pal-e-docs

Pal E Platform Board

Backlog 73
issue
#325 Re-add pod-failure coverage after disabling kubernetesApps default rules
type:bug scope:discovered arch:monitoring story:superuser-observe discovered-during:alert-audit-2026-05-01
issue
westside-admin#22: expose refresh_expires_in for cookie Max-Age
story:admin-row-crud arch:westside-admin arch:keycloak type:feature
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/331
type:bug arch:k3s story:superuser-onboard-service
issue
Reduce alert noise + add payment pipeline observability
type:feature arch:monitoring story:superuser-observe
issue
#114 Three e2e UI assertions failing on prod + preview — investigate and fix
type:bug scope:discovered story:superuser-deploy arch:pal-e-app
issue
#115 Skip Keycloak-required e2e tests when VITE_KEYCLOAK_URL is unset
type:bug scope:discovered story:superuser-deploy arch:pal-e-app
issue
#324 Add blackbox probes for westside-contracts, westside-email, westside-ai-assistant
type:feature scope:discovered arch:monitoring arch:blackbox story:superuser-observe discovered-during:alert-audit-2026-05-01
issue
#275 Debug pal-e-docs container OOMKilled (chronic)
type:bug scope:discovered arch:pal-e-api story:platform-stability discovered-during:alert-audit-2026-05-01
issue 1pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/gmail-mcp/issues/10
type:bug scope:discovered arch:google-oauth story:platform-reliability
issue
#327 Raise argocd-application-controller memory limit (chronic OOMKilled)
type:bug scope:discovered arch:argocd story:platform-stability discovered-during:alert-audit-2026-05-01
issue
westside-admin#19: CI vitest step in .woodpecker.yaml
story:admin-row-crud arch:westside-admin type:feature
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/resume-playground/issues/1
type:feature arch:playground story:portfolio
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/237
type:feature arch:forgejo story:portfolio scope:discovered
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/241
type:bug arch:ci-pipeline story:superuser-deploy scope:discovered
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/245
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
Revert tfvars corruption: pal-e-production → pal-e-docs-app
type:bug arch:k8s-deploy story:superuser-deploy scope:discovered
issue
Enable Keycloak event logging for login/logout/error events
type:feature arch:keycloak story:superuser-observe
issue
Woodpecker push-to-main pipelines fail — queue/ack errors
type:bug arch:ci-pipeline scope:discovered story:superuser-deploy
issue
Decide: should pal-e-docs-app service exist?
type:feature arch:k8s-deploy story:superuser-deploy scope:discovered depends:51
issue
Woodpecker pipeline restart skips deploy steps
type:bug arch:ci-pipeline arch:woodpecker scope:discovered story:superuser-deploy
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/272
type:bug scope:unplanned arch:monitoring story:WS-S18
issue
Grafana dashboard: auth activity (logins, failures, active users)
type:feature arch:monitoring arch:grafana story:superuser-observe
issue
fix: formalize pal-e-production ArgoCD app + harbor credentials post-rename
type:tech-debt arch:argocd story:superuser-deploy
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/276
type:bug arch:keycloak scope:discovered story:superuser-deploy
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/114
type:feature scope:unplanned arch:pal-e-docs story:superuser-deploy
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/332
type:feature arch:salt story:superuser-deploy
issue
pal-e-platform#334 [POST-INCIDENT] postgres NP missing pal-e-docs after #287 rename
story:superuser-recover arch:network-policy type:bug severity:p0 scope:retroactive
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/67
type:bug arch:k8s-deploy story:platform-stability blocks:pr-65 discovered-during:westside-admin-bootstrap
issue 1pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/370
type:bug arch:k8s-deploy story:superuser-deploy priority:p0 sprint:platform-cleanup
issue
