Compare commits
1 Commits
| Author | SHA1 | Date | |
|---|---|---|---|
 AI-Agent
|
d0a39ff66f |
@@ -21,38 +21,32 @@ jobs:
|
||||
with:
|
||||
path: api-company
|
||||
|
||||
# NOTE: cross-repo checkouts use SIBLING_REPOS_TOKEN, NOT the auto-injected
|
||||
# GITEA_TOKEN. Gitea's automatic GITEA_TOKEN is scoped to THIS repo only,
|
||||
# so checking out other repos fails with
|
||||
# "Determining the default branch → not found". GITEA_TOKEN is also a
|
||||
# reserved secret name that cannot be overridden, hence a separate secret.
|
||||
# SIBLING_REPOS_TOKEN must be a PAT with read access to the API repos.
|
||||
- name: Checkout zip-enrichment
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: leeworks-agents/zip-enrichment
|
||||
token: ${{ secrets.SIBLING_REPOS_TOKEN }}
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
path: zip-enrichment
|
||||
|
||||
- name: Checkout holidays
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: leeworks-agents/holidays
|
||||
token: ${{ secrets.SIBLING_REPOS_TOKEN }}
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
path: holidays
|
||||
|
||||
- name: Checkout air-quality
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: leeworks-agents/air-quality
|
||||
token: ${{ secrets.SIBLING_REPOS_TOKEN }}
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
path: air-quality
|
||||
|
||||
- name: Checkout vin-decoder
|
||||
uses: actions/checkout@v4
|
||||
with:
|
||||
repository: leeworks-agents/vin-decoder
|
||||
token: ${{ secrets.SIBLING_REPOS_TOKEN }}
|
||||
token: ${{ secrets.GITEA_TOKEN }}
|
||||
path: vin-decoder
|
||||
|
||||
- name: Copy openapi.yaml specs into docs-site
|
||||
@@ -78,39 +72,15 @@ jobs:
|
||||
working-directory: api-company/docs-site
|
||||
run: npm run build
|
||||
|
||||
- name: Install Docker CLI
|
||||
# The job container (node:20) ships no `docker` binary. The runner has a
|
||||
# dind daemon (dind.enabled in the runner HelmRelease), reachable via
|
||||
# DOCKER_HOST, so we only need the client. Install the static binary.
|
||||
env:
|
||||
DOCKER_CLI_VERSION: "27.3.1"
|
||||
run: |
|
||||
set -euxo pipefail
|
||||
curl -fSL --retry 5 --retry-delay 3 --retry-all-errors \
|
||||
-o /tmp/docker.tgz \
|
||||
"https://download.docker.com/linux/static/stable/x86_64/docker-${DOCKER_CLI_VERSION}.tgz"
|
||||
tar -xzf /tmp/docker.tgz -C /tmp
|
||||
install -m 0755 /tmp/docker/docker /usr/local/bin/docker
|
||||
docker version --format '{{.Client.Version}}'
|
||||
docker info >/dev/null # confirms the dind daemon is reachable
|
||||
|
||||
- name: Log in to container registry
|
||||
# Use Gitea's built-in container registry (gitea.leeworks.dev), which
|
||||
# has a valid Let's Encrypt cert. The standalone registry.leeworks.dev
|
||||
# serves Traefik's default self-signed cert and fails TLS verification.
|
||||
#
|
||||
# Auth uses REGISTRY_TOKEN, NOT the auto GITEA_TOKEN: the auto token has
|
||||
# no package-registry scope, and the registry requires the username to
|
||||
# match the token owner. REGISTRY_TOKEN must be a PAT (owner: 0xWheatyz)
|
||||
# with write:package + read:package scope.
|
||||
run: |
|
||||
echo "${{ secrets.REGISTRY_TOKEN }}" | docker login gitea.leeworks.dev \
|
||||
-u 0xWheatyz --password-stdin
|
||||
echo "${{ secrets.GITEA_TOKEN }}" | docker login registry.leeworks.dev \
|
||||
-u ${{ gitea.actor }} --password-stdin
|
||||
|
||||
- name: Build and push docs-site image
|
||||
working-directory: api-company/docs-site
|
||||
run: |
|
||||
IMAGE="gitea.leeworks.dev/leeworks-agents/docs-site"
|
||||
IMAGE="registry.leeworks.dev/leeworks-agents/docs-site"
|
||||
SHA="${{ gitea.sha }}"
|
||||
docker build -t "$IMAGE:$SHA" -t "$IMAGE:latest" .
|
||||
docker push "$IMAGE:$SHA"
|
||||
|
||||
@@ -13,19 +13,9 @@ jobs:
|
||||
- uses: actions/checkout@v4
|
||||
|
||||
- name: Install kustomize
|
||||
# The act runner runs as root (no `sudo`). Download a pinned release
|
||||
# tarball directly with retries instead of piping the upstream installer
|
||||
# script through bash — the installer makes extra GitHub API calls that
|
||||
# are rate-limited/unreliable on this runner, and `curl -s` hid the
|
||||
# error (a silent exit 6 = could not resolve host).
|
||||
env:
|
||||
KUSTOMIZE_VERSION: "5.4.3"
|
||||
run: |
|
||||
set -euxo pipefail
|
||||
url="https://github.com/kubernetes-sigs/kustomize/releases/download/kustomize%2Fv${KUSTOMIZE_VERSION}/kustomize_v${KUSTOMIZE_VERSION}_linux_amd64.tar.gz"
|
||||
curl -fSL --retry 5 --retry-delay 3 --retry-all-errors -o /tmp/kustomize.tar.gz "$url"
|
||||
tar -xzf /tmp/kustomize.tar.gz -C /usr/local/bin kustomize
|
||||
kustomize version
|
||||
curl -sL "https://raw.githubusercontent.com/kubernetes-sigs/kustomize/master/hack/install_kustomize.sh" | bash
|
||||
sudo mv kustomize /usr/local/bin/
|
||||
|
||||
- name: kustomize build flux/
|
||||
run: kustomize build flux/ > /dev/null
|
||||
|
||||
+20
-28
@@ -5,12 +5,10 @@ Cross-repo milestones. Per-API phases live in each API repo's ROADMAP.md.
|
||||
> **As of 2026-05-30, a 4th API (VIN Decoder) has been added. Per-API phases also live in `leeworks-agents/vin-decoder`.**
|
||||
|
||||
## Phase 0 — Orientation (one-time)
|
||||
- [x] Audit cluster: nodes, namespaces, ingress, Flux state → `docs/cluster-audit.md` (issue #36 — closed ✅)
|
||||
- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company` — issue #218 (fork PR #399 merged to leeworks-agents/Talos; awaiting operator merge of 0xWheatyz/Talos PR #14)
|
||||
- [ ] Deploy `gitea-act-runner` in cluster via Flux HelmRelease (`flux/gitea-runner/`) — issue #3
|
||||
- [ ] Stand up `registry.leeworks.dev` (container registry) — required before any API CI works — issue #4
|
||||
- [ ] Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces — issue #178
|
||||
- [ ] Extend full-stack Flux validation checklist to cover VIN Decoder — issue #179 (extends #66)
|
||||
- [ ] Audit cluster: nodes, namespaces, ingress, Flux state → `docs/cluster-audit.md`
|
||||
- [ ] Add Flux GitRepository + Kustomization watching `leeworks-agents/api-company`
|
||||
- [ ] Deploy `gitea-act-runner` in cluster via Flux HelmRelease (`flux/gitea-runner/`)
|
||||
- [ ] Stand up `registry.leeworks.dev` (container registry) — required before any API CI works
|
||||
|
||||
## Phase 1 — API Contracts
|
||||
Each API repo writes its `openapi.yaml` first and lints it. Spec is the source of truth.
|
||||
@@ -18,42 +16,36 @@ Each API repo writes its `openapi.yaml` first and lints it. Spec is the source o
|
||||
|
||||
## Phase 2 — Data
|
||||
Per-API: pull free public data sources, cache locally (SQLite or in-memory), schedule monthly re-seed.
