Support PostgreSQL connection secrets - #32

Draft

iplay88keys wants to merge 188 commits into

mainfrom

iplay88keys/postgres-connection-secret

Commits on Sep 17, 2026

Publish release artifacts
EItanya
committed
36f55e4
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
374faef
Bound actor workflows and refresh worker state after pause
EItanya
committed
a93eb71
Accept RSA and EC private keys in credential bundles
EItanya
committed
a67f16a
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
ebe0a07
Add Helm deployment with agentgateway and CRD verification

committed
3d01e94
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
c4a8ce5
Configure API server object storage in the Helm chart
EItanya
committed
c4c7f0a
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
8da5509
Make local verification independent of registry and filesystem timing
EItanya
committed
7bf05bb
Keep the gVisor sandbox alive until application containers are deleted
EItanya
committed
b627ce2
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
fe81ce8
Align Helm E2E with the canonical installation
EItanya
committed
11d6a03
Allow extra ateapi arguments in the Helm chart
EItanya
committed
80b9a64
Retry layer pulls that join an eviction flight
EItanya
committed
807dd5d
Align Helm egress readiness with the metrics endpoint
EItanya
committed
74056c2
Support PostgreSQL connection secrets
iplay88keys
committed
60c7821
Fix helm tests
iplay88keys
committed
38af2c9

Commits on Sep 18, 2026

Add in separate ddl/dml support or substrate
iplay88keys
committed
612e866

Commits on Sep 20, 2026

Publish release artifacts
EItanya
committed
fe051a9
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
77da59b
Bound actor workflows and refresh worker state after pause
EItanya
committed
e2709d5
Accept RSA and EC private keys in credential bundles
EItanya
committed
5f6b100
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
a41bd08
Add Helm deployment with agentgateway and CRD verification

committed
61400db
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
a284ae3
Configure API server object storage in the Helm chart
EItanya
committed
35f7783
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
87a3e8a
Make local verification independent of registry and filesystem timing
EItanya
committed
f598aae
Keep the gVisor sandbox alive until application containers are deleted
EItanya
committed
db8789e
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
9aeae39
Align Helm E2E with the canonical installation
EItanya
committed
0be5954
Allow extra ateapi arguments in the Helm chart
EItanya
committed
42a6b1b
Retry layer pulls that join an eviction flight
EItanya
committed
0eb90e7
Align Helm egress readiness with the metrics endpoint
EItanya
committed
3771be0
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
df5265f
Add a standalone Kubernetes credential provider for AGW egress

EItanya
and
yufan-su
committed
655b74b
Publish the Kubernetes credential provider in releases
EItanya
committed
300be0c

Commits on Sep 21, 2026

Commits on Sep 22, 2026

Update readme wording
iplay88keys
committed
a8aa25f
Publish release artifacts
EItanya
committed
1113809
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
2ab0e01
Bound actor workflows and refresh worker state after pause
EItanya
committed
3a54e3a
Accept RSA and EC private keys in credential bundles
EItanya
committed
3a9fdfe
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
143ad8e
Add Helm deployment with agentgateway and CRD verification

committed
6678259
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
9a6b660
Configure API server object storage in the Helm chart
EItanya
committed
1c93827
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
41a0302
Make local verification independent of registry and filesystem timing
EItanya
committed
bb829bb
Keep the gVisor sandbox alive until application containers are deleted
EItanya
committed
16e90e3
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
6d57777
Align Helm E2E with the canonical installation
EItanya
committed
99d0848
Allow extra ateapi arguments in the Helm chart
EItanya
committed
7ee9128
Retry layer pulls that join an eviction flight
EItanya
committed
b857e81
Align Helm egress readiness with the metrics endpoint
EItanya
committed
fd9949c
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
e2b853e
Integrate Kubernetes credentials with Helm and agentgateway
EItanya
committed
77dcee7
Publish the Kubernetes credential provider in releases
EItanya
committed
73fce11
Allow Helm deployments to enable actor lifecycle events

krisztianfekete
authored and
EItanya
committed
709c0f0
Configure stable PostgreSQL roles
iplay88keys
committed
24df857
Merge remote-tracking branch 'origin/main' into iplay88keys/postgres-connection-secret
iplay88keys
committed
3655b1a

Commits on Sep 23, 2026

Configure PostgreSQL bootstrap with Secret-backed connections
iplay88keys
committed
ad6c031
Update default schema to 'substrate'
iplay88keys
committed
f5a0b75