Delete stale overlays/pal-e-production/ directory
type:bug scope:unplanned story:platform-bootstrap arch:pal-e-deployments
issue
Draft "Rename Audit" SOP
type:feature scope:unplanned story:platform-bootstrap arch:pal-e-docs
issue
Audit all overlays for stale pal-e-production drift
type:spike scope:unplanned story:platform-bootstrap arch:pal-e-deployments
issue
CORS preflight synthetic monitor
type:feature scope:unplanned story:platform-bootstrap arch:observability
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/303
type:chore arch:keycloak story:platform-traceability discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/306
type:chore arch:salt story:admin-row-crud blocks:pr-304 discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/66
type:bug arch:harbor story:platform-stability discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/305
type:bug arch:claude-harness story:agent-dispatch-ergonomics discovered-during:westside-admin-bootstrap
issue
ArgoCD Image Updater cannot reach Harbor (harbor-core timeout)
type:bug arch:argocd arch:harbor story:platform-stability scope:discovered
issue
#295 Alert + dashboard for pending orders with expired Stripe sessions
type:feature story:observability arch:payment-pipeline
issue
Validate: pal-e-deployments (k8s API unreachable)
type:task arch:k8s-deploy story:superuser-deploy scope:validation
issue
#300 SOP harden: sop-postgres-restore Step 5 (real-DR swap) — PDB + ArgoCD lock + service collision
type:feature scope:discovered severity:p2 story:superuser-recover arch:cnpg
issue
#323 Fix Alertmanager inhibit rule for Gmail OAuth duplicate alerts
type:bug scope:discovered arch:monitoring arch:alertmanager story:superuser-observe discovered-during:alert-audit-2026-05-01
issue
#328 Westside-unified Grafana dashboard
type:feature scope:discovered arch:monitoring arch:grafana story:superuser-observe discovered-during:alert-audit-2026-05-01
issue
#330 WebhookStale: add "first webhook of day" precondition for low-traffic mornings
type:feature scope:discovered arch:monitoring arch:payment-pipeline story:superuser-observe discovered-during:pr-329-review
issue
Stop ArgoCD label drift on terraform-managed resources
type:feature story:superuser-deploy arch:argocd arch:terraform
issue
#326 Time-window MacAgentDown alert (laptop offline outside work hours is expected)
type:bug scope:discovered arch:monitoring arch:ci-pipeline story:superuser-observe discovered-during:alert-audit-2026-05-01
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/311
type:chore arch:forgejo story:platform-stability discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/321
type:bug arch:ci-pipeline story:platform-stability recurring blocks:infra-prs discovered-during:westside-admin-bootstrap
issue
#322 Gmail OAuth auto-reauth cron not running — westside email broken 2+ days
type:bug scope:discovered severity:p1 arch:google-oauth story:platform-reliability discovered-during:alert-audit-2026-05-01
phase 3pt
Phase 17b: Terraform State Governance
tier:1.5-operational-excellence
phase
Phase 30: Mac CI Agent — iOS Build Infrastructure
type:infra scope:ci scope:capacitor scope:mobile-pipeline blocked-by:apple-dev-enrollment
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/minio-api/issues/8
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
phase
Phase: Distributed Tracing (OpenTelemetry + Tempo)
phase
Phase: Data-Driven Operations Dashboard
phase
Phase 16: SLO Governance (Sloth)
phase
Phase 19: Policy-as-Code (Kyverno)
phase
Phase 20: Security Deepening
phase
Phase 21: Progressive Delivery (Argo Rollouts)
phase
Phase 22: Load Testing (k6 Operator)
phase
Phase 23: Chaos Engineering (LitmusChaos) — Capstone
phase
Phase 28: Keycloak SMTP — Platform Email Foundation
type:infra story:WS-S21 scope:keycloak scope:mobile-pipeline
phase
Phase 29: SvelteKit Convention + Capacitor SOP Stages 5-6
type:doc scope:docs scope:capacitor scope:mobile-pipeline
issue
Validate: pal-e-platform (3 merged + #222 pending)
type:task arch:ci-pipeline story:superuser-deploy scope:validation
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/97