|
||||
- [x] VIN Decoder: NHTSA vPIC as data source — SQLite cache seeded on demand (issue #120 — closed ✅)
|
||||
- VIN Decoder: NHTSA vPIC as data source — SQLite cache seeded on demand (issue #120)
|
||||
|
||||
## Phase 3 — Servers
|
||||
Per-API: implement Fastify/FastAPI service matching `openapi.yaml` exactly. RapidAPI proxy-secret middleware on every route.
|
||||
- [x] VIN Decoder: Fastify server implementation (issue #121 — closed ✅)
|
||||
- VIN Decoder: Fastify server implementation (issue #121)
|
||||
|
||||
## Phase 4 — Monitoring
|
||||
- [ ] Prometheus + Grafana via Flux HelmRelease (`flux/monitoring/`) — issue #7
|
||||
- [ ] Gatus public status page at `status.leeworks.dev` — issue #8
|
||||
- [x] Instrument every API with `api_requests_total`, `api_response_duration_seconds`, `api_data_freshness_seconds` (issue #27 — closed ✅)
|
||||
- [x] Add Prometheus metrics endpoint to holidays service (issue #180 — closed ✅)
|
||||
- [ ] Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config — issue #231
|
||||
- [x] VIN Decoder metrics instrumentation + Grafana dashboard (issue #129 — closed ✅)
|
||||
- [ ] Prometheus + Grafana via Flux HelmRelease (`flux/monitoring/`)
|
||||
- [ ] Gatus public status page at `status.leeworks.dev`
|
||||
- [ ] Instrument every API with `api_requests_total`, `api_response_duration_seconds`, `api_data_freshness_seconds`
|
||||
- [ ] VIN Decoder metrics instrumentation + Grafana dashboard (issue #129)
|
||||
- [x] VIN Decoder Gatus health check (issue #134 — closed ✅)
|
||||
- [x] Enable Alertmanager in kube-prometheus-stack + configure Slack receiver for SLO alerts (issue #210 — closed ✅)
|
||||
|
||||
## Phase 5 — Documentation site
|
||||
- [x] `docs-site/` Astro + Redoc skeleton (issue #28 — closed ✅)
|
||||
- [x] Gitea Actions pipeline that copies per-API `openapi.yaml` files at build time (issues #29 ✅, #38 ✅, #85 ✅)
|
||||
- [ ] Deploy to `docs.leeworks.dev` via Flux — issue #30
|
||||
- [x] One SEO blog post per API minimum (issues #39 ✅ — ZIP/Holidays/AirQuality, #124 ✅ — VIN Decoder)
|
||||
- [ ] `docs-site/` Astro + Redoc skeleton
|
||||
- [ ] Gitea Actions pipeline that copies per-API `openapi.yaml` files at build time
|
||||
- [ ] Deploy to `docs.leeworks.dev` via Flux
|
||||
- [ ] One SEO blog post per API minimum (see master prompt §Phase 5)
|
||||
- [x] VIN Decoder docs page (issue #123 — closed ✅)
|
||||
- [x] VIN Decoder SEO blog post (issue #124 — closed ✅)
|
||||
|
||||
## Phase 6 — Pre-launch
|
||||
- [x] `docs/legal/terms-of-service.md` (issue #40 — closed ✅)
|
||||
- [x] `docs/legal/privacy-policy.md` (issue #40 — closed ✅)
|
||||
- [x] `docs/legal/acceptable-use-policy.md` (issues #40 ✅, #89 ✅)
|
||||
- [ ] DNS: `zip.leeworks.dev`, `holidays.leeworks.dev`, `aqi.leeworks.dev`, `docs.`, `status.`, `registry.` — issues #33, #106, #150
|
||||
- [ ] `docs/legal/terms-of-service.md`
|
||||
- [ ] `docs/legal/privacy-policy.md`
|
||||
- [ ] `docs/legal/acceptable-use-policy.md`
|
||||
- [ ] DNS: `zip.leeworks.dev`, `holidays.leeworks.dev`, `aqi.leeworks.dev`, `docs.`, `status.`, `registry.`
|
||||
- [x] VIN Decoder DNS `vin.leeworks.dev` (issue #130 — closed ✅)
|
||||
- [x] VIN Decoder RapidAPI listing (issue #131 — closed ✅ as tracker; operator action required)
|
||||
- [ ] PayPal linked to RapidAPI (manual, on 18th birthday) — issue #19
|
||||
- [ ] Paid tiers enabled on RapidAPI listings (manual) — issues #44 (original 3), #151 (VIN Decoder)
|
||||
|
||||
- [ ] Execute pre-launch checklist before go-live — issue #166
|
||||
- [ ] Publish launch announcement (HN, Reddit, Twitter, Dev.to) — issue #167
|
||||
- [ ] PayPal linked to RapidAPI (manual, on 18th birthday)
|
||||
- [ ] Paid tiers enabled on RapidAPI listings (manual)
|
||||
|
||||
## Revenue target
|
||||
|
||||
|
||||
@@ -1,84 +1,20 @@
|
||||
# Company Status
|
||||
|
||||
_Last updated: 2026-07-25 (triage cycle)_
|
||||
|
||||
## Completed This Cycle (2026-07-25 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues re-verified against critical-path blockers; no new agent-implementable work surfaced. Every issue remains gated on operator tasks: #47 (populate `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Upstream repo `0xWheatyz/api-company` still empty** (Gitea API reports `empty: true`, size 22) — no deployment PRs possible from the agent side; `git fetch upstream` is a no-op.
|
||||
- **Critical path unchanged:** (1) Operator populates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-07-16 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues re-verified against critical-path blockers; no new agent-implementable work surfaced. Every issue remains gated on operator tasks: #47 (populate `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Upstream repo `0xWheatyz/api-company` still empty** (Gitea API reports `empty: true`, size 22) — no deployment PRs possible from the agent side; `git fetch upstream` is a no-op.
|
||||
- **Critical path unchanged:** (1) Operator populates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-07-13 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues re-verified against critical-path blockers; no new agent-implementable work surfaced. Every issue remains gated on operator tasks: #47 (populate `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Upstream repo `0xWheatyz/api-company` still empty** (Gitea API reports `empty: true`, size 22) — no deployment PRs possible from the agent side; `git fetch upstream` is a no-op.
|
||||
- **Critical path unchanged:** (1) Operator populates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-07-11 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues re-verified against critical-path blockers; no new agent-implementable work surfaced. Every issue remains gated on operator tasks: #47 (populate `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Upstream repo `0xWheatyz/api-company` still empty** (Gitea API reports `empty: true`) — no deployment PRs possible from the agent side; `git fetch upstream` is a no-op.
|
||||
- **Critical path unchanged:** (1) Operator populates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-07-08 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues re-verified against critical-path blockers; no new agent-implementable work surfaced. Every issue remains gated on operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Upstream repo `0xWheatyz/api-company` still absent** — no deployment PRs possible from the agent side; recent triage comments (2026-07-01/02/04/07) on #241/#179/#66/#47 confirm the block persists.
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-07-04 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues reviewed; all confirmed still blocked on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **No agent-implementable work found** — every open issue is either a manual operator task or gated on Flux/cluster activation; kubectl unreachable from agent environment; upstream repo `0xWheatyz/api-company` still absent so no deployment PRs possible.
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-21 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 37 open `agent-ready` issues reviewed; all confirmed still blocked on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **No agent-implementable work found** — every open issue is either a manual operator task or gated on Flux/cluster activation; kubectl unreachable from agent environment.
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-15 — Triage Cycle)
|
||||
|
||||
- **Triage** — All 38 open `agent-ready` issues reviewed; all confirmed still blocked on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS for all 8 subdomains).
|
||||
- **No agent-implementable work found** — every open issue is either a manual operator task or gated on Flux/cluster activation; kubectl unreachable from agent environment.
|
||||
- **0 new issues, 0 closures, 0 label changes, 0 open PRs.**
|
||||
- **`kustomize build flux/` = PASS** (1648 lines, no manifest regressions).
