture
jcoffey-dev
2026-08-22 16:12:35 -07:00
-
754996dbfd
Parse a query that starts with a pipe-stage keyword
jcoffey-dev
2026-08-22 16:12:17 -07:00
-
c920e0f2c4
Finish the Cairn OBS rename through services, docs, and assets
jcoffey-dev
2026-08-22 16:11:56 -07:00
-
-
13cf9a30cb
Rebrand: Sentry -> Cairn OBS
jcoffey-dev
2026-08-21 20:53:32 -07:00
-
9e21ea17bb
Fix log retention Settings section getting stuck on "Loading hosts…"
jcoffey-dev
2026-08-21 17:08:50 -07:00
-
653e4efa76
Enforce the full user-management RBAC matrix, add self-service password change
jcoffey-dev
2026-08-21 16:18:29 -07:00
-
5ff2e5bb60
Scope log retention deletion and floors to (host, service), not host alone
jcoffey-dev
2026-08-21 15:54:58 -07:00
-
087c52a64f
Scope log retention deletion to selected hosts, not the whole table
jcoffey-dev
2026-08-21 15:32:05 -07:00
-
a20bb5d1c7
Add per-agent log retention floor, owner-only to set or override
jcoffey-dev
2026-08-21 15:11:41 -07:00
-
787def06fd
Add owner/admin-only log retention deletion to Settings
jcoffey-dev
2026-08-21 14:49:18 -07:00
-
864e68253a
Give local users their own manager: custom passwords and role reassignment
jcoffey-dev
2026-08-21 14:23:52 -07:00
-
4b5dae5879
Add local login, agent extra log paths, IPv4/IPv6 metrics; remediate security audit findings
jcoffey-dev
2026-08-18 23:53:20 -07:00
-
d2bb9de245
Add sentryctl agents CLI surface
jcoffey-dev
2026-08-16 20:30:45 -07:00
-
21fb68a0d4
Document fleet-wide alerting via the raw-SQL escape hatch
jcoffey-dev
2026-08-16 20:30:20 -07:00
-
93c160ec51
Add agent restart lifecycle command
jcoffey-dev
2026-08-16 20:30:07 -07:00
-
3827d10e6e
benchmark-fixture: add -time-spread and -include-fatal flags
jcoffey-dev
2026-08-16 18:09:04 -07:00
-
4f0da1ae5e
Add agent inventory, management, and remote config
jcoffey-dev
2026-08-16 18:08:51 -07:00
-
4df6931869
Add agent heartbeat monitoring and fix a query-language lexer bug
jcoffey-dev
2026-08-16 18:08:05 -07:00
-
7d316f92db
Phase 7: AI-assisted query authoring (autocomplete, explain, fix, optimize, NL translation)
jcoffey-dev
2026-08-16 18:06:27 -07:00
-
661568085e
Phase 6: license-compliance audit and enterprise/ relicensing to AGPLv3
jcoffey-dev
2026-08-16 18:03:32 -07:00
-
595d1fe0fd
Document Phase 5: finalize design-system.md, add runbook, exit criteria
jcoffey-dev
2026-08-16 12:36:31 -07:00
-
9862bcccae
Populate tenant_id on new alert_state/delivery_log rows
jcoffey-dev
2026-08-16 12:36:21 -07:00
-
8ec370dcee
Redesign alerting UI: severity-colored state and a delivery timeline
jcoffey-dev
2026-08-16 12:36:10 -07:00
-
0e37ca6669
Redesign query/search: syntax highlighting, autocomplete, richer results
jcoffey-dev
2026-08-16 12:36:01 -07:00
-
45e0865a0c
Rebuild dashboard panels on the new chart layer
jcoffey-dev
2026-08-16 12:35:49 -07:00
-
5e8b3d8edd
Add a real charting layer and a heatmap panel type
jcoffey-dev
2026-08-16 12:35:40 -07:00
-
f1a68455e0
Build the ui/ component library and persistent app shell
jcoffey-dev
2026-08-16 12:35:25 -07:00
-
a6153c5f90
Build the Signal design system: tokens, fonts, theme, density
jcoffey-dev
2026-08-16 12:35:10 -07:00
-
fb502f3d31
Add ECharts, CodeMirror, and axe-core for Phase 5
jcoffey-dev
2026-08-16 12:34:59 -07:00
-
05d166cfa9
Document real kind-cluster verification, closing every runbook gap
jcoffey-dev
2026-08-15 18:22:01 -07:00
-
4b1b0e3b22
Fix two Helm chart bugs found running against a real kind cluster
jcoffey-dev
2026-08-15 18:19:44 -07:00
-
783d66786b
Document real Auth0 SAML verification, closing §3b -- the last SSO gap
jcoffey-dev
2026-08-15 18:08:25 -07:00
-
f5ca09f686
Honor X-Forwarded-Proto for cookie Secure, not just r.TLS
jcoffey-dev
2026-08-15 18:06:51 -07:00
-
17a2fda939
Document real Auth0 OIDC + tenant-picker verification, closing §3a/§12
jcoffey-dev
2026-08-15 17:46:35 -07:00
-
0452d1f921
Fix web/Dockerfile dropping two of its three VITE_* build args
jcoffey-dev
2026-08-15 17:46:27 -07:00
-
010f66ec70
Update Phase 4 docs: the ClickHouse-side live verification actually ran
jcoffey-dev
2026-08-15 17:17:35 -07:00
-
c5c68f22e9
Stop enterprise-api panicking on startup from a duplicate /healthz route
jcoffey-dev
2026-08-15 17:17:28 -07:00
-
86afe7a005
Treat a malformed data source id as ErrNotFound, not a raw pg error
jcoffey-dev
