Completed work
grafana-cloud-vending-machine
80 completed tasks.
GCV-0087Make a stuck rotating token visible from composite conditions aloneGCV-0088State what Crossplane emits natively for vended resource health and expose it without custom instrumentationGCV-0073Define ordered decommission for Git Sync credentialsGCV-0085Ship a real stack consumer profile so a consumer cluster can mint scoped telemetry credentialsGCV-0086Close the real-identifier leak class the tracker reproduced three timesGCV-0076A plugin request pinned to the newest version never converges, because the provider treats version as replace-onlyGCV-0081GrafanaProvisioningRepository can only express the secure-value shape the vendor refuses, so setting any repository secret 403s foreverGCV-0082Make the refused-vendor-shape class unrepeatable, instead of fixed one kind at a timeGCV-0083Audit and improve public documentation and architectureGCV-0072Quote optional test filters containing shell metacharactersGCV-0068A newly vended stack's claim stays Ready=False forever, because its per-stack ProviderConfig is never usedGCV-0070Vend the Git Sync connection so a repository credential never enters a claimGCV-0071Complete the Git Sync repository surface the vending API pins to one shapeGCV-0064Review the wave 9 corrections that landed after the CodeRabbit two-pass ceilingGCV-0065Give the local gate a way to provision the pinned envtest assetsGCV-0066Give the migration handoff the credential rotation procedure it currently only warns aboutGCV-0067Record live behavioural proof as permanently out of scope, not as outstanding workGCV-0061Let a second cluster mint credentials against, and adopt, a stack it did not vendGCV-0063Close the family-derivation blind spot for non-direct renderer dispatchGCV-0060Vend the asserts product surfaceGCV-0062Correct the shipped prose that still calls vended families separately ownedGCV-0049Complete k6 vending with load tests and schedulesGCV-0050Complete synthetic monitoring with private probes and check alertsGCV-0054State the cluster prerequisites the admission-policy layer introducedGCV-0055Close the k6 vending surface at the settled admission boundaryGCV-0056Close the synthetic monitoring surface and record the private-probe refusal as designGCV-0057Close the documentation-drift class the stale function digest exposedGCV-0058Cover the receiver-freshness paths wave 6 shipped with zero test coverageGCV-0059Run the adversarial review pass the wave 6 two-pass ceiling deferredGCV-0042Reconcile held-candidate documentation after the admission gate landsGCV-0044Vend the alerting notification routing treeGCV-0045Vend on-call schedules and shiftsGCV-0046Vend on-call escalation chains, routes and integrationsGCV-0047Vend cloud provider integrations and metrics scrape jobsGCV-0048Vend Private Data source Connect networksGCV-0051Vend in-stack service accounts under the token expiry ceilingGCV-0052Vend Frontend Observability appsGCV-0053Vend Grafana ML jobs, outlier detectors and holidaysGCV-0035Prove every fail-closed CEL rule actually rejects, against a real API serverGCV-0039Resolve the open SCIM user-lifecycle question and correct the recorded plan floorGCV-0043Reconcile the function package after concurrent runtime dependency automationGCV-0034Admit every XRD against a real API server so CEL rules are proven, not parsedGCV-0040Reject structurally invalid XRD schemas in the gate, without an API serverGCV-0041Provision pinned envtest assets in hosted CI so the admission gate can run thereGCV-0036Close the hand-maintained registry drift class the catalog render gap exposedGCV-0037Write the 0.x to 1.0 migration guide for the breaking API changesGCV-0038Split the 75 KB README so it stops being a single-owner scheduling bottleneckGCV-0028Decide the SCIM and Team Sync direction before the tenant count growsGCV-0013Enforce a token expiry ceiling in the composition functionGCV-0014Allow a platform-controlled IP allow-list on vended access policiesGCV-0019Vend a golden SLO per usage classGCV-0021Vend a k6 project with limits and allowed load zones as a blast-radius capGCV-0022Vend Synthetic Monitoring installation with a check budget, and verify it independentlyGCV-0024Model a multi-stack promotion ladder as a first-class APIGCV-0025Add expiring sandbox stacks with a recorded extension trailGCV-0026Make retention class a stack-request input, because export does not exist at decommissionGCV-0012Expose observability product activation on the stack requestGCV-0017Add a datasource access API that aggregates LBAC rules per datasourceGCV-0023Decide who owns dashboard content: provisioning repositories or CrossplaneGCV-0027Prohibit public dashboards by construction in vended custom rolesGCV-0029Decide how to reach Adaptive Metrics, the largest cost lever with no Crossplane coverageGCV-0033Onboard release-please so a breaking API change is recorded as a versionGCV-0011Consider a domain API for Agent Observability evaluators and guardsGCV-0015Add a Grafana Assistant governance APIGCV-0016Add an observe-only stack inventory API for drift detection and adoptionGCV-0018Add a per-stack alerting bundle with an explicit provenance decisionGCV-0020Vend baseline Fleet Management pipelines as a telemetry hygiene controlGCV-0032Vend into multiple Grafana Cloud organisationsGCV-0031Migrate the repo task surface to just and retire Makefiles and ad-hoc scriptsGCV-0010Bump the provider pin to the release carrying Agent Observability and the new App Platform kindsGCV-0030Upgrade Go toolchain to 1.27GCV-0006Give the API a reviewable decommission pathGCV-0007Constrain the usage classificationGCV-0008Stage the access claims on the stack they referenceGCV-0009Reconsider typed request structs as the API growsGCV-0003Stage stack-local resources so a healthy first vend is quietGCV-0004Bind signature verification to the installed package digestGCV-0005Onboard Renovate, including the managers that are inert by defaultGCV-0002Pinned runtime ServiceAccount names break every package on a Crossplane upgradeGCV-0001Public-release scan is red on main: it rejects the docs-hub repository reference