Pal E Platform Board

issue Phase 30: Mac CI Agent — iOS Build Infrastructure 5pt

Woodpecker CI: tofu plan on PR, apply on merge (services)

type:feature arch:ci-pipeline story:superuser-deploy scope:ci

↑ ↓

issue Phase 30: Mac CI Agent — iOS Build Infrastructure 5pt

Woodpecker CI: tofu plan on PR, apply on merge (platform)

type:feature arch:ci-pipeline story:superuser-deploy scope:ci

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-services/issues/189

type:spike arch:infra story:cd-pipeline scope:unplanned

↑ ↓

issue

#325 Re-add pod-failure coverage after disabling kubernetesApps default rules

type:bug scope:discovered arch:monitoring story:superuser-observe discovered-during:alert-audit-2026-05-01

↑ ↓

issue

westside-admin#22: expose refresh_expires_in for cookie Max-Age

story:admin-row-crud arch:westside-admin arch:keycloak type:feature

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/331

type:bug arch:k3s story:superuser-onboard-service

↑ ↓

issue

Reduce alert noise + add payment pipeline observability

type:feature arch:monitoring story:superuser-observe

↑ ↓

issue

#114 Three e2e UI assertions failing on prod + preview — investigate and fix

type:bug scope:discovered story:superuser-deploy arch:pal-e-app

↑ ↓

issue

#115 Skip Keycloak-required e2e tests when VITE_KEYCLOAK_URL is unset

type:bug scope:discovered story:superuser-deploy arch:pal-e-app

↑ ↓

issue

#324 Add blackbox probes for westside-contracts, westside-email, westside-ai-assistant

type:feature scope:discovered arch:monitoring arch:blackbox story:superuser-observe discovered-during:alert-audit-2026-05-01

↑ ↓

issue

#275 Debug pal-e-docs container OOMKilled (chronic)

type:bug scope:discovered arch:pal-e-api story:platform-stability discovered-during:alert-audit-2026-05-01

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/gmail-mcp/issues/10

type:bug scope:discovered arch:google-oauth story:platform-reliability

↑ ↓

issue

#327 Raise argocd-application-controller memory limit (chronic OOMKilled)

type:bug scope:discovered arch:argocd story:platform-stability discovered-during:alert-audit-2026-05-01

↑ ↓

issue

westside-admin#19: CI vitest step in .woodpecker.yaml

story:admin-row-crud arch:westside-admin type:feature

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/237

type:feature arch:forgejo story:portfolio scope:discovered

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/241

type:bug arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/245

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue

Revert tfvars corruption: pal-e-production → pal-e-docs-app

type:bug arch:k8s-deploy story:superuser-deploy scope:discovered

↑ ↓

issue

Enable Keycloak event logging for login/logout/error events

type:feature arch:keycloak story:superuser-observe

↑ ↓

issue

Woodpecker push-to-main pipelines fail — queue/ack errors

type:bug arch:ci-pipeline scope:discovered story:superuser-deploy

↑ ↓

issue

Decide: should pal-e-docs-app service exist?

type:feature arch:k8s-deploy story:superuser-deploy scope:discovered depends:51

↑ ↓

issue

Woodpecker pipeline restart skips deploy steps

type:bug arch:ci-pipeline arch:woodpecker scope:discovered story:superuser-deploy

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/272

type:bug scope:unplanned arch:monitoring story:WS-S18

↑ ↓

issue

Grafana dashboard: auth activity (logins, failures, active users)

type:feature arch:monitoring arch:grafana story:superuser-observe

↑ ↓

issue

fix: formalize pal-e-production ArgoCD app + harbor credentials post-rename

type:tech-debt arch:argocd story:superuser-deploy

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/572

type:bug arch:infra story:platform-ops

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/276

type:bug arch:keycloak scope:discovered story:superuser-deploy

↑ ↓

issue

Bug: Woodpecker webhook not firing on Forgejo squash merge

type:bug arch:woodpecker arch:forgejo scope:discovered story:superuser-deploy

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/114

type:feature scope:unplanned arch:pal-e-docs story:superuser-deploy

↑ ↓

issue 5pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-services/issues/91

type:bug scope:unplanned arch:forgejo story:ci-cd-pipeline

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/332

type:feature arch:salt story:superuser-deploy

↑ ↓

issue

pal-e-platform#334 [POST-INCIDENT] postgres NP missing pal-e-docs after #287 rename

story:superuser-recover arch:network-policy type:bug severity:p0 scope:retroactive