type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered
issue 1pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/371
type:bug arch:k8s-deploy story:superuser-deploy priority:p0 sprint:platform-cleanup
issue
SSO: Wire Forgejo → Keycloak OIDC
story:superuser-sso arch:forgejo type:feature
issue 1pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-services/issues/77
type:bug arch:ci-pipeline story:superuser-deploy priority:p1 sprint:platform-cleanup
issue 3pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/372
type:bug arch:k8s-deploy story:superuser-deploy priority:p1 sprint:platform-cleanup
issue 2pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/373
type:bug arch:k8s-deploy story:superuser-observe priority:p1 sprint:platform-cleanup
issue
pal-e-admin: Scaffold SvelteKit app + Keycloak OIDC auth
story:superuser-sso arch:pal-e-admin type:feature
issue 3pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/374
type:feature arch:k8s-deploy story:superuser-deploy priority:p2 sprint:platform-cleanup
issue
pal-e-admin: Prod + dev deployment overlays
story:superuser-sso arch:pal-e-admin type:feature
issue 2pt
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/375
type:spike arch:k8s-deploy story:superuser-deploy priority:p2 sprint:platform-cleanup
Todo 3
issue
Bug: Woodpecker webhook not firing on Forgejo squash merge
type:bug arch:woodpecker arch:forgejo scope:discovered story:superuser-deploy
issue
fix: basketball-api network policy missing self + westside-contracts ingress
story:PLAT-S1 arch:network-security type:bug scope:discovered
issue
Apply 5+ pending terraform changes (ArgoCD migrations)
type:task arch:argocd arch:terraform story:superuser-deploy scope:validation depends:#224
Next Up 1
issue
P0: pal-e-services tf state drifted — prod postgres in blast radius
type:bug scope:unplanned severity:p0 story:superuser-deploy arch:pal-e-services
In Progress 2
phase
Phase 6: Vector Search (pgvector)
phase
Phase 7: Block-Structured Content Model
Qa 8
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/317
type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap
issue
SSO: Create platform realm + ldraney admin user
story:superuser-sso arch:keycloak type:feature
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/307
type:bug arch:ci-pipeline story:platform-stability recurring blocks:infra-prs
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/315
type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/312
type:chore arch:ci-pipeline story:platform-stability discovered-during:westside-admin-bootstrap
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/319
type:bug arch:postgres story:admin-row-crud blocks:pr-304-apply discovered-during:westside-admin-bootstrap
issue
SSO: Wire Harbor → Keycloak OIDC
story:superuser-sso arch:harbor type:feature
issue
SSO: Wire MinIO → Keycloak OIDC
story:superuser-sso arch:minio type:feature
Needs Approval 3
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-api/issues/258
type:bug scope:unplanned arch:pal-e-docs story:superuser-deploy
issue
P1: validate sop-postgres-restore via dry-run drill (blocks #297)
type:spike scope:unplanned severity:p1 story:superuser-recover arch:cnpg
issue
ArgoCD CMP sidecar fails to render kustomize+SOPS overlays
type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered
Validation 0
Done 133
issue 2pt
Public CDN: MinIO assets bucket public-read + public funnel
type:feature scope:discovered blocks:email-images
issue
westside-admin#16: /auth/login, /callback, /logout endpoints
story:admin-row-crud arch:westside-admin arch:keycloak type:feature
issue
[BUG] #24: SSR auth loops — session cookie 4719B exceeds 4KB browser limit
story:admin-row-crud arch:westside-admin arch:keycloak type:bug
issue
[BUG] #26: verifyKeycloakJwt rejects valid tokens (aud=account, expected westside-admin)
story:admin-row-crud arch:westside-admin arch:keycloak type:bug
issue
westside-admin#17: (unauthorized) 403 page
story:admin-row-crud arch:westside-admin type:feature
issue
Apply 6 pending terraform changes (validation drift)
