All tasks
grafana-cloud-vending-machine
102 tasks: 3 open, 99 completed. Choose a column heading to sort by it, and again to reverse it. Dates show the last recorded change; completed tasks have no separate completion date.
No tasks match these filters. Clear them to see all tasks.
GCV-0001Public-release scan is red on main: it rejects the docs-hub repository referenceGCV-0002Pinned runtime ServiceAccount names break every package on a Crossplane upgradeGCV-0003Stage stack-local resources so a healthy first vend is quietGCV-0004Bind signature verification to the installed package digestGCV-0005Onboard Renovate, including the managers that are inert by defaultGCV-0006Give the API a reviewable decommission pathGCV-0007Constrain the usage classificationGCV-0008Stage the access claims on the stack they referenceGCV-0009Reconsider typed request structs as the API growsGCV-0010Bump the provider pin to the release carrying Agent Observability and the new App Platform kindsGCV-0011Consider a domain API for Agent Observability evaluators and guardsGCV-0012Expose observability product activation on the stack requestGCV-0013Enforce a token expiry ceiling in the composition functionGCV-0014Allow a platform-controlled IP allow-list on vended access policiesGCV-0015Add a Grafana Assistant governance APIGCV-0016Add an observe-only stack inventory API for drift detection and adoptionGCV-0017Add a datasource access API that aggregates LBAC rules per datasourceGCV-0018Add a per-stack alerting bundle with an explicit provenance decisionGCV-0019Vend a golden SLO per usage classGCV-0020Vend baseline Fleet Management pipelines as a telemetry hygiene controlGCV-0021Vend a k6 project with limits and allowed load zones as a blast-radius capGCV-0022Vend Synthetic Monitoring installation with a check budget, and verify it independentlyGCV-0023Decide who owns dashboard content: provisioning repositories or CrossplaneGCV-0024Model a multi-stack promotion ladder as a first-class APIGCV-0025Add expiring sandbox stacks with a recorded extension trailGCV-0026Make retention class a stack-request input, because export does not exist at decommissionGCV-0027Prohibit public dashboards by construction in vended custom rolesGCV-0028Decide the SCIM and Team Sync direction before the tenant count growsGCV-0029Decide how to reach Adaptive Metrics, the largest cost lever with no Crossplane coverageGCV-0030Upgrade Go toolchain to 1.27GCV-0031Migrate the repo task surface to just and retire Makefiles and ad-hoc scriptsGCV-0032Vend into multiple Grafana Cloud organisationsGCV-0033Onboard release-please so a breaking API change is recorded as a versionGCV-0034Admit every XRD against a real API server so CEL rules are proven, not parsedGCV-0035Prove every fail-closed CEL rule actually rejects, against a real API serverGCV-0036Close the hand-maintained registry drift class the catalog render gap exposedGCV-0037Write the 0.x to 1.0 migration guide for the breaking API changesGCV-0038Split the 75 KB README so it stops being a single-owner scheduling bottleneckGCV-0039Resolve the open SCIM user-lifecycle question and correct the recorded plan floorGCV-0040Reject structurally invalid XRD schemas in the gate, without an API serverGCV-0041Provision pinned envtest assets in hosted CI so the admission gate can run thereGCV-0042Reconcile held-candidate documentation after the admission gate landsGCV-0043Reconcile the function package after concurrent runtime dependency automationGCV-0044Vend the alerting notification routing treeGCV-0045Vend on-call schedules and shiftsGCV-0046Vend on-call escalation chains, routes and integrationsGCV-0047Vend cloud provider integrations and metrics scrape jobsGCV-0048Vend Private Data source Connect networksGCV-0049Complete k6 vending with load tests and schedulesGCV-0050Complete synthetic monitoring with private probes and check alertsGCV-0051Vend in-stack service accounts under the token expiry ceilingGCV-0052Vend Frontend Observability appsGCV-0053Vend Grafana ML jobs, outlier detectors and holidaysGCV-0054State the cluster prerequisites the admission-policy layer introducedGCV-0055Close the k6 vending surface at the settled admission boundaryGCV-0056Close the synthetic