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/67

type:bug arch:k8s-deploy story:platform-stability blocks:pr-65 discovered-during:westside-admin-bootstrap

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/370

type:bug arch:k8s-deploy story:superuser-deploy priority:p0 sprint:platform-cleanup

↑ ↓

issue

Delete stale overlays/pal-e-production/ directory

type:bug scope:unplanned story:platform-bootstrap arch:pal-e-deployments

↑ ↓

issue

Draft "Rename Audit" SOP

type:feature scope:unplanned story:platform-bootstrap arch:pal-e-docs

↑ ↓

issue

Audit all overlays for stale pal-e-production drift

type:spike scope:unplanned story:platform-bootstrap arch:pal-e-deployments

↑ ↓

issue

CORS preflight synthetic monitor

type:feature scope:unplanned story:platform-bootstrap arch:observability

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/303

type:chore arch:keycloak story:platform-traceability discovered-during:westside-admin-bootstrap

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/306

type:chore arch:salt story:admin-row-crud blocks:pr-304 discovered-during:westside-admin-bootstrap

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/66

type:bug arch:harbor story:platform-stability discovered-during:westside-admin-bootstrap

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/305

type:bug arch:claude-harness story:agent-dispatch-ergonomics discovered-during:westside-admin-bootstrap

↑ ↓

issue 3pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/411

type:bug scope:unplanned arch:terraform story:platform-hygiene

↑ ↓

issue

ArgoCD Image Updater cannot reach Harbor (harbor-core timeout)

type:bug arch:argocd arch:harbor story:platform-stability scope:discovered

↑ ↓

issue 3pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/412

type:bug scope:unplanned arch:terraform story:platform-hygiene

↑ ↓

issue

#295 Alert + dashboard for pending orders with expired Stripe sessions

type:feature story:observability arch:payment-pipeline

↑ ↓

issue 2pt

Fix Woodpecker CI validate-overlays kubeconfig error

type:bug arch:ci-cd story:infra

↑ ↓

issue

Validate: pal-e-deployments (k8s API unreachable)

type:task arch:k8s-deploy story:superuser-deploy scope:validation

↑ ↓

issue 3pt

Codify Keycloak public ingress IaC

type:feature arch:keycloak arch:edge-proxy story:custom-domains

↑ ↓

issue

#300 SOP harden: sop-postgres-restore Step 5 (real-DR swap) — PDB + ArgoCD lock + service collision

type:feature scope:discovered severity:p2 story:superuser-recover arch:cnpg

↑ ↓

issue 1pt

Update KEYCLOAK_URL for landscaping-assistant

type:feature arch:keycloak story:custom-domains

↑ ↓

issue

#323 Fix Alertmanager inhibit rule for Gmail OAuth duplicate alerts

type:bug scope:discovered arch:monitoring arch:alertmanager story:superuser-observe discovered-during:alert-audit-2026-05-01

↑ ↓

issue

#328 Westside-unified Grafana dashboard

type:feature scope:discovered arch:monitoring arch:grafana story:superuser-observe discovered-during:alert-audit-2026-05-01

↑ ↓

issue

#330 WebhookStale: add "first webhook of day" precondition for low-traffic mornings

type:feature scope:discovered arch:monitoring arch:payment-pipeline story:superuser-observe discovered-during:pr-329-review