type:task arch:terraform story:superuser-deploy scope:validation parent:#223
issue
Fix wget auth for update-kustomize-tag (4 repos)
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
Feature: SOP — validation pipeline [ALREADY EXISTS]
type:feature story:WS-S1 arch:process
issue
Bug: basketball-api deploy blocked — env var value/valueFrom conflict
type:bug story:WS-S1 arch:deployments
issue
Feature: SOP — secrets management [ALREADY EXISTS]
type:feature story:WS-S1 arch:secrets
issue
Feature: Harden secrets gitignore + tfvars.example
type:feature story:WS-S1 arch:secrets
issue
Bug: CI wget retry — all 4 repos merged
type:bug story:WS-S1 arch:ci-pipeline
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/242
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/243
type:bug arch:worktree story:superuser-deploy scope:discovered
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/244
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
Bug: update-kustomize-tag skipped when CI tests fail
type:bug arch:woodpecker scope:discovered story:superuser-deploy
issue
Change Tailscale SSH ACL from "check" to "accept"
type:feature arch:networking story:superuser-remote-access
issue 3pt
ArgoCD: switch all apps to internal Forgejo URL
type:feature arch:k8s-deploy scope:argocd depends:137
issue 1pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/29
type:cleanup arch:k8s-deploy tier:1.5-cleanup
issue
Fix Woodpecker agent secret duplication
story:superuser-deploy arch:ci-pipeline type:bug
issue
nftables reload-after-tailscale
type:bug arch:tailscale-subnet scope:firewall
issue
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/345
story:superuser-mobile arch:harbor type:feature
issue
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/346
story:superuser-mobile arch:minio type:feature
phase
Phase: Observability — Project Page Foundation
issue
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/347
story:superuser-mobile arch:forgejo type:feature
issue
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-platform/issues/348
story:superuser-mobile arch:pal-e-admin type:feature
issue
https://forgejo.tail5b443a.ts.net/ldraney/pal-e-app/issues/118
story:superuser-mobile arch:pal-e-app type:feature
phase
Phase 6.4: Apply-on-Merge Pipeline
phase
Phase 6.3: Plan-on-PR Pipeline
issue
Mac build agent — Salt managed with observability
story:superuser-deploy arch:ci-pipeline type:infra
phase
Phase: DORA Re-Baseline + Dashboard Verification
phase
Phase: Synthetic Monitoring + Uptime Checks
issue
Add cross-pillar review Woodpecker step
status:approved
phase
Phase 14a: Webhook Token Fix (incident)
phase 3pt
Phase 14b: Alert Noise Cleanup
issue 1pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/45
type:cleanup arch:k8s-deploy tier:1.5-cleanup
issue
Python repo standards: ruff pre-commit hooks + repo setup template
type:feature arch:ci-pipeline arch:developer-tooling story:superuser-deploy
phase
Phase 16: Alert Tuning & Resource Right-Sizing
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/95
type:bug arch:argocd arch:k8s-deploy story:superuser-deploy scope:discovered pr:98
phase
Phase 17a: Woodpecker Secrets Hardening
issue
Clean up pal-e-playground repo
type:feature arch:tailscale-funnel scope:playground story:superuser-deploy
issue 2pt
#152: NetworkPolicy field manager conflicts block apply
type:bug arch:ci-pipeline scope:network-policy priority:critical
issue 5pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/153
type:infra arch:tailscale-funnel scope:unplanned
issue
Tailscale Connector — k8s subnet router
story:superuser-deploy arch:tailscale-subnet type:infra
issue
Woodpecker agent label routing — pipeline contract
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
westside-admin#15: hooks.server.ts + app.d.ts
story:admin-row-crud arch:westside-admin arch:keycloak type:feature
issue
westside-admin: Keycloak cookie SSR auth + admin role gate
story:admin-row-crud arch:westside-admin arch:keycloak type:feature
issue
westside-admin#14: keycloak.ts lib (JWKS+JWT+AES+state)
