Issues

• Realtime troubleshooting: LOG_LEVEL env, request-context middleware (request_id+actor), structured uvicorn access logs, runbook queries

  stale
  hellodk/kri#1052 · Filter by author hellodk opened on Aug 23, 2026
  1

• Replace Prometheus with VictoriaMetrics (vmagent + single-node VM + vmalert), pin v1.150.0

  stale
  hellodk/kri#1051 · Filter by author hellodk opened on Aug 23, 2026
  1

• Deploy hardening: compose grace periods, exec entrypoint, redis maxmemory, beat HA, network-policy self-blocks, metrics auth wiring

  stale
  hellodk/kri#1050 · Filter by author hellodk opened on Aug 23, 2026
  1

• Backend reliability: task_lock ownership/TTL, drift engine empty inputs, beat probe, provision time limit

  stale
  hellodk/kri#1049 · Filter by author hellodk opened on Aug 23, 2026
  1

• Agent loop robustness: prompt growth cap, disconnect cleanup, timeout, chat sanitization, token fallback, cost rates

  stale
  hellodk/kri#1048 · Filter by author hellodk opened on Aug 23, 2026
  1

• Minion telemetry overhaul: heartbeat perms/Linux fix, 30s state.apply cost, sbom URL bug, auto_accept default, dead returner, enrollment failure surfacing

  stale
  hellodk/kri#1047 · Filter by author hellodk opened on Aug 23, 2026
  1

• Secrets & transport hygiene: pillar perms, TOFU ordering, tls_verify, git host keys, approval email escaping, agent log redaction

  stale
  hellodk/kri#1046 · Filter by author hellodk opened on Aug 23, 2026
  1

• P0: Viewer-role users can open WebSSH/VNC sessions; playbook tree source_dir traversal

  stale
  hellodk/kri#1045 · Filter by author hellodk opened on Aug 23, 2026
  1