Commits on Sep 25, 2026

Publish release artifacts
EItanya
committed
bdf3b1f
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
3f869fd
Bound actor workflows and refresh worker state after pause
EItanya
committed
3887c45
Accept RSA and EC private keys in credential bundles
EItanya
committed
bf873c2
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
5781dd3
Add Helm deployment with agentgateway and CRD verification

committed
d19568b
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
16f0852
Configure API server object storage in the Helm chart
EItanya
committed
c5382ce
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
1321bc1
Make local verification independent of registry and filesystem timing
EItanya
committed
cb88d07
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
604a9d1
Align Helm E2E with the canonical installation
EItanya
committed
ca645ee
Allow extra ateapi arguments in the Helm chart
EItanya
committed
5e9f3c7
Retry layer pulls that join an eviction flight
EItanya
committed
a427715
Align Helm egress readiness with the metrics endpoint
EItanya
committed
b9678c7
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
0dc0fc3
Integrate Kubernetes credentials with Helm and agentgateway
EItanya
committed
c11373c
Publish the Kubernetes credential provider in releases
EItanya
committed
c160c0f
Allow Helm deployments to enable actor lifecycle events

krisztianfekete
authored and
EItanya
committed
6b5e571
Configure Helm identities for renamed deployments
EItanya
committed
d5dc352
Expose the credential provider status page in Helm deployments
EItanya
committed
412c9da
Run Helm identity rotation after HTTPS egress tests
EItanya
committed
d78fba7
Allow Helm atelet pods on sandbox-class nodes
EItanya
committed
74f71ca
Merge remote-tracking branch 'origin/main' into iplay88keys/postgres-connection-secret
iplay88keys
committed
0cd1db4

Commits on Sep 26, 2026

Publish release artifacts
EItanya
committed
1b33b28
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
65c43af
Bound actor workflows and refresh worker state after pause
EItanya
committed
d9cbe02
Accept RSA and EC private keys in credential bundles
EItanya
committed
a56484a
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
9693846
Add Helm deployment with agentgateway and CRD verification

committed
dabe975
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
4b2eff6
Configure API server object storage in the Helm chart
EItanya
committed
6a0134a
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
7829962
Make local verification independent of registry and filesystem timing
EItanya
committed
0179b59
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
3457ce8
Align Helm E2E with the canonical installation
EItanya
committed
3cbfde0
Allow extra ateapi arguments in the Helm chart
EItanya
committed
df4dde6
Retry layer pulls that join an eviction flight
EItanya
committed
2e9188c
Align Helm egress readiness with the metrics endpoint
EItanya
committed
0ccfc0f
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
ba20d22
Integrate Kubernetes credentials with Helm and agentgateway
EItanya
committed
bff072b
Publish the Kubernetes credential provider in releases
EItanya
committed
5224d21
Allow Helm deployments to enable actor lifecycle events

krisztianfekete
authored and
EItanya
committed
e1619c0
Configure Helm identities for renamed deployments
EItanya
committed
1953a28
Expose the credential provider status page in Helm deployments
EItanya
committed
be1952b
Run Helm identity rotation after HTTPS egress tests
EItanya
committed
cf3eb02
Allow Helm atelet pods on sandbox-class nodes
EItanya
committed
80f37cf
Update credential provider tests for actor identities
EItanya
committed
88a9d29
Update agentgateway for split actor and ateom identities
EItanya
committed
bf51a99

Commits on Sep 28, 2026

Merge remote-tracking branch 'origin/main' into iplay88keys/postgres-connection-secret
iplay88keys
committed
1600a3a

Commits on Sep 29, 2026

Publish release artifacts
EItanya
committed
18cb010
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
e2e66fa
Bound actor workflows and refresh worker state after pause
EItanya
committed
1486fe9
Accept RSA and EC private keys in credential bundles
EItanya
committed
0bf3c57
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
8eab69f
Add Helm deployment with agentgateway and CRD verification

committed
cdb0057
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
f245a60
Configure API server object storage in the Helm chart
EItanya
committed
03dfbe4
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
2d7551f
Make local verification independent of registry and filesystem timing
EItanya
committed
a85b6b1
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
6bbda0d
Align Helm E2E with the canonical installation
EItanya
committed
b48d8c3
Allow extra ateapi arguments in the Helm chart
EItanya
committed
d70e44a
Retry layer pulls that join an eviction flight
EItanya
committed
f35ecce
Align Helm egress readiness with the metrics endpoint
EItanya
committed
f60de64
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
6d864f0
Integrate Kubernetes credentials with Helm and agentgateway
EItanya
committed
03fa682
Publish the Kubernetes credential provider in releases
EItanya
committed
341889b
Allow Helm deployments to enable actor lifecycle events