story:admin-row-crud arch:westside-admin arch:keycloak type:feature
issue 3pt
Secrets pillar validation gate + missing Woodpecker secrets
type:feature scope:platform-hardening discovered-scope
issue 3pt
#151: Apply step exit code broken — lock detection dead
type:bug arch:ci-pipeline scope:ci priority:critical
issue 5pt
Import Keycloak realms/clients into Terraform
scope:phase-28 type:feature repo:pal-e-services
issue 2pt
gmail-mcp: SSH-compatible gmail_reauth tool
arch:google-oauth type:feature scope:discovered
issue
Bug: Blackbox probe TLS failure on pal-e-app funnel
type:bug scope:unplanned track:devops story:superuser-observe arch:blackbox-exporter arch:tailscale-funnel
issue
Bug: platform-validation OOMKilled at 64Mi + stale alert rule
type:bug scope:unplanned track:devops story:superuser-observe story:superuser-deploy arch:prometheus
issue
Add computed_fields to CNPG kubernetes_manifest resources to silence operator-injection drift
type:feature story:superuser-deploy arch:cnpg arch:terraform
issue
Reconcile cnpg_scheduled_backup cron format drift
type:feature story:superuser-deploy arch:cnpg arch:terraform
issue
secrets(westside-admin): land real KEYCLOAK_CLIENT_SECRET
story:superuser-onboard-service arch:keycloak type:feature
issue
Critical: Migrate basketball-api Postgres to CNPG
type:bug scope:unplanned arch:postgres story:WS-S5
issue 8pt
Issue #109: Platform cleanup — resolve 15 alerts + stabilize CI
type:ops scope:platform-hardening
issue
SOP: Harbor robot import recovery
type:feature story:superuser-recover arch:harbor arch:terraform
issue
Bug: Harbor connectivity timeout from Woodpecker CI agent
type:bug scope:unplanned arch:ci-pipeline story:superuser-deploy type:incident
issue
Keycloak realm config via Terraform provider
type:feature scope:platform-hardening discovered-scope arch:keycloak story:WS-S3
issue 5pt
Bug #107: TLS clone failures in Woodpecker CI
type:bug scope:ci
issue 1pt
Update service onboarding SOP with Keycloak docs
scope:phase-28 type:docs repo:pal-e-services depends:23 story:superuser-onboard-service
phase
Phase 28: Keycloak Declarative Onboarding
issue 2pt
#112: ArgoCD repo-server memory bump (1 alert)
type:bug scope:argocd
issue 2pt
#111: Fix Keycloak probe (1 alert)
type:bug scope:observability
issue 8pt
#110: Fix westside-app Harbor auth (4 alerts)
type:bug scope:westside priority:critical
issue 2pt
Bug: contract signatures publicly exposed via MinIO CDN
type:bug arch:minio priority:high discovered-scope
issue
Bug: pal-e-mail ServiceMonitor scraping nonexistent /metrics
type:bug scope:unplanned track:devops story:superuser-observe arch:servicemonitor
issue
Validation pipeline: dev → staging → prod tiers
type:feature arch:validation-pipeline arch:ci-pipeline story:superuser-validate
phase 5pt
Phase 24: MinIO SDK — S3 Signature V4 + Core Operations
type:feature scope:minio
phase 3pt
Phase 26: MinIO Playground — Mobile-First File Browser
type:feature scope:minio
issue 3pt
#113: Apply Terraform state drift (3 alerts)
type:ops scope:terraform
issue 2pt
Spike: validate Phase 28 Keycloak + secrets
type:spike scope:phase-28 repo:pal-e-services
issue 1pt
Remove SendGrid dependency — Gmail OAuth covers all email
type:cleanup scope:discovered story:superuser-deploy
issue
Bug: CronJob stale failures causing persistent KubeJobFailed alerts
type:bug scope:unplanned track:devops story:superuser-observe arch:prometheus
issue
Critical: Re-establish orphaned CNPG cluster manifest
type:bug scope:unplanned arch:postgres
issue
Automate Gmail OAuth re-auth lifecycle (7-day token expiry)
arch:google-oauth type:feature scope:discovered
issue 1pt
MinIO network policy: allow pal-e-mail ingress
type:feature scope:discovered
issue 5pt
Automate image tag updates in pal-e-deployments
type:feature scope:discovered
issue 1pt
#115: Remove capacitor-dev (3 alerts)
type:cleanup scope:noise-reduction
issue 5pt
#121: CI clone broken — Forgejo internal URL unreachable
type:bug scope:ci priority:critical
issue 2pt
#123: tofu-state backup CronJob failures (2 alerts)
type:bug scope:backup story:superuser-recover