↑ ↓

issue

Stop ArgoCD label drift on terraform-managed resources

type:feature story:superuser-deploy arch:argocd arch:terraform

↑ ↓

issue

#326 Time-window MacAgentDown alert (laptop offline outside work hours is expected)

type:bug scope:discovered arch:monitoring arch:ci-pipeline story:superuser-observe discovered-during:alert-audit-2026-05-01

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/311

type:chore arch:forgejo story:platform-stability discovered-during:westside-admin-bootstrap

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/321

type:bug arch:ci-pipeline story:platform-stability recurring blocks:infra-prs discovered-during:westside-admin-bootstrap

↑ ↓

issue

#322 Gmail OAuth auto-reauth cron not running — westside email broken 2+ days

type:bug scope:discovered severity:p1 arch:google-oauth story:platform-reliability discovered-during:alert-audit-2026-05-01

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/minio-api/issues/8

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue

Validate: pal-e-platform (3 merged + #222 pending)

type:task arch:ci-pipeline story:superuser-deploy scope:validation

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/97

type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/resume-playground/issues/1

type:feature arch:playground story:portfolio

↑ ↓

issue

SSO: Wire Forgejo → Keycloak OIDC

story:superuser-sso arch:forgejo type:feature

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/371

type:bug arch:k8s-deploy story:superuser-deploy priority:p0 sprint:platform-cleanup

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-services/issues/77

type:bug arch:ci-pipeline story:superuser-deploy priority:p1 sprint:platform-cleanup

↑ ↓

issue 3pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/372

type:bug arch:k8s-deploy story:superuser-deploy priority:p1 sprint:platform-cleanup

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/373

type:bug arch:k8s-deploy story:superuser-observe priority:p1 sprint:platform-cleanup

↑ ↓

issue 3pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/374

type:feature arch:k8s-deploy story:superuser-deploy priority:p2 sprint:platform-cleanup

↑ ↓

issue

pal-e-admin: Scaffold SvelteKit app + Keycloak OIDC auth

story:superuser-sso arch:pal-e-admin type:feature

↑ ↓

issue

pal-e-admin: Prod + dev deployment overlays

story:superuser-sso arch:pal-e-admin type:feature

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/375

type:spike arch:k8s-deploy story:superuser-deploy priority:p2 sprint:platform-cleanup

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

westside-admin#16: /auth/login, /callback, /logout endpoints

story:admin-row-crud arch:westside-admin arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

westside-admin#17: (unauthorized) 403 page

story:admin-row-crud arch:westside-admin type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Feature: Harden secrets gitignore + tfvars.example

type:feature story:WS-S1 arch:secrets

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/242

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/244

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Change Tailscale SSH ACL from "check" to "accept"

type:feature arch:networking story:superuser-remote-access

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 3pt

ArgoCD: switch all apps to internal Forgejo URL

type:feature arch:k8s-deploy scope:argocd depends:137

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

SSO: Create platform realm + ldraney admin user

story:superuser-sso arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/345

story:superuser-mobile arch:harbor type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/346

story:superuser-mobile arch:minio type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/347

story:superuser-mobile arch:forgejo type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/348

story:superuser-mobile arch:pal-e-admin type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-app/issues/118

story:superuser-mobile arch:pal-e-app type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Python repo standards: ruff pre-commit hooks + repo setup template

type:feature arch:ci-pipeline arch:developer-tooling story:superuser-deploy

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Clean up pal-e-playground repo

type:feature arch:tailscale-funnel scope:playground story:superuser-deploy

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Woodpecker agent label routing — pipeline contract

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

westside-admin#15: hooks.server.ts + app.d.ts

story:admin-row-crud arch:westside-admin arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

westside-admin: Keycloak cookie SSR auth + admin role gate

story:admin-row-crud arch:westside-admin arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

westside-admin#14: keycloak.ts lib (JWKS+JWT+AES+state)

story:admin-row-crud arch:westside-admin arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 3pt