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
_Last updated: 2026-06-01 (triage cycle)_
|
||||
|
||||
## APIs
|
||||
| API | Spec | Code | Deployed | Listed on RapidAPI | Paying Users | MRR |
|
||||
|----------------|------|------|----------|--------------------|--------------|-----|
|
||||
| ZIP Enrichment | [x] | [x] | [ ] | [ ] | 0 | $0 |
|
||||
| Holidays | [x] | [x] | [ ] | [ ] | 0 | $0 |
|
||||
| Air Quality | [x] | [x] | [ ] | [ ] | 0 | $0 |
|
||||
| ZIP Enrichment | [~] | [~] | [ ] | [ ] | 0 | $0 |
|
||||
| Holidays | [~] | [~] | [ ] | [ ] | 0 | $0 |
|
||||
| Air Quality | [ ] | [ ] | [ ] | [ ] | 0 | $0 |
|
||||
| VIN Decoder | [x] | [x] | [ ] | [ ] | 0 | $0 |
|
||||
|
||||
Legend: [x]=done, [~]=in-progress, [ ]=not started
|
||||
|
||||
## Infrastructure
|
||||
- Cluster nodes: 3 control plane (10.0.1.3, .4, .5) + workers (testing1)
|
||||
- **Flux wiring (api-company):** `flux/api-company-source/` — Fork PR #399 **MERGED** to leeworks-agents/Talos; upstream PR #14 open on 0xWheatyz/Talos — awaiting operator merge to activate Flux (issue #2)
|
||||
- **Flux wiring (api-company):** Manifests staged at `flux/api-company-source/` — PENDING Talos merge (issue #2)
|
||||
- **Gitea Actions runner:** Flux manifest committed at `flux/gitea-runner/` — PENDING runner token secret + Talos wiring (issue #3)
|
||||
- **Container registry:** Gitea built-in registry selected; docs/registry.md committed — PENDING Gitea packages enabled (issue #4)
|
||||
- **Prometheus + Grafana:** Flux HelmRelease at `flux/monitoring/` — PENDING Flux wiring + Grafana secret (issue #7)
|
||||
@@ -86,229 +22,14 @@ Legend: [x]=done, [~]=in-progress, [ ]=not started
|
||||
- **API service manifests:** `flux/zip-enrichment/`, `flux/holidays/`, `flux/air-quality/` scaffolded (PR #48, closes #46)
|
||||
- **Image automation:** `flux/image-automation/` — ImageRepository + ImagePolicy + ImageUpdateAutomation for all three APIs
|
||||
- **VIN Decoder manifests:** `flux/vin-decoder/` — Flux HelmRelease + Kustomization committed (issue #140)
|
||||
- **Alertmanager:** `flux/monitoring/helmrelease.yaml` — enabled with Slack receiver config (`gatus-slack-webhook` secret); PR #212 open (issue #210)
|
||||
|
||||
## Completed Previous Cycle (2026-06-08 — Triage Cycle #240)
|
||||
|
||||
- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-08).
|
||||
- **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
|
||||
- **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation; kubectl unreachable from agent environment.
|
||||
- **28 issues triaged** — status comments posted on all open `agent-ready` issues.
|
||||
- **0 new issues created** — no gaps found; all ROADMAP items remain grounded in open issues.
|
||||
- **0 issues closed** — no stale issues; oldest open issue is #3 from 2026-05-18 (21 days < 30-day threshold).
|
||||
- **0 label changes** — all existing labels correct.
|
||||
- **0 open PRs** — nothing to review or merge.
|
||||
- **`kustomize build flux/` = PASS** — no manifest regressions.
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-07 — Triage Cycle #232)
|
||||
|
||||
- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-07).
|
||||
- **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
|
||||
- **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation; kubectl unreachable from agent environment.
|
||||
- **1 new issue triaged** — #231 commented with @qa-engineer assessment; BLOCKED on #218.
|
||||
- **0 new issues created** — no gaps found; all ROADMAP items remain grounded in open issues.
|
||||
- **0 issues closed** — no stale issues.
|
||||
- **0 label changes** — all existing labels correct.
|
||||
- **0 open PRs** — nothing to review or merge.
|
||||
- **`kustomize build flux/` = PASS** — no manifest regressions.
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-06 — Sprint Planning Cycle #227)
|
||||
|
||||
|
||||
|
||||
- **Sprint Planning** — Full ROADMAP cross-reference + backlog triage completed (2026-06-06).
|
||||
- **ROADMAP cross-reference:** All 18 unchecked items confirmed grounded in open issues — **zero gaps**.
|
||||
- Phase 0: #3, #4, #66, #76–#83, #126–#128, #173, #178, #179, #203, #218 — all tracked.
|
||||
- Phase 4: #7, #8, #174 — all tracked.
|
||||
- Phase 5: #30 — tracked.
|
||||
- Phase 6: #19, #33, #44, #106, #116, #139, #150, #151, #161, #166, #167 — all tracked.
|
||||
- **Staleness check:** Oldest open issue is #3 / #4 from 2026-05-18 (19 days) — **below 30-day threshold; zero closures**.
|
||||
- **Label audit:** All priority/complexity labels confirmed correct from cycle #221 audit — **zero changes**.
|
||||
- **0 new issues created** — no roadmap gaps found.
|
||||
- **0 issues closed** — no stale issues.
|
||||
- **0 label changes** — all existing labels correct.
|
||||
- **`kustomize build flux/` = PASS** — no manifest regressions.
|
||||
- **Critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-06 — Triage Cycle #226)
|
||||
|
||||
- **Triage** — All 28 open `agent-ready` issues reviewed and commented with current status (2026-06-06).
|
||||
- **All issues confirmed blocked** on the same critical-path operator tasks: #47 (create `0xWheatyz/api-company`), #218 (merge Talos PR #14), #33/#106/#150 (DNS).
|
||||
- **No agent-implementable work found** — all open issues are either manual operator tasks or gated on Flux/cluster activation.
|
||||
- **0 new issues created** — no gaps found; all ROADMAP items are grounded in open issues.
|
||||
- **0 issues closed** — no issues are stale or resolvable by agent action.
|
||||
- **0 PRs open** — nothing to review or merge.
|
||||
- **`kustomize build flux/` = PASS** — no manifest regressions.
|
||||
- **Current critical path unchanged:** (1) Operator creates `0xWheatyz/api-company` (#47), (2) Operator merges `0xWheatyz/Talos` PR #14 (#218), (3) Operator configures DNS for all 8 subdomains (#33, #106, #150).
|
||||
|
||||
## Completed Previous Cycle (2026-06-06 — Sprint Planning Cycle #221)
|
||||
|
||||
- **#221** — STATUS.md updated for 2026-06-06 sprint planning cycle (this entry). Last-updated date confirmed 2026-06-06.
|
||||
- **0 new issues created** — all ROADMAP unchecked items confirmed grounded in open issues (35 open issues, zero gaps).
|
||||
- **0 issues closed** — oldest open issue is #3 from 2026-05-18 (19 days < 30-day stale threshold).
|
||||
- **3 label changes:**
|
||||
- #106 (grafana.leeworks.dev DNS): added `blocked` label (missing despite dependency on #47)
|
||||
- #150 (vin.leeworks.dev DNS): added `blocked` label (missing despite dependency on #47)
|
||||
- #203 (ClusterIssuer verification): downgraded P1 → P2 (gated on DNS #33, not a first-order blocker)
|
||||
- **Critical path unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#218) to activate Flux, (3) configure DNS (#33, #106, #150).
|
||||
- **`kustomize build flux/` = PASS** — no manifest regressions.
|
||||
|
||||
## Completed Previous Cycle (2026-06-06 — Docs Cycle #219)
|
||||
|
||||
- **#219** — STATUS.md Current Blockers updated: removed closed issues #187 and #90; replaced with open issue #218 (Operator: merge 0xWheatyz/Talos upstream PR #14 to activate Flux GitOps for api-company). Critical Path item 2 updated to reference #218. `kustomize build flux/` = PASS.
