Lemon-miaow
a4fa16ae69
feat(bootstrap): 控制面镜像按版本打 tag，升级后 rollout undo 可回到上一版本
2026-09-24 23:52:30 +08:00
Lemon-miaow
80fbc779d9
feat(operator): 平台升级不再重启运行中的游戏服，registry 清理保留游戏 pod 在用的镜像
2026-09-24 23:52:30 +08:00
Lemon-miaow
07eb682358
docs(upgrade): 列出安装器对下载物的校验与离线导入 registry 镜像的做法
2026-09-24 23:39:39 +08:00
Lemon-miaow
3ad817eeff
fix(update): 重跑命令从最新 release tag 读取安装脚本
2026-09-24 23:39:39 +08:00
Lemon-miaow
26dc1722f4
feat(bootstrap): 先校验 SHA256SUMS 再运行下载的 felis，固定 k3s、cloudflared 与 registry 镜像版本
2026-09-24 23:39:38 +08:00
Lemon-miaow
c4a4f1f25c
ci(release): 发布 SHA256SUMS、SBOM 与构建来源证明，action 固定到 commit，不再覆盖已发布资产
2026-09-24 23:39:38 +08:00
Lemon-miaow
8296153a38
docs(build): 说明构建工具镜像、定时刷新与离线环境做法
2026-09-24 23:25:21 +08:00
Lemon-miaow
bf18712a6c
feat(build): kaniko/trivy 与扫描库改用 registry 内的 mirror 副本，定时刷新并在过期时告警
2026-09-24 23:25:21 +08:00
Lemon-miaow
c0643af118
feat(imagepush): 从公共 registry 拷贝单平台镜像与 OCI 制品
2026-09-24 23:25:04 +08:00
Lemon-miaow
80c4ea8966
docs(registry): 说明 manifest 清理、GC 窗口、PVC 容量与上传上限
2026-09-24 23:10:40 +08:00
Lemon-miaow
e75448a118
feat(platform): registry/uploads/backup PVC 容量可配置
2026-09-24 23:10:40 +08:00
Lemon-miaow
720ab81bf8
feat(submit): 上传存储全局上限、磁盘余量检查，被拒上下文 7 天后回收
2026-09-24 23:10:40 +08:00
Lemon-miaow
9baa0a10af
fix(registrygate): 启动后先等写入静默再开放 GC 窗口
2026-09-24 23:10:28 +08:00
Lemon-miaow
151c9d2e30
feat(registry): api 定期删除无引用 manifest，gate 提供 manifest 索引
2026-09-24 22:58:07 +08:00
Lemon-miaow
05e8c64e47
fix(imagepin): 带 digest 的镜像引用也向 registry 确认仍存在
2026-09-24 22:58:07 +08:00
Lemon-miaow
7f772bccbb
feat(registry): 开启 manifest 删除，GC sidecar 在 gate 只读窗口内回收 blob
2026-09-24 22:46:37 +08:00
Lemon-miaow
c49336ba21
fix(bootstrap): 元数据下载在 TLS 握手中断时整体重试
2026-09-24 22:26:30 +08:00
Lemon-miaow
5cadbd40a9
fix(submit): 待审上限在事务内加咨询锁原子检查，跨副本不超额
2026-09-24 22:26:30 +08:00
Lemon-miaow
a27d76ae1d
docs(build): 修正上下文存储与构建镜像拉取的过时描述
2026-09-24 22:26:29 +08:00
Lemon-miaow
e836a73a8a
fix(build): 构建并发上限与排队，构建命名空间加 ResourceQuota，SyncAll 逐个容错
2026-09-24 22:26:21 +08:00
Lemon-miaow
e521cf5976
fix(submit): 审阅绑定上下文 sha256，批准须带摘要，构建只从内部 API 取上下文并校验字节
2026-09-24 22:24:50 +08:00
Lemon-miaow
13b65e19ec
fix(build): 构建 pod 等出口策略生效再运行，加 seccomp、可选 user namespace 与磁盘上限，上下文解包限总字节与条目数
2026-09-24 20:42:14 +08:00
Lemon-miaow
9bda3a52fa
fix(backup): 手动备份按服冷却、每服保留上限与独立保留期，容量驱逐不再删除回收世界的唯一副本
2026-09-24 19:58:59 +08:00
Lemon-miaow
f69cdec9d4
fix(reaper): 有服务器处理失败或过期备份删不掉时以非零码退出，让 Job 失败告警触达运维
2026-09-24 19:34:09 +08:00
Lemon-miaow
22becd6859
fix(reaper): 认领时重置活跃时钟与预警，回收只复用本次认领后的 reaper 归档
2026-09-24 19:31:23 +08:00
Lemon-miaow
47890ca913
feat(offsite): 世界归档与数据库备份加密同步到异地 S3，reaper 确认异地副本后才删除世界
2026-09-24 19:25:16 +08:00
Lemon-miaow
fa8db4c7e8
docs(audit): 告警条目补记 watchdog 邮件告警与真机演练
2026-09-24 18:36:07 +08:00
Lemon-miaow
d17524cd67
feat(watchdog): 主机侧巡检定时器按异常邮件通知平台所有者，operator 增加 phase 与 build_info 指标、卡死存活探针与告警规则
2026-09-24 18:06:19 +08:00
Lemon-miaow
d50492b86f
chore(panel): mock 服务器带固定镜像与内存存储以演示编辑对话框