Secrets pillar validation gate + missing Woodpecker secrets

type:feature scope:platform-hardening discovered-scope

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 5pt

Import Keycloak realms/clients into Terraform

scope:phase-28 type:feature repo:pal-e-services

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 2pt

gmail-mcp: SSH-compatible gmail_reauth tool

arch:google-oauth type:feature scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Add computed_fields to CNPG kubernetes_manifest resources to silence operator-injection drift

type:feature story:superuser-deploy arch:cnpg arch:terraform

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Reconcile cnpg_scheduled_backup cron format drift

type:feature story:superuser-deploy arch:cnpg arch:terraform

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

secrets(westside-admin): land real KEYCLOAK_CLIENT_SECRET

story:superuser-onboard-service arch:keycloak type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

SOP: Harbor robot import recovery

type:feature story:superuser-recover arch:harbor arch:terraform

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Keycloak realm config via Terraform provider

type:feature scope:platform-hardening discovered-scope arch:keycloak story:WS-S3

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Validation pipeline: dev → staging → prod tiers

type:feature arch:validation-pipeline arch:ci-pipeline story:superuser-validate

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Automate Gmail OAuth re-auth lifecycle (7-day token expiry)

arch:google-oauth type:feature scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 1pt

MinIO network policy: allow pal-e-mail ingress

type:feature scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 5pt

Automate image tag updates in pal-e-deployments

type:feature scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 1pt

Allow westside-contracts ingress to MinIO

type:feature scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

CI pipeline targeted apply (depends on #197)

type:feature arch:ci-pipeline arch:terraform story:superuser-deploy

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 2pt

Public CDN: MinIO assets bucket public-read + public funnel

type:feature scope:discovered blocks:email-images

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Bump agent parallel workflows 1→4

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Terraform state splitting — modularize main.tf

type:feature arch:terraform story:superuser-deploy story:platform-reliability

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Rollout: wire update-kustomize-tag into remaining repos

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Migrate all apps to pal-e-deployments

type:feature arch:argocd arch:kustomize story:superuser-deploy story:platform-reliability

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 8pt

#138: Split-horizon DNS — fix intra-cluster TLS hairpin

type:feature scope:platform-infrastructure priority:critical

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations 2pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/minio-sdk/issues/3

type:bug scope:minio

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Fix wget auth for update-kustomize-tag (4 repos)

type:feature arch:ci-pipeline story:superuser-deploy scope:discovered

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Feature: SOP — validation pipeline [ALREADY EXISTS]

type:feature story:WS-S1 arch:process

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Feature: SOP — secrets management [ALREADY EXISTS]

type:feature story:WS-S1 arch:secrets

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

SSO: Wire Grafana → Keycloak OIDC

story:superuser-sso arch:grafana type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

SSO: Wire Harbor → Keycloak OIDC

story:superuser-sso arch:harbor type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

SSO: Wire MinIO → Keycloak OIDC

story:superuser-sso arch:minio type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

Playground: Protect behind Keycloak + point at pal-e-docs-app

story:superuser-docs-frontend arch:playground type:feature

↑ ↓

issue Phase 24: MinIO SDK — S3 Signature V4 + Core Operations

pal-e-docs-app: Dev environment with hot-reload overlay

story:superuser-docs-frontend arch:pal-e-docs type:feature

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/319

type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap

↑ ↓

issue

[BUG] #24: SSR auth loops — session cookie 4719B exceeds 4KB browser limit

story:admin-row-crud arch:westside-admin arch:keycloak type:bug

↑ ↓

issue

[BUG] #26: verifyKeycloakJwt rejects valid tokens (aud=account, expected westside-admin)