2026-08-15 17:17:22 -07:00
-
5365c92ffa
Validate panels in Store.AddPanel/UpdatePanel, not just at the handler
jcoffey-dev
2026-08-15 17:17:16 -07:00
-
e15a63408a
Revoke tenant users' system.* access explicitly, don't assume default-deny
jcoffey-dev
2026-08-15 17:17:11 -07:00
-
d9e4f22200
Fix enterprise-auth's Docker build context and ClickHouse admin access
jcoffey-dev
2026-08-15 17:17:03 -07:00
-
5a898cb43e
Phase 4 verification pass: re-run every Docker-free check, fix drift
jcoffey-dev
2026-08-15 16:29:05 -07:00
-
278b24cf67
Add sentry_dashboard_panel, resolving panels as their own resource
jcoffey-dev
2026-08-15 10:40:27 -07:00
-
eb38611aa8
Add read-only data sources for all three Terraform resources
jcoffey-dev
2026-08-15 10:28:08 -07:00
-
30ae84cd04
Add sentry_notification_target, closing the alert-rule-as-code loop
jcoffey-dev
2026-08-15 10:20:52 -07:00
-
b98f397221
Add sentry_alert_rule, the Terraform provider's second resource
jcoffey-dev
2026-08-15 00:15:45 -07:00
-
49dd050689
Start the Terraform provider: sentry_dashboard, the first resource
jcoffey-dev
2026-08-15 00:06:26 -07:00
-
2e8ab1ed6a
Give chwriter.Registry periodic refresh, matching Tantivy's tracker
jcoffey-dev
2026-08-14 23:55:40 -07:00
-
088677643f
Close search's active-tenant write-routing gap with a polled allowlist
jcoffey-dev
2026-08-14 23:47:25 -07:00
-
5a845f06ee
Add rbacstore.TransferOwner and enterprise-auth -transfer-owner-*
jcoffey-dev
2026-08-14 23:30:05 -07:00
-
3cf1320881
Add sentryctl dashboards permissions list|grant|revoke
jcoffey-dev
2026-08-14 23:09:33 -07:00
-
abeee0076b
Build and browser-verify the tenant-picker frontend page
jcoffey-dev
2026-08-14 23:02:09 -07:00
-
bdd42e06f6
Build per-tenant Tantivy write-routing, closing the last ingest write gap
jcoffey-dev
2026-08-14 20:16:09 -07:00
-
1de77b969f
Build per-tenant ClickHouse write-routing for ingest (Tantivy still deferred)
jcoffey-dev
2026-08-14 19:26:09 -07:00
-
17fdc212c2
Give ingest a real tenant identity (write-routing deferred, disclosed)
jcoffey-dev
2026-08-14 15:21:55 -07:00
-
d2c76aa3a4
Build the tenant-picker backend protocol (no frontend yet, by design)
jcoffey-dev
2026-08-14 14:04:37 -07:00
-
cfcbc77507
Add enterprise-auth -revoke-membership-*/-list-memberships-tenant flags
jcoffey-dev
2026-08-14 09:11:01 -07:00
-
823f5d48d1
Unify the Tenant CRD with enterprise-api -provision-tenant (lightweight)
jcoffey-dev
2026-08-14 09:07:10 -07:00
-
8d7326fc6a
Make docker-compose.yml enforce the api/enterprise-api binary swap
jcoffey-dev
2026-08-14 08:17:41 -07:00
-
2e698f5623
Close the last tenant-isolation adversarial probe (mid-provisioning tenants)
jcoffey-dev
2026-08-14 08:07:52 -07:00
-
b8b6a8fd7b
Add enterprise-auth -create-tenant/-grant-membership-* operator flags
jcoffey-dev
2026-08-14 07:57:33 -07:00
-
243f4dc2ab
Enforce per-resource dashboard grants (RBAC matrix's own/granted qualifier)
jcoffey-dev
2026-08-14 07:11:18 -07:00
-
08a90a27aa
Build SAML login (enterprise/internal/loginhandler), mirroring OIDC
jcoffey-dev
2026-08-14 06:39:36 -07:00
-
3037b31b0f
Phase 4: Helm chart enforces api vs enterprise-api, closing the deployment-topology gap
jcoffey-dev
2026-08-14 06:20:20 -07:00
-
ba2276aa1a
Phase 4: real Tantivy per-tenant isolation (search/src/registry.rs, enterprise/internal/searchclient)
jcoffey-dev
2026-08-13 23:16:22 -07:00
-
1fab02abd5
Phase 4: real OIDC human login (enterprise/internal/loginhandler)
jcoffey-dev
2026-08-13 23:00:35 -07:00
-
1d57e697b1
Phase 4: real per-tenant ClickHouse isolation via a new enterprise-api binary
jcoffey-dev
2026-08-13 22:48:38 -07:00
-
3eb0f4c589
Phase 4: SSO scaffolding, RBAC enforcement, tenant-scoped dashboards, audit logging, K8s deployment
jcoffey-dev
2026-08-13 22:16:59 -07:00
-
9435115ab7
Phase 3: dashboards and alerting
jcoffey-dev
2026-08-13 17:29:38 -07:00
-
fb5049a747
Phase 2: unified query language spanning ClickHouse and Tantivy
jcoffey-dev
2026-08-13 12:21:42 -07:00
-
cd8aa290ca
Phase 1: Windows log collection + full-text search
jcoffey-dev
2026-08-13 11:27:35 -07:00
-
fe854b1091
Fix two bugs found by actually running the Phase 0 pipeline end-to-end
jcoffey-dev
2026-08-13 09:31:44 -07:00
-
b6b092c912
Scaffold Phase 0: agent -> Redpanda -> ingest -> ClickHouse -> api -> web
jcoffey-dev
2026-08-13 08:25:19 -07:00