trevato/mitosis
Public: anyone can read this; nobody can change it.
bugdiscussionduplicateenhancementgoalhelp wantedhorizon:backloghorizon:governancehorizon:mvpinvalidoperator-decisionquestionroadmapwontfix
- 🧫 gauntlet: anon-surface failing plat ·
- 🧫 gauntlet: rehome failing plat ·
- create_app org-only rule: scope, the real special cases, and how to remove them plat ·
- orgs born in the Forgejo UI bypass the lowercase naming contract — Micavacado-LLC was born dead plat ·
- namespaces: stamp plat.sh/repo-id so a same-name re-creation cannot inherit a dying app plat ·
- create_app: the dispatcher's bootstrap races a manual create_app; the 5-min CI wait is short for a cold runner plat ·
- on-demand (sablier) must honour plat.sh/lifecycle=archived plat ·
- flux notification-controller: 'cannot assign requested address' to forgejo-http under load (per-org alert providers) plat ·
- release.yml tag builds failing platform-wide: isolated runner jobs die mid-run with no logs; workflows service also unreachable plat ·
- Horizontal scaling: migrate product-garden off the DO droplet, then make it the platform's 2nd node plat ·
- Private plane: self-hosted Headscale mesh for operator access + fleet (MagicDNS), de-coupling admin from Cloudflare plat ·
- opensearch trevato ·
- forgejo time tracker trevato ·
- forwardAuth breaks all app ingresses: traefik cannot resolve per-app kubernetescrd Middleware (middleware does not exist) plat ·
- Enforce flip breaks ALL app TLS: disallow-unmanaged-secrets blocks cert-managers issuance temp secrets (wildcard-plat-tls-<rand>) plat ·
- DB apps fail on bare k3s: app-ns NetworkPolicy blocks CNPG initdb→apiserver egress (gate only runs on k3d) plat ·
- kube agent add trevato ·
- [ROADMAP] First Client Deploy → Governance — tracker roadmap plat ·
- /goal /ultracode-workflows [GATE] validated grandchild acceptance gate — secrets+domains+rbac+policy on a VPS depth-2/3 platform goal horizon:governance operator-decision roadmap plat ·
- /goal /ultracode-workflows [POL-3] image provenance via Kyverno verifyImages + platform CI cosign signing goal horizon:governance operator-decision roadmap plat ·
- Per-app egress allowlists via Cilium FQDN policies (tighten the interim 443/80 default) plat ·
- platform agent-work enhancement trevato ·
- grafana enhancement trevato ·
- bring your identity provider discussion trevato ·