story:admin-row-crud arch:westside-admin arch:keycloak type:bug

↑ ↓

issue

Bug: CI wget retry — all 4 repos merged

type:bug story:WS-S1 arch:ci-pipeline

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/243

type:bug arch:worktree story:superuser-deploy scope:discovered

↑ ↓

issue

Bug: update-kustomize-tag skipped when CI tests fail

type:bug arch:woodpecker scope:discovered story:superuser-deploy

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-api/issues/258

type:bug scope:unplanned arch:pal-e-docs story:superuser-deploy

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/579

arch:keycloak type:bug story:superuser-deploy

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/317

type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/29

type:cleanup arch:k8s-deploy tier:1.5-cleanup

↑ ↓

issue

Fix Woodpecker agent secret duplication

story:superuser-deploy arch:ci-pipeline type:bug

↑ ↓

issue

nftables reload-after-tailscale

type:bug arch:tailscale-subnet scope:firewall

↑ ↓

issue

Mac build agent — Salt managed with observability

story:superuser-deploy arch:ci-pipeline type:infra

↑ ↓

issue

Add cross-pillar review Woodpecker step

status:approved

↑ ↓

issue

Kustomize Phase 1: Base structure + migrate pal-e-docs to centralized overlay

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/45

type:cleanup arch:k8s-deploy tier:1.5-cleanup

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/95

type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered pr:98

↑ ↓

issue 2pt

#152: NetworkPolicy field manager conflicts block apply

type:bug arch:ci-pipeline scope:network-policy priority:critical

↑ ↓

issue 5pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/153

type:infra arch:tailscale-funnel scope:unplanned

↑ ↓

issue

Tailscale Connector — k8s subnet router

story:superuser-deploy arch:tailscale-subnet type:infra

↑ ↓

issue

P1: validate sop-postgres-restore via dry-run drill (blocks #297)

type:spike scope:unplanned severity:p1 story:superuser-recover arch:cnpg

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/451

type:bug scope:unplanned arch:edge-proxy story:custom-domains

↑ ↓

issue

fix: basketball-api network policy missing self + westside-contracts ingress

story:PLAT-S1 arch:network-security type:bug scope:discovered

↑ ↓

issue

P0: pal-e-services tf state drifted — prod postgres in blast radius

type:bug scope:unplanned severity:p0 story:superuser-deploy arch:pal-e-services

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/312

type:chore arch:ci-pipeline story:platform-stability discovered-during:westside-admin-bootstrap

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/307

type:bug arch:ci-pipeline story:platform-stability recurring blocks:infra-prs

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/315

type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap

↑ ↓

issue 3pt

#151: Apply step exit code broken — lock detection dead

type:bug arch:ci-pipeline scope:ci priority:critical

↑ ↓

issue

Bug: Blackbox probe TLS failure on pal-e-app funnel

type:bug scope:unplanned track:devops story:superuser-observe arch:blackbox-exporter arch:tailscale-funnel

↑ ↓

issue

Bug: platform-validation OOMKilled at 64Mi + stale alert rule

type:bug scope:unplanned track:devops story:superuser-observe story:superuser-deploy arch:prometheus

↑ ↓

issue

Critical: Migrate basketball-api Postgres to CNPG

type:bug scope:unplanned arch:postgres story:WS-S5

↑ ↓

issue 8pt

Issue #109: Platform cleanup — resolve 15 alerts + stabilize CI

type:ops scope:platform-hardening

↑ ↓

issue

Bug: Harbor connectivity timeout from Woodpecker CI agent

type:bug scope:unplanned arch:ci-pipeline story:superuser-deploy type:incident

↑ ↓

issue 5pt

Bug #107: TLS clone failures in Woodpecker CI

type:bug scope:ci

↑ ↓

issue 1pt

Update service onboarding SOP with Keycloak docs

scope:phase-28 type:docs repo:pal-e-services depends:23 story:superuser-onboard-service

↑ ↓

issue 2pt

#112: ArgoCD repo-server memory bump (1 alert)

type:bug scope:argocd

↑ ↓

issue 2pt

#111: Fix Keycloak probe (1 alert)

type:bug scope:observability

↑ ↓

issue 8pt

#110: Fix westside-app Harbor auth (4 alerts)

type:bug scope:westside priority:critical

↑ ↓

issue 2pt

Bug: contract signatures publicly exposed via MinIO CDN

type:bug arch:minio priority:high discovered-scope

↑ ↓

issue

Bug: pal-e-mail ServiceMonitor scraping nonexistent /metrics

type:bug scope:unplanned track:devops story:superuser-observe arch:servicemonitor

