Lemon-miaow
80fbc779d9
feat(operator): 平台升级不再重启运行中的游戏服，registry 清理保留游戏 pod 在用的镜像
2026-09-24 23:52:30 +08:00
Lemon-miaow
07eb682358
docs(upgrade): 列出安装器对下载物的校验与离线导入 registry 镜像的做法
2026-09-24 23:39:39 +08:00
Lemon-miaow
3ad817eeff
fix(update): 重跑命令从最新 release tag 读取安装脚本
2026-09-24 23:39:39 +08:00
Lemon-miaow
26dc1722f4
feat(bootstrap): 先校验 SHA256SUMS 再运行下载的 felis，固定 k3s、cloudflared 与 registry 镜像版本
2026-09-24 23:39:38 +08:00
Lemon-miaow
c4a4f1f25c
ci(release): 发布 SHA256SUMS、SBOM 与构建来源证明，action 固定到 commit，不再覆盖已发布资产
2026-09-24 23:39:38 +08:00
Lemon-miaow
8296153a38
docs(build): 说明构建工具镜像、定时刷新与离线环境做法
2026-09-24 23:25:21 +08:00
Lemon-miaow
bf18712a6c
feat(build): kaniko/trivy 与扫描库改用 registry 内的 mirror 副本，定时刷新并在过期时告警
2026-09-24 23:25:21 +08:00
Lemon-miaow
c0643af118
feat(imagepush): 从公共 registry 拷贝单平台镜像与 OCI 制品
2026-09-24 23:25:04 +08:00
Lemon-miaow
80c4ea8966
docs(registry): 说明 manifest 清理、GC 窗口、PVC 容量与上传上限
2026-09-24 23:10:40 +08:00
Lemon-miaow
e75448a118
feat(platform): registry/uploads/backup PVC 容量可配置
2026-09-24 23:10:40 +08:00
Lemon-miaow
720ab81bf8
feat(submit): 上传存储全局上限、磁盘余量检查，被拒上下文 7 天后回收
2026-09-24 23:10:40 +08:00
Lemon-miaow
9baa0a10af
fix(registrygate): 启动后先等写入静默再开放 GC 窗口
2026-09-24 23:10:28 +08:00
Lemon-miaow
151c9d2e30
feat(registry): api 定期删除无引用 manifest，gate 提供 manifest 索引
2026-09-24 22:58:07 +08:00
Lemon-miaow
05e8c64e47
fix(imagepin): 带 digest 的镜像引用也向 registry 确认仍存在
2026-09-24 22:58:07 +08:00
Lemon-miaow
7f772bccbb
feat(registry): 开启 manifest 删除，GC sidecar 在 gate 只读窗口内回收 blob
2026-09-24 22:46:37 +08:00
Lemon-miaow
c49336ba21
fix(bootstrap): 元数据下载在 TLS 握手中断时整体重试
2026-09-24 22:26:30 +08:00
Lemon-miaow
5cadbd40a9
fix(submit): 待审上限在事务内加咨询锁原子检查，跨副本不超额
2026-09-24 22:26:30 +08:00
Lemon-miaow
a27d76ae1d
docs(build): 修正上下文存储与构建镜像拉取的过时描述
2026-09-24 22:26:29 +08:00
Lemon-miaow
e836a73a8a
fix(build): 构建并发上限与排队，构建命名空间加 ResourceQuota，SyncAll 逐个容错
2026-09-24 22:26:21 +08:00
Lemon-miaow
e521cf5976
fix(submit): 审阅绑定上下文 sha256，批准须带摘要，构建只从内部 API 取上下文并校验字节
2026-09-24 22:24:50 +08:00
Lemon-miaow
13b65e19ec
fix(build): 构建 pod 等出口策略生效再运行，加 seccomp、可选 user namespace 与磁盘上限，上下文解包限总字节与条目数
2026-09-24 20:42:14 +08:00
Lemon-miaow
9bda3a52fa
fix(backup): 手动备份按服冷却、每服保留上限与独立保留期，容量驱逐不再删除回收世界的唯一副本
2026-09-24 19:58:59 +08:00
Lemon-miaow
f69cdec9d4
fix(reaper): 有服务器处理失败或过期备份删不掉时以非零码退出，让 Job 失败告警触达运维
2026-09-24 19:34:09 +08:00
Lemon-miaow
22becd6859
fix(reaper): 认领时重置活跃时钟与预警，回收只复用本次认领后的 reaper 归档
2026-09-24 19:31:23 +08:00
Lemon-miaow
47890ca913
feat(offsite): 世界归档与数据库备份加密同步到异地 S3，reaper 确认异地副本后才删除世界
2026-09-24 19:25:16 +08:00
Lemon-miaow
fa8db4c7e8
docs(audit): 告警条目补记 watchdog 邮件告警与真机演练
2026-09-24 18:36:07 +08:00
Lemon-miaow
d17524cd67
feat(watchdog): 主机侧巡检定时器按异常邮件通知平台所有者，operator 增加 phase 与 build_info 指标、卡死存活探针与告警规则
2026-09-24 18:06:19 +08:00
Lemon-miaow
d50492b86f
chore(panel): mock 服务器带固定镜像与内存存储以演示编辑对话框
2026-09-24 17:08:53 +08:00
Lemon-miaow
0c29ab3a96
fix(api): 未改动任何字段的 PATCH 返回空 patched 数组而非 null
2026-09-24 17:04:02 +08:00
Lemon-miaow
215bfd78d7
fix(images): 服务器镜像在创建时固定到仓库 digest，更换镜像需确认备份，安装器重建前先固定旧服并推送不可变版本标签
2026-09-24 16:57:38 +08:00
Lemon-miaow
857b6da886