|
||||
|
||||
## Completed Previous Cycle (2026-06-05 — Sprint Planning Cycle #215)
|
||||
|
||||
- **#215** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date confirmed 2026-06-05.
|
||||
- **1 new issue created:** #214 (ROADMAP.md Phase 4 Alertmanager annotation — documentation gap filed).
|
||||
- **0 issues closed** — no stale issues; oldest open issue is #2 from 2026-05-18 (18 days < 30-day threshold).
|
||||
- **0 label/priority changes** — all existing labels confirmed correct.
|
||||
- **ROADMAP cross-reference:** all unchecked items confirmed grounded in open issues; 1 new documentation gap found and filed (#214 — Alertmanager / Slack receiver missing from ROADMAP.md Phase 4).
|
||||
- **Critical path unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
|
||||
## Completed This Cycle (2026-06-01 — Triage Cycle)
|
||||
- **#120** — VIN Decoder data layer: confirmed complete + merged in leeworks-agents/vin-decoder (db.js, cache.js, nhtsa.js, seed.js, cache.test.js). Status comment posted.
|
||||
- **#121** — VIN Decoder Fastify server: confirmed complete + merged in leeworks-agents/vin-decoder (server.js, Dockerfile, CI workflow, Flux manifests). Status comment posted.
|
||||
- **#157, #151, #150, #139, #128, #127, #126, #116, #106, #90, #66, #47** — Blocked operator tasks: status comments posted confirming blocked state and next actions.
|
||||
- **No open PRs** — queue empty.
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
- **0 open PRs** — nothing to review or merge.
|
||||
|
||||
## Completed Previous Cycle (2026-06-05 — Sprint Planning Cycle #211)
|
||||
|
||||
- **#211** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date confirmed 2026-06-05.
|
||||
- **1 new issue implemented:** #210 (Enable Alertmanager + Slack receiver — gap identified by roadmap cross-reference); PR #212 opened to `leeworks-agents/api-company` with `kustomize build flux/` = PASS.
|
||||
- **0 issues closed** — oldest open issue is #2 from 2026-05-18 (18 days old — under 30-day stale threshold).
|
||||
- **0 label changes** — all priority/complexity labels confirmed correct.
|
||||
- **ROADMAP cross-reference:** 18 unchecked items confirmed grounded in open issues; 1 new gap found and filed (#210 — Alertmanager was missing from roadmap coverage).
|
||||
- **Current Blockers unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
- **1 open PR** — PR #212 (Alertmanager enable + Slack receiver): `kustomize build flux/` PASS; pending merge.
|
||||
|
||||
## Completed Previous Cycle (2026-06-05 — Sprint Planning Cycle #206)
|
||||
|
||||
- **#206** — STATUS.md updated for 2026-06-05 sprint planning cycle (this entry). Last-updated date set to 2026-06-05.
|
||||
- **Completed outcomes from 2026-06-04 sprint planning cycle recorded:**
|
||||
- Issue #204 (smoke-tests): reopened and relabeled `blocked` — was prematurely closed while prerequisites (DNS #33/#150, Flux #2/#187) are still open.
|
||||
- ROADMAP cross-reference: all 18 unchecked items confirmed grounded in open issues (zero gaps).
|
||||
- Staleness check: oldest open issue is #2 from 2026-05-18 (18 days, under 30-day threshold — no closures).
|
||||
- Label audit: no label changes required — all existing priority/complexity labels are correct.
|
||||
- **Critical path confirmed:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150).
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
- **0 open PRs** — nothing to review or merge.
|
||||
|
||||
## Completed Previous Cycle (2026-06-04 — Triage Cycle #204)
|
||||
|
||||
- **Triage** — All 29 open `agent-ready` issues reviewed and commented with current status (2026-06-04).
|
||||
- **#204** (smoke tests): ❌ BLOCKED — all HTTP endpoints timeout; DNS not configured; kubectl unreachable.
|
||||
- **#203** (ClusterIssuer): ❌ BLOCKED — kubectl not accessible from agent environment.
|
||||
- **#187, #90, #2** (Flux wiring): Waiting on operator to merge upstream Talos PR #14.
|
||||
- **#179, #178, #66** (validation checklists): Blocked on Flux active + cluster access.
|
||||
- **#174** (VIN metrics): `kustomize build flux/` PASS; blocked on cluster deploy.
|
||||
- **#173, #81, #128, #126, #127, #83, #80, #79, #77, #76, #74, #73, #70** (secrets): Manual operator tasks, all documented.
|
||||
- **#167, #166** (launch/pre-launch): Blocked on DNS + Flux + RapidAPI + PayPal.
|
||||
- **#161, #151, #150, #139, #116, #106, #47, #44, #33, #30, #19, #8, #7, #4, #3**: Manual operator tasks or blocked on operator actions.
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
- **0 PRs open** — nothing to review or merge.
|
||||
- **Critical path unchanged:** Operator must (1) create `0xWheatyz/api-company` (#47), (2) merge upstream Talos PR #14 (#187) to activate Flux.
|
||||
|
||||
## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #200/#201)
|
||||
|
||||
- **#200** — STATUS.md Infrastructure section updated: Flux wiring row for `flux/api-company-source/` updated to reflect Fork PR #399 **MERGED** to leeworks-agents/Talos; upstream PR #14 open on 0xWheatyz/Talos awaiting operator merge. Current Blockers updated to note upstream PR #14 as critical gate.
|
||||
- **#201** — Sprint planning STATUS.md update for 2026-06-04 cycle. Issues #200 and #201 created this cycle. ROADMAP cross-reference: all 18 unchecked items confirmed grounded in open issues (no gaps). Staleness check: oldest open issue is #2 from 2026-05-18 (17 days, not stale — threshold 30 days). Priority review: all labels confirmed appropriate. Critical path: operator-gated on 0xWheatyz/Talos PR #14 merge.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #198)
|
||||
|
||||
- **#198** — STATUS.md updated for 2026-06-04 sprint planning cycle. Last updated date set to 2026-06-04.
|
||||
- **Sprint Summary:** 0 new code issues created (all ROADMAP items grounded — all 18 unchecked items have corresponding open issues). 0 issues closed (no stale; oldest is #2 at 17 days). 0 label changes. Critical path is entirely operator-gated: Talos merge of #187 unblocks the #2/#3/#4 chain.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-04 — Sprint Planning Cycle #196)
|
||||
|
||||
- **#196** — STATUS.md updated for 2026-06-04 sprint planning cycle. Last updated date set to 2026-06-04.
|
||||
- **Sprint Summary:** ROADMAP cross-reference complete — all 18 unchecked items have corresponding open issues (no gaps). 1 new issue created: #196 (this STATUS.md update). 0 issues closed (no stale issues; oldest open issue is #2 from 2026-05-18, only 17 days old). 0 label changes (all priority/complexity labels correct). Critical path remains entirely operator-gated.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-03 — Sprint Planning Cycle #193/#194)
|
||||
|
||||
- **#194** — ROADMAP.md annotated with missing issue cross-references: Phase 0 issue #2 entry updated to reference implementation issue #187; Phase 6 entries added for issue #166 (pre-launch checklist) and #167 (launch announcement). Closes leeworks-agents/api-company#194.
|
||||
- **#193** — STATUS.md updated for 2026-06-03 sprint planning cycle. Current Blockers confirmed accurate; #80 (gitea-image-automation-token) listed. Closes leeworks-agents/api-company#193.
|
||||
- **Sprint Summary:** 2 new documentation issues created (#193 STATUS.md update, #194 ROADMAP annotation). 0 issues closed. 0 stale. Critical path entirely operator-gated.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-03 — Audit Cycle #190/#191)
|
||||
|
||||
- **#190** — ZIP Enrichment API audit complete: `openapi.yaml` present at repo root (57 KB, OpenAPI 3.0.3); server entry point `src/server.js`; all routes confirmed implemented; `X-RapidAPI-Proxy-Secret` preHandler middleware on all routes except `/health`; `/metrics` Prometheus endpoint present; STATUS.md ZIP Enrichment Spec and Code rows updated to `[x]`. Closes leeworks-agents/api-company#190.
