feat(k8s): terminate TLS in the cluster for a public domain (closes #177)
area:infratype:adr-proposal
CI / k8s (pull_request) Successful in 6s
CI / build (pull_request) Successful in 1m28s
CI / lint (pull_request) Successful in 1m51s
CI / unit (pull_request) Successful in 1m12s
CI / frontend (pull_request) Successful in 2m11s
CI / mutation (pull_request) Successful in 3m45s
CI / verify-stack (pull_request) Successful in 8m15s
#178
opened 2026-09-18 14:31:20 +00:00 by not
Iteration 6 — Production Posture
6 / 8
1 conflicting file
ci(deploy): deploy the stack to Talos on merge to main (closes #175)
area:infratype:chore
CI / k8s (pull_request) Successful in 5s
CI / lint (pull_request) Successful in 1m25s
CI / build (pull_request) Successful in 1m22s
CI / unit (pull_request) Successful in 1m24s
CI / frontend (pull_request) Successful in 1m45s
CI / mutation (pull_request) Successful in 3m1s
CI / verify-stack (pull_request) Successful in 6m22s
docs(nav): publish every ADR and runbook, gated by a nav check (closes #169)
area:docstype:chore
CI / build (pull_request) Successful in 4m45s
CI / lint (pull_request) Successful in 5m4s
CI / unit (pull_request) Successful in 1m0s
CI / frontend (pull_request) Successful in 1m56s
CI / mutation (pull_request) Successful in 3m10s
CI / verify-stack (pull_request) Successful in 6m8s
ci(k8s): gate the Helm chart in CI + a compose↔chart drift check (closes #168)
area:infratype:chore
CI / lint (pull_request) Successful in 1m24s
CI / k8s (pull_request) Successful in 8s
CI / build (pull_request) Successful in 1m1s
CI / unit (pull_request) Successful in 1m7s
CI / frontend (pull_request) Successful in 1m50s
CI / mutation (pull_request) Successful in 3m37s
CI / verify-stack (pull_request) Successful in 6m13s
S-24/#25 · Helm chart + Kubernetes deployment, and Caddy for the portals (#166)
area:infraarea:portal-behandelarea:portal-self-servicetype:slice
CI / build (pull_request) Successful in 1m9s
CI / lint (pull_request) Successful in 1m27s
CI / unit (pull_request) Successful in 1m37s
CI / frontend (pull_request) Successful in 3m16s
CI / mutation (pull_request) Successful in 6m20s
CI / verify-stack (pull_request) Successful in 9m58s
fix(e2e): bound the Playwright run and make a failed login say why (closes #161)
area:portal-behandeltype:bug
CI / lint (pull_request) Successful in 2m19s
CI / build (pull_request) Successful in 1m9s
CI / unit (pull_request) Successful in 1m29s
CI / frontend (pull_request) Successful in 3m4s
CI / mutation (pull_request) Successful in 6m7s
CI / verify-stack (pull_request) Successful in 10m0s
S-26/#162 · Werkbak refreshes itself when a registration is ready for beoordeling
area:portal-behandeltype:slice
CI / build (pull_request) Successful in 1m4s
CI / lint (pull_request) Successful in 1m23s
CI / unit (pull_request) Successful in 1m24s
CI / frontend (pull_request) Successful in 3m8s
CI / mutation (pull_request) Successful in 6m18s
CI / verify-stack (pull_request) Successful in 10m15s
docs(architecture): import the FDS architecture decisions from the lab repo (closes #159)
CI / lint (pull_request) Successful in 1m26s
CI / build (pull_request) Successful in 1m13s
CI / unit (pull_request) Successful in 1m39s
CI / frontend (pull_request) Successful in 3m32s
CI / mutation (pull_request) Successful in 6m33s
CI / verify-stack (pull_request) Successful in 8m16s
S-15c · Enforce MFA on the medewerker (Keycloak) realm
area:infratype:slice
CI / build (pull_request) Successful in 1m7s
CI / lint (pull_request) Successful in 1m22s
CI / unit (pull_request) Successful in 1m24s
CI / frontend (pull_request) Successful in 3m6s
CI / mutation (pull_request) Successful in 6m11s
CI / verify-stack (pull_request) Successful in 8m52s
fix(observability): stop single-binary Tempo evicting its only ingester (closes #156)
area:infratype:bug
CI / lint (pull_request) Successful in 1m41s
CI / build (pull_request) Successful in 1m8s
CI / unit (pull_request) Successful in 1m23s
CI / frontend (pull_request) Successful in 3m21s