monitoring surface and record the private-probe refusal as designGCV-0057Close the documentation-drift class the stale function digest exposedGCV-0058Cover the receiver-freshness paths wave 6 shipped with zero test coverageGCV-0059Run the adversarial review pass the wave 6 two-pass ceiling deferredGCV-0060Vend the asserts product surfaceGCV-0061Let a second cluster mint credentials against, and adopt, a stack it did not vendGCV-0062Correct the shipped prose that still calls vended families separately ownedGCV-0063Close the family-derivation blind spot for non-direct renderer dispatchGCV-0064Review the wave 9 corrections that landed after the CodeRabbit two-pass ceilingGCV-0065Give the local gate a way to provision the pinned envtest assetsGCV-0066Give the migration handoff the credential rotation procedure it currently only warns aboutGCV-0067Record live behavioural proof as permanently out of scope, not as outstanding workGCV-0068A newly vended stack's claim stays Ready=False forever, because its per-stack ProviderConfig is never usedGCV-0069Let the alerting and oncall APIs express an IRM Slack destination end to endGCV-0070Vend the Git Sync connection so a repository credential never enters a claimGCV-0071Complete the Git Sync repository surface the vending API pins to one shapeGCV-0072Quote optional test filters containing shell metacharactersGCV-0073Define ordered decommission for Git Sync credentialsGCV-0074The vended Git Sync connection cannot be created on Grafana CloudGCV-0075Vended rotating tokens can never rotate, so every stack loses its credentials at the first rotation windowGCV-0076A plugin request pinned to the newest version never converges, because the provider treats version as replace-onlyGCV-0077Composed resources churn hard enough to hold the composite watch circuit breaker open on every stackGCV-0078Migrate the pre-organization estate onto the current request schema and move its output identity with itGCV-0079Provision datasources, a folder and Git Sync into a stack the platform does not own, driven by an external project CRGCV-0080Vend a whole Grafana Cloud stack in response to an external project CR appearingGCV-0081GrafanaProvisioningRepository can only express the secure-value shape the vendor refuses, so setting any repository secret 403s foreverGCV-0082Make the refused-vendor-shape class unrepeatable, instead of fixed one kind at a timeGCV-0083Audit and improve public documentation and architectureGCV-0084Re-enable repository secure values once the vendor fixes the reference-form refusalGCV-0085Ship a real stack consumer profile so a consumer cluster can mint scoped telemetry credentialsGCV-0086Close the real-identifier leak class the tracker reproduced three timesGCV-0087Make a stuck rotating token visible from composite conditions aloneGCV-0088State what Crossplane emits natively for vended resource health and expose it without custom instrumentationGCV-0089Reap orphaned envtest etcd and kube-apiserver processes left by interrupted test runsGCV-0090Renovate cannot update the pinned-versions table, so every version-bearing component bump red-lights the gateGCV-0091The watch-path assertion covers one ApplicationSet, so a second one could introduce a live-request source unnoticedGCV-0092Correct the installation guide verification Job naming claimGCV-0093A plain Argo Application with a source path under examples/ or enabled/ is an unguarded live-request sourceGCV-0094ApplicationSet template source path can activate inert examplesGCV-0095CI hygiene: Go cache size, one Go version, registry buildx cacheGCV-0096Public-release scan fails on backlog/docs/doc-0001, the agent-docs fan-out protocol importGCV-0097Exclude linked-worktree Git metadata without weakening the public-release scanGCV-0098Distinguish the default-branch HEAD alias from ungranted loop audit writesGCV-0099Republished canonical protocol leaked private identifiers into history; guard the publisherGCV-0100Rebase the provider carry onto the current upstream releaseGCV-0101Bring the organization migration and adoption guide in line with the live-proven same-identity routeGCV-0102Record and document what happens to a vended connection Secret when its managed resource is removed