|
||||
- **#191** — Holidays API audit complete: `openapi.yaml` present at repo root (13 KB, OpenAPI 3.0.3); server entry point `src/server.js`; all routes confirmed implemented; `X-RapidAPI-Proxy-Secret` preHandler middleware on all routes except `/health` and `/metrics`; `/metrics` Prometheus endpoint present (issue #180 confirmed done); STATUS.md Holidays Spec and Code rows updated to `[x]`. Closes leeworks-agents/api-company#191.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-03 — Sprint Planning Cycle)
|
||||
|
||||
- **#188** — STATUS.md updated for 2026-06-03 sprint planning cycle (this entry). Last updated date set to 2026-06-03.
|
||||
- **#187** — Talos PR for api-company Flux source manifests: PR #399 on `leeworks-agents/Talos` confirmed valid; upstream deploy PR created targeting `0xWheatyz/Talos`.
|
||||
- **#186** — Air Quality API audit complete: `openapi.yaml` ✅ exists at repo root in `leeworks-agents/air-quality`; server implementation ✅ present (`src/server.ts`, `src/app.ts`, `src/routes/`); STATUS.md Air Quality row updated to `[x]/[x]`.
|
||||
- **#178** relabeled — added `blocked` label (depends on #173 + Flux active).
|
||||
- **#174** relabeled — added `blocked` label (depends on #18 deploy + #7 monitoring).
|
||||
- **Current Blockers updated:** #187 added before #90 (same unblock target, more actionable).
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-02 — Sprint Planning Cycle #175/#176)
|
||||
|
||||
- **#176** — ROADMAP.md Phase 6 unchecked items annotated with issue cross-references: DNS — issues #33, #106, #150; PayPal — issue #19; Paid tiers — issues #44 (original 3), #151 (VIN Decoder). No checked items changed.
|
||||
- **#175** — STATUS.md updated with 2026-06-02 sprint planning cycle results (this entry). Last updated date set to 2026-06-02.
|
||||
- **Sprint Summary:** 2 new documentation issues created (#175 STATUS.md update, #176 ROADMAP Phase 5/6 annotation). 0 code issues created (all ROADMAP items already covered by existing issues). 0 issues closed (none stale). 0 reprioritizations.
|
||||
- **Current Blockers updated:** #173 (ESO source secrets in `external-secrets` ns) and #174 (VIN Decoder metrics instrumentation) added.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-02 — Sprint Planning Cycle)
|
||||
|
||||
- **#171** — ROADMAP.md Phase 0 unchecked items annotated with issue #2, #3, #4; Phase 4 unchecked items annotated with issue #7, #8, #27; Phase 5 unchecked item annotated with issue #30. No checked-off items changed.
|
||||
- **#170** — STATUS.md updated with 2026-06-02 sprint planning cycle results (this entry). Last updated date set to 2026-06-02.
|
||||
- **Sprint Summary:** 2 new issues created (#171, #170), 0 issues closed this cycle, 0 stale found.
|
||||
- **`kustomize build flux/` = PASS** — no regressions confirmed.
|
||||
|
||||
## Completed Previous Cycle (2026-06-02 — Triage Cycle #168)
|
||||
- **#168** — STATUS.md cleanup: removed all stale “open, in progress” references to #120 and #121 (both confirmed closed ✅ in leeworks-agents/vin-decoder). Historical sections corrected. VIN Decoder Code column confirmed `[x]`.
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
|
||||
## Completed Previous Cycle (2026-06-01 — Sprint Planning Cycle)
|
||||
- **#163** — ROADMAP.md Phase 2 and Phase 3 VIN Decoder bullets marked `[x]` with closed ✅ references for issues #120 and #121.
|
||||
- **#164** — STATUS.md Current Blockers updated: removed #120 and #121 (both confirmed closed ✅). Top actionable agent task updated to #163.
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
|
||||
## Completed Previous Cycle (2026-06-01 — Triage Cycle)
|
||||
- **#158** — STATUS.md updated with 2026-06-01 current blockers and sprint summary.
|
||||
- **#156** — ROADMAP.md checkboxes updated: Phase 4 VIN Decoder metrics, Phase 5 docs-site/pipeline/blog, Phase 6 legal docs all checked off.
|
||||
- **VIN Decoder Code `[x]`** — leeworks-agents/vin-decoder data layer (#120) and Fastify server (#121) confirmed merged; STATUS.md Code column updated.
|
||||
- **PR #160 closed** — had merge conflicts and ROADMAP.md regressions (unchecked completed items). Clean fix applied here.
|
||||
- **`kustomize build flux/` = PASS** — no regressions.
|
||||
|
||||
## Current Blockers (as of 2026-06-07)
|
||||
|
||||
In dependency order — operator tasks unless noted:
|
||||
|
||||
1. **P1 #47** — Create `0xWheatyz/api-company` upstream repo (operator) — **highest priority, unblocks everything**
|
||||
2. **P1 #76** — Create `gitea-leeworks-agents-token` secret in `flux-system` (operator)
|
||||
3. **P1 #77** — Create `gitea-runner-token` secret in `gitea-runner` namespace (operator)
|
||||
4. **P1 #79** — Create `gitea-registry` imagePullSecrets in all API namespaces (operator)
|
||||
5. **P1 #83** — Configure `GITEA_TOKEN` Actions secret in zip-enrichment, holidays, air-quality repos (operator)
|
||||
6. **P1 #126** — Configure `GITEA_TOKEN` Actions secret in vin-decoder repo (operator — depends on #122 ✅)
|
||||
7. **P1 #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace (operator)
|
||||
8. **P1 #218** — Operator: merge 0xWheatyz/Talos upstream PR #14 to activate Flux GitOps for api-company — Fork PR #399 already MERGED to leeworks-agents/Talos; upstream PR #14 is the critical gate; unblocks #2, #3, #4, #66 chain (replaces closed #187 and #90)
|
||||
10. **P2 #80** — Create `gitea-image-automation-token` secret in `flux-system` namespace (operator) — enables Flux image automation
|
||||
11. **P2 #173** — Create ESO source secrets in `external-secrets` namespace for RapidAPI proxy-secret syncing (operator) — blocks ESO sync
|
||||
12. **P2 #231** — Verify VIN Decoder metrics endpoint and ServiceMonitor scrape config in live cluster (depends on #218 — Flux must be active first)
|
||||
13. **P2 #178** — Validate ESO HelmRelease deployment and ExternalSecret sync for all 4 API namespaces (depends on #173 + Flux active)
|
||||
14. **P2 #179** — Execute extended full-stack Flux validation checklist including VIN Decoder (depends on #126, #127, #128)
|
||||
|
||||
## Sprint Summary (2026-06-01 — Sprint Planning Cycle)
|
||||
- **Issues closed this cycle:** 0
|
||||
- **New issues created this cycle:** 1 (#163 — ROADMAP/STATUS cleanup after #120/#121)
|
||||
- **Stale issues found:** 0
|
||||
- **Top actionable agent task:** #163 (pure doc update, immediately actionable)
|
||||
- **Critical path:** Entirely operator-gated after #163 is merged (see Current Blockers)
|
||||
|
||||
## Sprint Summary (2026-06-01)
|
||||
- **Issues closed since last STATUS update (#146):** #145–#154 — VIN Decoder sprint docs + infra (✅ all closed)
|
||||
- **Issues opened this sprint:** #150 (vin DNS reminder), #151 (VIN Decoder RapidAPI tiers), #155 (if applicable), #156 (ROADMAP.md update), #157 (full-stack validation), #158 (STATUS.md update), #163 (ROADMAP/STATUS cleanup post-#120/#121), #164 (STATUS.md sprint planning update)
|
||||
- **Top actionable agent task:** #163 (ROADMAP/STATUS doc cleanup for #120/#121 — pure doc update, immediately actionable)
|
||||
- **Upstream `0xWheatyz/api-company`** — still does not exist; fork sync skipped (blocker #47).