↑ ↓

issue 3pt

#113: Apply Terraform state drift (3 alerts)

type:ops scope:terraform

↑ ↓

issue 2pt

Spike: validate Phase 28 Keycloak + secrets

type:spike scope:phase-28 repo:pal-e-services

↑ ↓

issue 1pt

Remove SendGrid dependency — Gmail OAuth covers all email

type:cleanup scope:discovered story:superuser-deploy

↑ ↓

issue

Bug: CronJob stale failures causing persistent KubeJobFailed alerts

type:bug scope:unplanned track:devops story:superuser-observe arch:prometheus

↑ ↓

issue

Critical: Re-establish orphaned CNPG cluster manifest

type:bug scope:unplanned arch:postgres

↑ ↓

issue 1pt

#115: Remove capacitor-dev (3 alerts)

type:cleanup scope:noise-reduction

↑ ↓

issue 1pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/33

type:bug scope:unplanned

↑ ↓

issue 5pt

#121: CI clone broken — Forgejo internal URL unreachable

type:bug scope:ci priority:critical

↑ ↓

issue 2pt

#123: tofu-state backup CronJob failures (2 alerts)

type:bug scope:backup story:superuser-recover

↑ ↓

issue

Kaniko HTTPS probe timeout — insecure-registry fix

type:bug arch:ci-pipeline arch:harbor story:superuser-deploy scope:discovered

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/35

type:bug arch:tailscale-funnel scope:discovered repo:pal-e-services story:superuser-deploy

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/203

type:bug arch:k8s-deploy scope:argocd story:superuser-deploy

↑ ↓

issue

ArgoCD repo_url :80 port mismatch — blocks tofu apply

type:bug arch:argocd story:superuser-deploy scope:discovered

↑ ↓

issue

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/204

type:bug arch:ci-pipeline scope:automation story:superuser-deploy

↑ ↓

issue

Eliminate Tailscale hairpin — ArgoCD + image updater internal URLs

type:bug arch:argocd arch:tailscale-funnel story:superuser-deploy story:platform-reliability

↑ ↓

issue

Remove non-functional gRPC funnel

type:bug arch:ci-pipeline scope:cleanup

↑ ↓

issue

Rotate Woodpecker API token in Salt pillar + consumers

type:security arch:ci-pipeline scope:secrets

↑ ↓

issue

ArgoCD CMP sidecar fails to render kustomize+SOPS overlays

type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered

↑ ↓

issue

Apply 5+ pending terraform changes (ArgoCD migrations)

type:task arch:argocd arch:terraform story:superuser-deploy scope:validation depends:#224

↑ ↓

issue 5pt

#135: Harbor unreachable from CI pods

type:bug scope:ci priority:critical story:superuser-deploy

↑ ↓

issue 3pt

#133: CI pipeline broken — replace clone with alpine/git

type:bug scope:ci priority:critical

↑ ↓

issue 5pt

#137: Woodpecker agent secret drift — blocks safe apply

type:bug scope:secrets priority:critical story:superuser-deploy

↑ ↓

issue

Apply 6 pending terraform changes (validation drift)

type:task arch:terraform story:superuser-deploy scope:validation parent:#223

↑ ↓

issue

Bug: basketball-api deploy blocked — env var value/valueFrom conflict

type:bug story:WS-S1 arch:deployments

↑ ↓

issue 3pt

#125: Spike — CI bootstrap resilience

type:spike scope:platform-resilience story:superuser-deploy

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/154

type:bug arch:postgres tier:1.5-operational-excellence

↑ ↓

issue 2pt

https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/46

type:bug arch:k8s-deploy tier:1.5-operational-excellence

↑ ↓