fix(operator): 删除依赖 rcon-cli 的 preStop 死代码，缩容前由 operator 经 RCON 执行 save-all flush
2026-09-24 16:39:22 +08:00
Lemon-miaow
5521e498a9
fix(platform): minecraft 命名空间强制 PodSecurity baseline，reaper 世界根目录改走静态 hostPath PV
2026-09-24 16:28:12 +08:00
Lemon-miaow
346a93921e
fix(operator): 游戏 Pod 改以 UID 1000 运行并丢弃全部能力，prepare-data 初始化容器修正旧存档属主
2026-09-24 16:23:49 +08:00
Lemon-miaow
c1796bea17
feat(servers): 新建服务器默认空闲 10 分钟自动停服，面板可调，converge 回填旧服，系统服不休眠
2026-09-24 16:12:53 +08:00
Lemon-miaow
bd909d5858
fix(operator): 读不出玩家数时暂停空闲自动停服，支持 1.12/Bukkit/EssentialsX 与颜色码
2026-09-24 16:06:55 +08:00
Lemon-miaow
857c73a66a
fix(audit): 审计按账号 id 归属并记录来源 IP/UA，登录失败与限速入审计和指标，写入失败计数告警
2026-09-24 16:02:44 +08:00
Lemon-miaow
c4e4953f3d
fix(auth): 公开登录门按来源限速并设全站发信上限，冷却表定期清理
2026-09-24 15:51:42 +08:00
Lemon-miaow
15f729ffea
fix(auth): 邮箱验证码按账号累计错误次数封顶并通知
2026-09-24 15:37:01 +08:00
Lemon-miaow
18e2397272
fix(panel): 加错误边界与新版本 chunk 自动刷新，无 WebGL 时仪表盘降级为平面视图
2026-09-24 15:27:29 +08:00
Lemon-miaow
248fa5d100
fix(panel): 服主在控制台看得到 LuckPerms 入口，归属判定统一走 /me/servers
2026-09-24 15:23:20 +08:00
Lemon-miaow
c7db7d4126
feat(db): 控制面 PG 定时备份、迁移前快照与原子恢复
2026-09-24 15:19:42 +08:00
Lemon-miaow
abfe60d62d
fix(api): wake 与回档/备份/改文件按服务器互斥
2026-09-24 14:39:02 +08:00
Lemon-miaow
7819e5de50
feat(netpol): 锁定游戏服出站并为 registry 加入站围栏
2026-09-24 14:25:17 +08:00
Lemon-miaow
3424852a39
feat(registry): 写入改走鉴权网关，构建先扫描再推送
2026-09-24 14:25:17 +08:00
Lemon-miaow
8f684cedc0
feat(paper): 大厅菜单从代理动态拉取服务器列表并分页
2026-09-24 13:39:38 +08:00
Lemon-miaow
955433ba81
fix(limbo): 经 felis:control 放行玩家并在 felis-api 故障时退避重试
2026-09-24 13:39:38 +08:00
Lemon-miaow
4648175773
fix(velocity): felis:control 按来源服务器限权并关闭 bungeecord 通道
2026-09-24 13:39:38 +08:00
Lemon-miaow
3247b9e61a
docs(audit): batch-47 — v0.1.0 stable release fired end-to-end (release download → no-checkout full bootstrap → felis update)
2026-09-24 11:36:22 +08:00
Lemon-miaow
b9c97ffac9
docs(audit): batch-46 — upload-lane quotas/lifecycle, tracker #8/#1, release-pipeline smoke
...
Real-machine closure for everything batched since batch 45: #75/#76 verified
end to end on auditfix77 (cooldowns 429, pending cap 403, 2GiB budget 403 via
the real accounting path, failure-does-not-burn-window, withdraw/admin-delete
row+blob double clean, panel two-step confirms in CDP), tracker #8 and #1
landed and verified (#77 panel redirect, #78 felis converge), plus #79 docs.
Also: pgint's new assertions first run on real PG (17/17) and the release
pipeline's first-ever run — tag v0.1.0-rc1, multiarch assets published and
executed on the target arch, /releases/latest deliberately untouched.
2026-09-24 11:11:07 +08:00
Lemon-miaow
b9ebc872ad
docs(troubleshooting): the [INERT] legend points at a field that no longer exists
...
The legend said "§12 lists the one field this still applies to", but the last
inert field (spec.storage.retainOnDelete) was removed rather than implemented
(§13), and §12 has said "every field below is read by a controller" since.
Reworded so a reader whose change looks ignored follows the condition question
instead of hunting for a dead field.
2026-09-24 10:35:35 +08:00
Lemon-miaow