|
||||
|
||||
## Completed Previous Cycle (2026-05-31 — Sprint Cycle)
|
||||
- **#146** — STATUS.md updated to reflect VIN Decoder sprint wave (#117–#141): APIs table row added, completed wave documented, blockers updated.
|
||||
@@ -318,8 +39,8 @@ In dependency order — operator tasks unless noted:
|
||||
## Completed Previous Cycle (2026-05-30 — VIN Decoder Sprint Wave)
|
||||
### VIN Decoder issues #117–#141 — status as of 2026-05-31:
|
||||
- **#117** — VIN Decoder spec + feasibility — **closed ✅** (`apis/vin-decoder/openapi.yaml` merged)
|
||||
- **#120** — VIN Decoder data layer (SQLite/NHTSA vPIC) — **closed ✅** (leeworks-agents/vin-decoder)
|
||||
- **#121** — VIN Decoder Fastify server — **closed ✅** (leeworks-agents/vin-decoder)
|
||||
- **#120** — VIN Decoder data layer (SQLite/NHTSA vPIC) — **open, in progress** (P1 blocker)
|
||||
- **#121** — VIN Decoder Fastify server — **open, in progress** (P1 blocker, depends on #120)
|
||||
- **#122** — Create `leeworks-agents/vin-decoder` repo — **closed ✅**
|
||||
- **#123** — VIN Decoder docs page — **closed ✅**
|
||||
- **#124** — VIN Decoder SEO blog post — **closed ✅**
|
||||
@@ -335,25 +56,24 @@ In dependency order — operator tasks unless noted:
|
||||
- **#141** — Pricing page updated for VIN Decoder — **closed ✅** (PR #144 merged)
|
||||
|
||||
## Critical Path (operator must complete in order)
|
||||
See **Current Blockers** section above for the full ordered list as of 2026-06-01.
|
||||
|
||||
1. **Create `0xWheatyz/api-company` repo** (#47) — **highest priority, unblocks everything**
|
||||
2. **Merge upstream Talos PR #14 to activate Flux for api-company** (#218) — manifests already committed; operator must merge 0xWheatyz/Talos PR #14
|
||||
2. **Add api-company Flux source to Talos** (#90) — needs Talos PR, reference manifests at `flux/api-company-source/`
|
||||
3. **Create `gitea-leeworks-agents-token` secret** in `flux-system` (#76)
|
||||
4. **Create `gitea-runner-token` secret** in `gitea-runner` (#77)
|
||||
5. **Enable Gitea packages + DNS for `registry.leeworks.dev`** (#4)
|
||||
6. **All other secrets** (#70, #73, #74, #79, #80, #81, #83) follow in order
|
||||
|
||||
## Blockers — VIN Decoder critical path
|
||||
- **P1: #120** — VIN Decoder data layer (NHTSA vPIC SQLite cache) — agent work pending
|
||||
- **P1: #121** — VIN Decoder Fastify server — agent work pending, depends on #120
|
||||
- **P1: #127** — Create `gitea-registry` imagePullSecret in `vin-decoder` namespace — operator manual task
|
||||
- **P2: #126** — Configure `GITEA_TOKEN` secret in `vin-decoder` repo — operator manual task
|
||||
- **P2: #128** — Create `rapidapi-proxy-secret` in `vin-decoder` namespace — operator manual task
|
||||
- ~~**P2: #129** — VIN Decoder Prometheus metrics instrumentation~~ — **closed ✅** (PR merged)
|
||||
- **P2: #129** — VIN Decoder Prometheus metrics instrumentation — agent work pending, depends on #121
|
||||
- **P3: #139** — Add RAPIDAPI_VIN_* Actions secrets — operator task, depends on RapidAPI listing (#131)
|
||||
|
||||
## New Issues This Sprint (2026-05-30, #120–#146)
|
||||
- **#120** — VIN Decoder data layer — **closed ✅** (leeworks-agents/vin-decoder)
|
||||
- **#121** — VIN Decoder Fastify server — **closed ✅** (leeworks-agents/vin-decoder)
|
||||
- **#120** — VIN Decoder data layer — **open, P1**
|
||||
- **#121** — VIN Decoder Fastify server — **open, P1**
|
||||
- **#126** — Operator: GITEA_TOKEN secret in vin-decoder repo — manual operator task
|
||||
- **#127** — Operator: gitea-registry imagePullSecret in vin-decoder namespace — manual operator task, P1 blocker
|
||||
- **#128** — Operator: rapidapi-proxy-secret in vin-decoder namespace — manual operator task
|
||||
|
||||
Generated
-7567
File diff suppressed because it is too large
Load Diff
@@ -8,9 +8,9 @@
|
||||
"preview": "astro preview"
|
||||
},
|
||||
"dependencies": {
|
||||
"@astrojs/mdx": "^3.0.0",
|
||||
"@astrojs/sitemap": "~3.2.1",
|
||||
"astro": "^4.8.0",
|
||||
"@astrojs/mdx": "^3.0.0",
|
||||
"@astrojs/sitemap": "^3.1.0",
|
||||
"redoc": "^2.1.5"
|
||||
},
|
||||
"devDependencies": {
|
||||
|
||||
@@ -1,120 +0,0 @@
|
||||
# Deploying the APIs (Flux GitOps → Talos)
|
||||
|
||||
> Handoff doc. The APIs are **not** deployed by Gitea Actions — they are deployed
|
||||
> by **Flux** running on the Talos Kubernetes cluster. The Gitea Actions in this
|
||||
> repo only build the docs-site image, validate Flux manifests, and publish
|
||||
> OpenAPI specs to RapidAPI.
|
||||
|
||||
## How a deploy actually happens
|
||||
|
||||
```
|
||||
API repo (e.g. leeworks-agents/zip-enrichment)
|
||||
└─ its own CI builds & pushes registry.leeworks.dev/zip-enrichment/server:<tag>
|
||||
└─ Flux image-automation (flux/image-automation/) rewrites the
|
||||
{"$imagepolicy": "flux-system:<api>"} marker in flux/<api>/helmrelease.yaml
|
||||
└─ Flux GitRepository "api-company" (polls main every 5m)
|
||||
└─ HelmRelease per API (flux/<api>/helmrelease.yaml, bedag/raw chart)
|
||||
└─ Deployment rolls out in the cluster namespace
|
||||
```
|
||||
|
||||
Each API has its own directory under `flux/`:
|
||||
|
||||
| API | Namespace | HelmRelease path | Image |
|
||||
|---|---|---|---|
|
||||
| zip-enrichment | `zip-enrichment` | `flux/zip-enrichment/helmrelease.yaml` | `registry.leeworks.dev/zip-enrichment/server` |
|
||||
| holidays | `holidays` | `flux/holidays/helmrelease.yaml` | `registry.leeworks.dev/holidays/server` |
|
||||
| air-quality | `air-quality` | `flux/air-quality/helmrelease.yaml` | `registry.leeworks.dev/air-quality/server` |
|
||||
| vin-decoder | `vin-decoder` | `flux/vin-decoder/helmrelease.yaml` | `registry.leeworks.dev/vin-decoder/server` |
|
||||
|
||||
(Confirm each path's exact image with `grep -r imagepolicy flux/`.)
|
||||
|
||||
## Prerequisite: the manifests must be live in the cluster's Flux source
|
||||
|
||||
`flux/api-company-source/gitrepository.yaml` is **reference only**. The
|
||||
*authoritative* copy must be committed to **`0xWheatyz/Talos`** at:
|
||||
|
||||
```
|
||||
testing1/first-cluster/cluster/flux/api-company/
|
||||
```
|
||||
|
||||
If that path does not point Flux at this repo's `flux/` directory, Flux never
|
||||
sees these HelmReleases and nothing deploys. Verify the Talos repo references
|
||||
this repo's `main` branch and that a Flux `Kustomization` includes the
|
||||
`api-company` path.
