v0.2 — Kubernetes management tab + fat-privileged container + CI repair#1

Merged

tm4rtin17 merged 25 commits into

mainfrom

v0.2

May 9, 2026

Commits on May 8, 2026

Commits on May 9, 2026

deploy: wire kubeconfig into docker-compose so K8s tab works
tm4rtin17
committed
deploy: fat-privileged container — host shell, journal, services, apt, network
tm4rtin17
committed
terminal: spawn /bin/login (PAM auth) instead of root shell by default
tm4rtin17
committed
terminal: use bash+su instead of login(1) for the host-credentials prompt
tm4rtin17
committed
terminal: drop to nobody before su so PAM actually authenticates
tm4rtin17
committed
network: initialize slice fields so JSON encodes [] / {} not null
tm4rtin17
committed
docs: refresh README + INSTALL + SECURITY for v0.2; add CONFIG.md
tm4rtin17
committed
k8s: Phase C lifecycle actions — restart, scale, delete pod, cordon
tm4rtin17
committed
k8s: Phase D1 — pod exec via SPDY → WebSocket bridge
tm4rtin17
committed
k8s: Phase D2 — ConfigMap viewer + editor
tm4rtin17
committed
ci: fix workflow drift — Go from go.mod, correct embed path, v* trigger
tm4rtin17
committed
ci: fix invalid YAML in 'inspect image size' step
tm4rtin17
committed
ci: track package-lock.json + bump golangci-lint to v2.5.0
tm4rtin17
committed
ci: add .golangci.yml + fix the two real lint findings
tm4rtin17
committed
ci: align Dockerfile COPY with vite outDir (web/dist, not internal/web/dist)
tm4rtin17
committed
k8s: Phase D3 — read-only Secret viewer (masked + per-read audit)
tm4rtin17
committed
k8s: Phase D4 — Monaco YAML editor (Get + Update with dry-run)
tm4rtin17
committed
deploy: declare controlroom-data volume as external
tm4rtin17
committed
docs: changelog + D3/D4 + volume-external for v0.2 release
tm4rtin17
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

v0.2 — Kubernetes management tab + fat-privileged container + CI repair#1

v0.2 — Kubernetes management tab + fat-privileged container + CI repair#1
tm4rtin17 merged 25 commits into
mainfrom
v0.2

Commits on May 8, 2026

logs: docker-logs fallback + clean 503 + Tailscale banner fix

gitignore: ignore .claude/ and stray *.crt files

nav: hide Services / Containers tabs when backend lacks the capability

docker: initialize slice/map fields so JSON encodes [] / {} not null

k8s: Phase A read-only Kubernetes tab + in-cluster deployment

k8s: Phase B detail drawers + pod log streaming

Commits on May 9, 2026

deploy: wire kubeconfig into docker-compose so K8s tab works

deploy: fat-privileged container — host shell, journal, services, apt, network

terminal: spawn /bin/login (PAM auth) instead of root shell by default

terminal: use bash+su instead of login(1) for the host-credentials prompt

terminal: drop to nobody before su so PAM actually authenticates

network: initialize slice fields so JSON encodes [] / {} not null

docs: refresh README + INSTALL + SECURITY for v0.2; add CONFIG.md

k8s: Phase C lifecycle actions — restart, scale, delete pod, cordon

k8s: Phase D1 — pod exec via SPDY → WebSocket bridge

k8s: Phase D2 — ConfigMap viewer + editor

ci: fix workflow drift — Go from go.mod, correct embed path, v* trigger

ci: fix invalid YAML in 'inspect image size' step

ci: track package-lock.json + bump golangci-lint to v2.5.0

ci: add .golangci.yml + fix the two real lint findings

ci: align Dockerfile COPY with vite outDir (web/dist, not internal/web/dist)

k8s: Phase D3 — read-only Secret viewer (masked + per-read audit)

k8s: Phase D4 — Monaco YAML editor (Get + Update with dry-run)

deploy: declare controlroom-data volume as external

docs: changelog + D3/D4 + volume-external for v0.2 release