2026-09-24 17:08:53 +08:00
Lemon-miaow
0c29ab3a96
fix(api): 未改动任何字段的 PATCH 返回空 patched 数组而非 null
2026-09-24 17:04:02 +08:00
Lemon-miaow
215bfd78d7
fix(images): 服务器镜像在创建时固定到仓库 digest，更换镜像需确认备份，安装器重建前先固定旧服并推送不可变版本标签
2026-09-24 16:57:38 +08:00
Lemon-miaow
857b6da886
fix(operator): 删除依赖 rcon-cli 的 preStop 死代码，缩容前由 operator 经 RCON 执行 save-all flush
2026-09-24 16:39:22 +08:00
Lemon-miaow
5521e498a9
fix(platform): minecraft 命名空间强制 PodSecurity baseline，reaper 世界根目录改走静态 hostPath PV
2026-09-24 16:28:12 +08:00
Lemon-miaow
346a93921e
fix(operator): 游戏 Pod 改以 UID 1000 运行并丢弃全部能力，prepare-data 初始化容器修正旧存档属主
2026-09-24 16:23:49 +08:00
Lemon-miaow
c1796bea17
feat(servers): 新建服务器默认空闲 10 分钟自动停服，面板可调，converge 回填旧服，系统服不休眠
2026-09-24 16:12:53 +08:00
Lemon-miaow
bd909d5858
fix(operator): 读不出玩家数时暂停空闲自动停服，支持 1.12/Bukkit/EssentialsX 与颜色码
2026-09-24 16:06:55 +08:00
Lemon-miaow
857c73a66a
fix(audit): 审计按账号 id 归属并记录来源 IP/UA，登录失败与限速入审计和指标，写入失败计数告警
2026-09-24 16:02:44 +08:00
Lemon-miaow
c4e4953f3d
fix(auth): 公开登录门按来源限速并设全站发信上限，冷却表定期清理
2026-09-24 15:51:42 +08:00
Lemon-miaow
15f729ffea
fix(auth): 邮箱验证码按账号累计错误次数封顶并通知
2026-09-24 15:37:01 +08:00
Lemon-miaow
18e2397272
fix(panel): 加错误边界与新版本 chunk 自动刷新，无 WebGL 时仪表盘降级为平面视图
2026-09-24 15:27:29 +08:00
Lemon-miaow
248fa5d100
fix(panel): 服主在控制台看得到 LuckPerms 入口，归属判定统一走 /me/servers
2026-09-24 15:23:20 +08:00
Lemon-miaow
c7db7d4126
feat(db): 控制面 PG 定时备份、迁移前快照与原子恢复
2026-09-24 15:19:42 +08:00
Lemon-miaow
abfe60d62d
fix(api): wake 与回档/备份/改文件按服务器互斥
2026-09-24 14:39:02 +08:00
Lemon-miaow
7819e5de50
feat(netpol): 锁定游戏服出站并为 registry 加入站围栏
2026-09-24 14:25:17 +08:00
Lemon-miaow
3424852a39
feat(registry): 写入改走鉴权网关，构建先扫描再推送
2026-09-24 14:25:17 +08:00
Lemon-miaow
8f684cedc0
feat(paper): 大厅菜单从代理动态拉取服务器列表并分页
2026-09-24 13:39:38 +08:00
Lemon-miaow
955433ba81
fix(limbo): 经 felis:control 放行玩家并在 felis-api 故障时退避重试
2026-09-24 13:39:38 +08:00
Lemon-miaow
4648175773
fix(velocity): felis:control 按来源服务器限权并关闭 bungeecord 通道
2026-09-24 13:39:38 +08:00
Lemon-miaow
3247b9e61a
docs(audit): batch-47 — v0.1.0 stable release fired end-to-end (release download → no-checkout full bootstrap → felis update)
2026-09-24 11:36:22 +08:00
Lemon-miaow
b9c97ffac9
docs(audit): batch-46 — upload-lane quotas/lifecycle, tracker #8/#1, release-pipeline smoke
...
Real-machine closure for everything batched since batch 45: #75/#76 verified
end to end on auditfix77 (cooldowns 429, pending cap 403, 2GiB budget 403 via
the real accounting path, failure-does-not-burn-window, withdraw/admin-delete
row+blob double clean, panel two-step confirms in CDP), tracker #8 and #1
landed and verified (#77 panel redirect, #78 felis converge), plus #79 docs.
Also: pgint's new assertions first run on real PG (17/17) and the release
pipeline's first-ever run — tag v0.1.0-rc1, multiarch assets published and
executed on the target arch, /releases/latest deliberately untouched.
2026-09-24 11:11:07 +08:00
Lemon-miaow