issue
Kaniko HTTPS probe timeout — insecure-registry fix
type:bug arch:ci-pipeline arch:harbor story:superuser-deploy scope:discovered
issue 1pt
Allow westside-contracts ingress to MinIO
type:feature scope:discovered
issue
CI pipeline targeted apply (depends on #197)
type:feature arch:ci-pipeline arch:terraform story:superuser-deploy
phase
Phase 5: Full-Text Search (tsvector)
phase
Epilogue: Post-Plan Cleanup
phase
Phase 2: Platform CNPG Foundation
phase
Phase 8: pal-e-docs SDK + MCP Rewrite + Integration Tests
phase
Phase 1: TF Modularization — DEFERRED
phase
Phase 2b: Clean Up Platform TF — Remove App-Level CNPG Resources
phase
Phase 3: pal-e-docs Owns Its Postgres
phase
Phase 4: Postgres Backup Verification + Restore SOP
issue
Bump agent parallel workflows 1→4
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
issue
Terraform state splitting — modularize main.tf
type:feature arch:terraform story:superuser-deploy story:platform-reliability
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-services/issues/35
type:bug arch:tailscale-funnel scope:discovered repo:pal-e-services story:superuser-deploy
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/203
type:bug arch:k8s-deploy scope:argocd story:superuser-deploy
issue
ArgoCD repo_url :80 port mismatch — blocks tofu apply
type:bug arch:argocd story:superuser-deploy scope:discovered
issue
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/204
type:bug arch:ci-pipeline scope:automation story:superuser-deploy
issue
Eliminate Tailscale hairpin — ArgoCD + image updater internal URLs
type:bug arch:argocd arch:tailscale-funnel story:superuser-deploy story:platform-reliability
issue
Remove non-functional gRPC funnel
type:bug arch:ci-pipeline scope:cleanup
issue
Rotate Woodpecker API token in Salt pillar + consumers
type:security arch:ci-pipeline scope:secrets
phase 3pt
Phase 25: MinIO API — FastAPI REST Service
type:feature scope:minio status:deferred-to-minio-mobile
issue
Rollout: wire update-kustomize-tag into remaining repos
type:feature arch:ci-pipeline story:superuser-deploy scope:discovered
phase 5pt
Phase 27: MinIO SvelteKit — Production Mobile App
type:feature scope:minio status:deferred-to-minio-mobile
issue
Migrate all apps to pal-e-deployments
type:feature arch:argocd arch:kustomize story:superuser-deploy story:platform-reliability
issue 8pt
#138: Split-horizon DNS — fix intra-cluster TLS hairpin
type:feature scope:platform-infrastructure priority:critical
issue 5pt
#135: Harbor unreachable from CI pods
type:bug scope:ci priority:critical story:superuser-deploy
issue 3pt
#133: CI pipeline broken — replace clone with alpine/git
type:bug scope:ci priority:critical
issue 5pt
#137: Woodpecker agent secret drift — blocks safe apply
type:bug scope:secrets priority:critical story:superuser-deploy
phase
Phase: Observability — Verify Baseline
issue 3pt
#125: Spike — CI bootstrap resilience
type:spike scope:platform-resilience story:superuser-deploy
phase
Phase: Observability — Alerting + Deployment Protection
issue 2pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-platform/issues/154
type:bug arch:postgres tier:1.5-operational-excellence
issue
SSO: Wire Grafana → Keycloak OIDC
story:superuser-sso arch:grafana type:feature
issue 2pt
https://forgejo.tail5b443a.ts.net/forgejo_admin/pal-e-deployments/issues/46
type:bug arch:k8s-deploy tier:1.5-operational-excellence
phase
Phase: Observability — First Service Dashboard
phase
Phase: Observability — Architecture Review
phase
Phase: CI Pipeline & Team Hardening
phase
Phase: Kustomize Service Bases
phase
Phase 8: Network Security Hardening
phase
Phase: Environment Isolation & Secret Boundaries
issue
Playground: Protect behind Keycloak + point at pal-e-docs-app
story:superuser-docs-frontend arch:playground type:feature
phase
Phase: Vulnerability Scanning
issue
pal-e-docs-app: Dev environment with hot-reload overlay
story:superuser-docs-frontend arch:pal-e-docs type:feature
phase
Phase: Dependency Scanning (Renovate)
phase
Phase: Incident Management SOP
phase
Phase: Database Backup Verification