|
||||
|
||||
Per-API the cluster also needs (already templated under `flux/<api>/`):
|
||||
- `namespace.yaml` — the target namespace
|
||||
- the `gitea-registry` imagePullSecret in that namespace
|
||||
- `externalsecret.yaml` — pulls API keys (e.g. RapidAPI) via external-secrets
|
||||
- `servicemonitor.yaml` — Prometheus scraping (optional for deploy)
|
||||
|
||||
## One-time local setup (machine with cluster access)
|
||||
|
||||
You need tools that are **not** installed on the dev machine yet:
|
||||
|
||||
```bash
|
||||
# Talos kubeconfig — export from the Talos controlplane, e.g.:
|
||||
# talosctl kubeconfig ~/.kube/talos-leeworks
|
||||
export KUBECONFIG=~/.kube/talos-leeworks
|
||||
kubectl cluster-info # must succeed before continuing
|
||||
|
||||
# Flux CLI
|
||||
brew install fluxcd/tap/flux
|
||||
# Helm (optional, for debugging charts)
|
||||
brew install helm
|
||||
|
||||
flux check # confirm Flux is installed & healthy in-cluster
|
||||
```
|
||||
|
||||
## Deploy / sync all APIs
|
||||
|
||||
```bash
|
||||
export KUBECONFIG=~/.kube/talos-leeworks
|
||||
|
||||
# 1. Pull the latest main into the cluster's Git source
|
||||
flux reconcile source git api-company -n flux-system
|
||||
|
||||
# 2. Apply the manifests (name may differ — check: flux get kustomizations -A)
|
||||
flux reconcile kustomization api-company -n flux-system
|
||||
|
||||
# 3. Reconcile each API's HelmRelease
|
||||
flux reconcile helmrelease zip-enrichment -n zip-enrichment
|
||||
flux reconcile helmrelease holidays -n holidays
|
||||
flux reconcile helmrelease air-quality -n air-quality
|
||||
flux reconcile helmrelease vin-decoder -n vin-decoder
|
||||
|
||||
# 4. Verify everything is Ready
|
||||
flux get helmreleases -A
|
||||
kubectl get pods -A | grep -E 'zip-enrichment|holidays|air-quality|vin-decoder'
|
||||
```
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
```bash
|
||||
# Why is a release not Ready?
|
||||
flux get helmrelease <name> -n <ns>
|
||||
kubectl describe helmrelease <name> -n <ns>
|
||||
|
||||
# Is image automation picking up new tags?
|
||||
flux get image policy -n flux-system
|
||||
flux get image update -A
|
||||
|
||||
# Pod won't start (image pull / secret issues)
|
||||
kubectl describe pod <pod> -n <ns>
|
||||
kubectl get events -n <ns> --sort-by=.lastTimestamp | tail -20
|
||||
```
|
||||
|
||||
## Force a fresh deploy of a single API
|
||||
|
||||
```bash
|
||||
flux suspend helmrelease <name> -n <ns>
|
||||
flux resume helmrelease <name> -n <ns> # triggers a fresh reconcile
|
||||
# or restart the workload directly:
|
||||
kubectl rollout restart deployment/<name> -n <ns>
|
||||
```
|
||||
|
||||
## Related docs in this repo
|
||||
- `docs/operator-runbook.md` — day-2 operations
|
||||
- `docs/registry.md` — container registry (`registry.leeworks.dev`) setup
|
||||
- `docs/secrets-checklist.md` — required cluster secrets
|
||||
- `flux/image-automation/` — automatic image tag bumping
|
||||
@@ -286,11 +286,7 @@ annotations:
|
||||
|
||||
## Grafana Dashboard
|
||||
|
||||
Grafana dashboards are committed as Flux ConfigMaps and are auto-loaded by Grafana via the `grafana_dashboard: "1"` label:
|
||||
- `flux/monitoring/grafana-dashboard-apis.yaml` — consolidated 4-API dashboard (all APIs)
|
||||
- `flux/monitoring/vin-decoder-dashboard.yaml` — VIN Decoder-specific dashboard
|
||||
|
||||
Dashboards will load automatically once Grafana is deployed (issue #7) and Flux is active (issue #218).
|
||||
A reference dashboard JSON is available at `docs/grafana-api-dashboard.json` (TBD — will be committed once Grafana is deployed per issue #7).
|
||||
|
||||
Key panels to include:
|
||||
1. Request rate by API and status (`rate(api_requests_total[5m])`)
|
||||
|
||||
@@ -77,7 +77,7 @@ Use this checklist as the final go-live gate — run through every item the day
|
||||
flux get all
|
||||
|
||||
# Check API pod health
|
||||
for ns in zip-enrichment holidays air-quality vin-decoder docs-site; do
|
||||
for ns in zip-enrichment holidays air-quality docs-site; do
|
||||
echo "=== $ns ==="
|
||||
kubectl get pods -n $ns
|
||||
done
|
||||
@@ -85,13 +85,13 @@ done
|
||||
# Verify TLS certs
|
||||
kubectl get certificates -A
|
||||
|
||||
# Check all 8 DNS subdomains
|
||||
for sub in zip holidays aqi vin docs status registry grafana; do
|
||||
# Check all 7 DNS subdomains
|
||||
for sub in zip holidays aqi docs status registry grafana; do
|
||||
echo "$sub.leeworks.dev -> $(dig $sub.leeworks.dev +short)"
|
||||
done
|
||||
|
||||
# Smoke test health endpoints
|
||||
for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health" "vin.leeworks.dev/v1/health"; do
|
||||
for svc in "zip.leeworks.dev/health" "holidays.leeworks.dev/health" "aqi.leeworks.dev/health"; do
|
||||
echo "$svc: $(curl -s -o /dev/null -w '%{http_code}' https://$svc)"
|
||||
done
|
||||
|
||||
|
||||
@@ -12,7 +12,7 @@ Follow this list top-to-bottom; each step unblocks the next.
|
||||
- [ ] 1. `gitea-leeworks-agents-token` (flux-system) — unblocks Flux GitRepository auth
|
||||
- [ ] 2. `gitea-runner-token` (gitea-runner) — unblocks Gitea Actions runner registration
|
||||
- [ ] 3. `grafana-admin` (monitoring) — unblocks Grafana login
|
||||
- [ ] 4. `gatus-slack-webhook` (monitoring) — unblocks Gatus alert notifications AND Alertmanager Slack SLO alerts
|
||||
- [ ] 4. `gatus-slack-webhook` (monitoring) — unblocks Gatus alert notifications
|
||||
- [ ] 5. `GITEA_TOKEN` in each API repo's Actions Secrets — unblocks CI image push
|
||||
- [ ] 6. Gitea packages enabled + DNS record for `registry.leeworks.dev` — unblocks image push to registry
|
||||
- [ ] 7. Add api-company Flux source + kustomization to 0xWheatyz/Talos — unblocks all GitOps reconciliation
|
||||
@@ -92,12 +92,9 @@ Grafana will be accessible at `https://grafana.leeworks.dev` (login: `admin` / `
|
||||
|-----------|-------|
|
||||
| Name | `gatus-slack-webhook` |
|
||||
| Namespace | `monitoring` |
|
||||
| Purpose | Gatus posts downtime alerts to a Slack channel via incoming webhook. Also mounted by Alertmanager (`alertmanagerSpec.secrets`) to send SLO / firing-alert Slack notifications. |
|
||||
| Purpose | Gatus posts downtime alerts to a Slack channel via incoming webhook |
|
||||
| Source | Slack → Your workspace → Apps → Incoming Webhooks → Add to Slack → copy webhook URL |
|
||||
| Unblocks | Issue #8 (Gatus status page at `status.leeworks.dev`); Alertmanager Slack receiver (issue #210) |
|
||||
| Consumers | **Two components** share this secret: (1) **Gatus** (`flux/monitoring/gatus-helmrelease.yaml`) — public status-page alerts; (2) **Alertmanager** (`flux/monitoring/helmrelease.yaml` via `alertmanagerSpec.secrets`) — SLO / firing-alert Slack notifications |
|
||||
|
||||
> **Note (dual consumer):** Creating this one secret (`gatus-slack-webhook` in the `monitoring` namespace) unblocks **both** Gatus alert delivery AND Alertmanager's Slack receiver. The Alertmanager configuration references this secret at `global.slack_api_url_file: /etc/alertmanager/secrets/gatus-slack-webhook/url` (enabled in PR #212 / issue #210).