krisztianfekete
authored and
EItanya
committed
258f979
Configure Helm identities for renamed deployments
EItanya
committed
062a42e
Expose the credential provider status page in Helm deployments
EItanya
committed
5bcf341
Run Helm identity rotation after HTTPS egress tests
EItanya
committed
980f5f4
Allow Helm atelet pods on sandbox-class nodes
EItanya
committed
87ee2cb
Update credential provider tests for actor identities
EItanya
committed
d868305
Update agentgateway for split actor and ateom identities
EItanya
committed
bbed6cb
Align the Helm agentgateway registry with upstream
EItanya
committed
19a01e9
Update credential injection coverage for protocol-specific egress rules
EItanya
committed
ea13418
Restore manual agentgateway image builds
EItanya
committed
1bf756e
Pin the published agentgateway build with streaming and HTTPS denial fixes
EItanya
committed
524e3d9
Align the Helm atelet volume with the node state root
EItanya
committed
dbd8253
Report Helm E2E results through the required JUnit checks
EItanya
committed
71c807d
Assert MITM policy denials for the selected dataplane
EItanya
committed
be2f711
Merge remote-tracking branch 'origin/main' into iplay88keys/postgres-connection-secret
iplay88keys
committed
86edfe6

Commits on Oct 1, 2026

Publish release artifacts
EItanya
committed
1c43125
Support deployment namespaces and opt-in local atelet transport
EItanya
committed
d018f59
Bound actor workflows and refresh worker state after pause
EItanya
committed
ddab16f
Accept RSA and EC private keys in credential bundles
EItanya
committed
667669e
Validate agentgateway across gVisor and microVM runtimes
EItanya
committed
96cc7de
Add Helm deployment with agentgateway and CRD verification

committed
a051c06
Expose PostgreSQL migration settings in the Helm chart

iplay88keys
authored and
EItanya
committed
4b622cf
Configure API server object storage in the Helm chart
EItanya
committed
1eeda0c
Configure per-signal OTLP export and agentgateway access logs

krisztianfekete
authored and
EItanya
committed
80e14ec
Make local verification independent of registry and filesystem timing
EItanya
committed
2232466
Add fork synchronization skill with temporary asset cleanup
EItanya
committed
a96f446
Align Helm E2E with the canonical installation
EItanya
committed
c7201fa
Allow extra ateapi arguments in the Helm chart
EItanya
committed
4630be3
Retry layer pulls that join an eviction flight
EItanya
committed
5e1c8f7
Align Helm egress readiness with the metrics endpoint
EItanya
committed
2222fc5
feat(helm): global image values, and the registry/repository split

jjamroga
authored and
EItanya
committed
8f86704
Integrate Kubernetes credentials with Helm and agentgateway
EItanya
committed
ad4fc1f
Publish the Kubernetes credential provider in releases
EItanya
committed
0f3aed2
Allow Helm deployments to enable actor lifecycle events

krisztianfekete
authored and
EItanya
committed
12cf127
Configure Helm identities for renamed deployments
EItanya
committed
0beb97c
Expose the credential provider status page in Helm deployments
EItanya
committed
95b3295
Run Helm identity rotation after HTTPS egress tests
EItanya
committed
7af0156
Allow Helm atelet pods on sandbox-class nodes
EItanya
committed
880632e
Update credential provider tests for actor identities
EItanya
committed
53dce99
Update agentgateway for split actor and ateom identities
EItanya
committed
308bb4a
Align the Helm agentgateway registry with upstream
EItanya
committed
f93a9eb
Update credential injection coverage for protocol-specific egress rules
EItanya
committed
819f503
Restore manual agentgateway image builds
EItanya
committed
0dcfa35
Pin the published agentgateway build with streaming and HTTPS denial fixes
EItanya
committed
6c84ddf
Align the Helm atelet volume with the node state root
EItanya
committed
2046dd9
Report Helm E2E results through the required JUnit checks
EItanya
committed
39111b0
Assert MITM policy denials for the selected dataplane
EItanya
committed
daa1167
fix: stabilize microVM clocks and concurrent actor startup

EItanya
and
swiftdiaries
committed
6402fbb
Align Helm atelet capabilities with the upstream manifest
EItanya
committed
eabd695
Align the Helm API server with the default egress flag
EItanya
committed
5df4669
Allow Helm controllers to delete terminal worker pods
EItanya
committed
f99d6ed
Route allowed TLS passthrough alongside egress interception
EItanya
committed
4d0e339
Remove bundled PostgreSQL, require connection Secrets, and use the Helm release namespace for RBAC
iplay88keys
committed
7bf0678
Merge remote-tracking branch 'origin/main' into iplay88keys/postgres-connection-secret
iplay88keys
committed
17792d3