substrate

mirror of https://github.com/agent-substrate/substrate.git synced 2026-11-10 10:13:50 +08:00

Files

T

Chuang Wang d909d69053 atenet-egress: deliver TLS certs via filesystem SDS so rotation works

Envoy honors watched_directory only on SDS-delivered secrets; on the
egress gateway's inline file-based certs it was silently ignored, so
kubelet's projected-certificate rotation never reached Envoy and the
gateway eventually served an expired certificate.

Move the serving cert (both egress manifests) and the spliced extproc
cluster's client cert and trust bundle (Go and shell emitters) to
filesystem SDS, with the flag-derived SAN pin kept inline via a
combined validation context. Fix the csi-deployment doc example that
showed the same broken pattern, and add tests for the emitters.

2026-08-28 14:52:33 -07:00

assets

Add initial threat model for substrate (#303 )

2026-07-01 10:31:39 -07:00

dev

ateom microvm: drop privileged: true, using atelet device plugin for KVM (#1254 )

2026-08-27 12:23:16 -07:00

metrics

docs: point at the new names of the verify scripts (#1236 )

2026-08-26 21:51:40 -07:00

api-guide.md

api: rename ateomImage to workerImage and make it optional (#1210 )