|
||||
| Unblocks | Issue #8 (Gatus status page at `status.leeworks.dev`) |
|
||||
|
||||
```bash
|
||||
kubectl create secret generic gatus-slack-webhook \
|
||||
@@ -269,7 +266,7 @@ kubectl create secret generic rapidapi-proxy-secret \
|
||||
1 (gitea-leeworks-token) → Flux can pull this repo over HTTPS
|
||||
2 (gitea-runner-token) → runner online → CI runs
|
||||
3 (grafana-admin) → Grafana login works
|
||||
4 (gatus-slack-webhook) → Gatus alerting works + Alertmanager Slack SLO alerts
|
||||
4 (gatus-slack-webhook) → Gatus alerting works
|
||||
5 + 6 (GITEA_TOKEN + registry packages) → CI pushes images → API services deploy
|
||||
8 (gitea-registry) → pods can pull images from registry.leeworks.dev → services start
|
||||
9 (gitea-image-automation-token) → Flux ImageUpdateAutomation pushes tag-update commits
|
||||
|
||||
@@ -85,25 +85,7 @@ spec:
|
||||
action: replace
|
||||
target_label: kubernetes_pod_name
|
||||
alertmanager:
|
||||
enabled: true
|
||||
config:
|
||||
global:
|
||||
slack_api_url_file: /etc/alertmanager/secrets/gatus-slack-webhook/url
|
||||
route:
|
||||
receiver: slack-api-alerts
|
||||
group_by: [alertname, namespace]
|
||||
group_wait: 30s
|
||||
group_interval: 5m
|
||||
repeat_interval: 4h
|
||||
receivers:
|
||||
- name: slack-api-alerts
|
||||
slack_configs:
|
||||
- channel: '#api-alerts'
|
||||
title: '{{ .CommonAnnotations.summary }}'
|
||||
text: '{{ range .Alerts }}{{ .Annotations.description }}{{ end }}'
|
||||
alertmanagerSpec:
|
||||
secrets:
|
||||
- gatus-slack-webhook
|
||||
enabled: false # Enable when alert routing is configured
|
||||
kubeStateMetrics:
|
||||
enabled: true
|
||||
nodeExporter:
|
||||
|
||||
@@ -37,8 +37,7 @@ spec:
|
||||
- name: vin-decoder
|
||||
image: registry.leeworks.dev/vin-decoder/api:latest # {"$imagepolicy": "flux-system:vin-decoder"}
|
||||
ports:
|
||||
- name: http
|
||||
containerPort: 3000
|
||||
- containerPort: 3000
|
||||
env:
|
||||
- name: RAPIDAPI_PROXY_SECRET
|
||||
valueFrom:
|
||||
@@ -73,8 +72,7 @@ spec:
|
||||
selector:
|
||||
app: vin-decoder
|
||||
ports:
|
||||
- name: http
|
||||
port: 80
|
||||
- port: 80
|
||||
targetPort: 3000
|
||||
- apiVersion: networking.k8s.io/v1
|
||||
kind: Ingress
|
||||
|
||||
@@ -1,68 +0,0 @@
|
||||
#!/usr/bin/env bash
|
||||
# Create the Gitea PATs the build-docs workflow needs and store them as action
|
||||
# secrets on leeworks-agents/api-company:
|
||||
# - SIBLING_REPOS_TOKEN : read:repository (clone the sibling API repos)
|
||||
# - REGISTRY_TOKEN : write:package + read:package
|
||||
# (push the docs-site image to gitea.leeworks.dev)
|
||||
#
|
||||
# Why this script exists:
|
||||
# - The auto-injected GITEA_TOKEN is scoped to THIS repo only (can't read
|
||||
# sibling repos) and has no package-registry scope (can't push images).
|
||||
# GITEA_TOKEN is also a reserved secret name that cannot be overridden.
|
||||
# - `tea` cannot CREATE a PAT (no such command), and Gitea's token-creation
|
||||
# API requires BASIC AUTH (your password) — a token cannot mint a token.
|
||||
# - `tea` CAN set the action secrets using its existing login.
|
||||
#
|
||||
# So: this prompts for your password ONCE, mints both PATs via the API, and
|
||||
# pipes each straight into `tea`. Token values are never written to disk.
|
||||
#
|
||||
# Usage: bash scripts/setup-sibling-repos-token.sh
|
||||
set -euo pipefail
|
||||
|
||||
GITEA_URL="https://gitea.leeworks.dev"
|
||||
GITEA_USER="0xWheatyz"
|
||||
REPO="leeworks-agents/api-company"
|
||||
# Unique per run (date + seconds + pid) so re-runs never collide with an
|
||||
# existing PAT name — Gitea returns 400 "token name has been used" otherwise.
|
||||
STAMP="$(date +%Y%m%d-%H%M%S)-$$"
|
||||
|
||||
command -v curl >/dev/null || { echo "curl required"; exit 1; }
|
||||
command -v tea >/dev/null || { echo "tea required"; exit 1; }
|
||||
command -v python3 >/dev/null || { echo "python3 required"; exit 1; }
|
||||
|
||||
echo "Gitea user: $GITEA_USER ($GITEA_URL)"
|
||||
read -r -s -p "Gitea password (for $GITEA_USER): " GITEA_PASS
|
||||
echo
|
||||
|
||||
failures=0
|
||||
|
||||
# mint_token <token-name> <json-scopes-array> <secret-name>
|
||||
mint_token() {
|
||||
local token_name="$1" scopes="$2" secret_name="$3" body code pat
|
||||
# Capture body + HTTP status separately so 4xx errors show the real message.
|
||||
body="$(curl -sS -o - -w $'\n%{http_code}' -X POST \
|
||||
-u "${GITEA_USER}:${GITEA_PASS}" \
|
||||
-H 'Content-Type: application/json' \
|
||||
-d "{\"name\":\"${token_name}\",\"scopes\":${scopes}}" \
|
||||
"${GITEA_URL}/api/v1/users/${GITEA_USER}/tokens")"
|
||||
code="${body##*$'\n'}"
|
||||
body="${body%$'\n'*}"
|
||||
if [ "$code" -lt 200 ] || [ "$code" -ge 300 ]; then
|
||||
echo " ✗ ${secret_name}: token API returned HTTP ${code}: ${body}" >&2
|
||||
echo " (401/403 = wrong password or 2FA; 400 = duplicate name or bad scope)" >&2
|
||||
failures=$((failures+1)); return 1
|
||||
fi
|
||||
pat="$(printf '%s' "$body" | python3 -c 'import sys,json; print(json.load(sys.stdin)["sha1"])' 2>/dev/null || true)"
|
||||
[ -n "$pat" ] || { echo " ✗ ${secret_name}: could not parse token from: ${body}" >&2; failures=$((failures+1)); return 1; }
|
||||
printf '%s' "$pat" | tea actions secrets create "$secret_name" --repo "$REPO" --stdin
|
||||
echo " ✓ ${secret_name} set (PAT '${token_name}')"
|
||||
}
|
||||
|
||||
# Don't let one failure abort the rest.
|
||||
mint_token "sibling-repos-readonly-${STAMP}" '["read:repository"]' "SIBLING_REPOS_TOKEN" || true
|
||||
mint_token "docs-registry-${STAMP}" '["write:package","read:package"]' "REGISTRY_TOKEN" || true
|
||||
|
||||
unset GITEA_PASS
|
||||
echo "Done (${failures} failure(s)). Verify: tea actions secrets list --repo ${REPO}"
|
||||
echo "Then re-run build-docs (push to main, or: tea actions workflows dispatch build-docs.yaml)"
|
||||
[ "$failures" -eq 0 ]
|
||||
Reference in New Issue
Block a user