CI / mutation (pull_request) Successful in 6m32s
CI / verify-stack (pull_request) Successful in 9m31s
feat: read projection sourced from the register in Objecten (closes #153)
area:aclarea:event-subscriberarea:projectiontype:slice
CI / lint (pull_request) Successful in 1m25s
CI / build (pull_request) Successful in 1m14s
CI / unit (pull_request) Successful in 1m26s
CI / frontend (pull_request) Successful in 3m7s
CI / mutation (pull_request) Successful in 6m13s
CI / verify-stack (pull_request) Successful in 9m32s
feat(infra): Objecten publishes register events to NRC (closes #152)
area:infratype:slice
CI / build (pull_request) Successful in 1m14s
CI / lint (pull_request) Successful in 1m30s
CI / unit (pull_request) Successful in 1m34s
CI / frontend (pull_request) Successful in 3m14s
CI / mutation (pull_request) Successful in 6m21s
CI / verify-stack (pull_request) Successful in 8m48s
S-19a · ACL writes the RegisterRecord to Objecten on approval (closes #149)
area:acltype:slice
CI / build (pull_request) Successful in 1m6s
CI / lint (pull_request) Successful in 1m19s
CI / unit (pull_request) Successful in 1m24s
CI / frontend (pull_request) Successful in 2m57s
CI / mutation (pull_request) Successful in 6m7s
CI / verify-stack (pull_request) Successful in 7m49s
perf: cap OpenZaak + NRC uWSGI workers — shrink verify-stack footprint (closes #147)
area:infratype:chore
CI / build (pull_request) Successful in 1m24s
CI / lint (pull_request) Successful in 1m39s
CI / unit (pull_request) Successful in 2m3s
CI / frontend (pull_request) Successful in 4m20s
CI / mutation (pull_request) Successful in 7m12s
CI / verify-stack (pull_request) Successful in 7m27s
S-18c · RegisterRecord objecttype defined + registered (closes #141)
area:infratype:slice
CI / lint (pull_request) Successful in 1m38s
CI / build (pull_request) Successful in 1m57s
CI / unit (pull_request) Successful in 2m15s
CI / frontend (pull_request) Successful in 4m10s
CI / mutation (pull_request) Successful in 11m21s
CI / verify-stack (pull_request) Successful in 8m51s
fix: cap Objecten/Objecttypen uWSGI to 1 worker — unstarve verify-stack e2e (closes #144)
area:infratype:bug
CI / build (pull_request) Successful in 1m26s
CI / lint (pull_request) Successful in 1m38s
CI / unit (pull_request) Successful in 2m18s
CI / frontend (pull_request) Successful in 4m50s
CI / mutation (pull_request) Successful in 7m14s
CI / verify-stack (pull_request) Successful in 10m49s
S-18b · Objecten API up in compose, wired to Objecttypen (closes #140)
area:infratype:slice
CI / lint (pull_request) Successful in 1m37s
CI / build (pull_request) Successful in 7m45s
CI / unit (pull_request) Successful in 1m32s
CI / frontend (pull_request) Successful in 3m22s
CI / mutation (pull_request) Successful in 6m39s
CI / verify-stack (pull_request) Successful in 9m12s
feat(infra): Objecttypen API up in compose with a seeded static token (closes #139)
area:infratype:slice
CI / build (pull_request) Successful in 1m20s
CI / lint (pull_request) Successful in 1m32s
CI / unit (pull_request) Successful in 1m42s
CI / frontend (pull_request) Successful in 3m55s
CI / mutation (pull_request) Successful in 6m30s
CI / verify-stack (pull_request) Successful in 8m53s
feat(portal-beheer): ACL default-fill configuration editor (closes #131)
area:aclarea:bffarea:portal-beheertype:slice
CI / build (pull_request) Successful in 1m19s
CI / lint (pull_request) Successful in 1m32s
CI / unit (pull_request) Successful in 1m49s
CI / frontend (pull_request) Successful in 3m44s
CI / mutation (pull_request) Successful in 6m29s
CI / verify-stack (pull_request) Successful in 15m53s
ci: richer step reports via Gitea 1.27 job summaries (closes #136)
area:infratype:chore
CI / lint (pull_request) Successful in 1m32s
CI / build (pull_request) Successful in 1m12s
CI / unit (pull_request) Successful in 1m48s
CI / frontend (pull_request) Successful in 3m42s
CI / mutation (pull_request) Successful in 7m46s
CI / verify-stack (pull_request) Successful in 7m41s