admin 44ec06b50f hub v0.37.0: offsite provisioning SLICE 1 — Cloud-API client + provisioning core ...

Hetzner storage-box provisioning against api.hetzner.com/v1 (NOT .cloud).
internal/hetznerapi (typed client + CloudAPI interface + Fake + WaitAction);
internal/offsite (Provisioner.ProvisionOffsite — idempotent by label, shared
sub-account/dedicated box, transient password, non-secret Descriptor,
fail-closed); one_time_secrets store (single-use Save/Consume); POST
/offsite/consume-password/{id} (customer-key auth, once); config-form Offsite
section → applyOffsite (502+no-save on error) → descriptor in ConfigJSON →
version bump. Token/passwords never logged/committed/in ConfigJSON. Tested vs a
faked Cloud API + fail-closed red-proof. NOT yet live-provisioned (needs the
dedicated-project scoped token; current token can delete ep0).

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PSK5g6qYLknKj8u3QAFEr6

2026-07-09 18:38:24 +02:00

..

testdata

hub: S2 API — box-facing WG registration + merge-at-read + hub-owned-key guard

2026-07-04 00:44:40 +02:00

artifact_test.go

hub v0.16.0 + host-install v1.1.0: Day-0 artifact manifest + self-install the agent (BUNDLE slice)

2026-06-28 08:38:26 +02:00

config_version_ack_test.go

hub v0.26.0: pull-based config delivery + retire inbound GUI controls

2026-06-30 21:49:33 +02:00

desired_test.go

slice 10B: signed-op job completion (DELETE clear-job) (hub v0.10.0)

2026-06-10 20:14:32 +02:00

dr_test.go

slice 10D (hub): DR capstone — recovery mode + re-enroll + directive serving (hub v0.11.0)

2026-06-11 09:48:38 +02:00

dr.go

slice 10D (hub): DR capstone — recovery mode + re-enroll + directive serving (hub v0.11.0)

2026-06-11 09:48:38 +02:00

escrow_test.go

hub: opaque PBS recovery-code escrow storage (v0.8.0) + doc 03 §8a posture model

2026-06-10 07:46:33 +02:00

event_test.go

hub v0.31.0: accept 'critical' severity at event ingest + UI badges/CSS; event_test.go (red-proofed); REUSE.md §1/§3 updated

2026-07-03 11:08:44 +02:00

floor_ack_test.go

hub v0.15.0: Phase 2 managed updates — per-customer controller-version floor

2026-06-27 11:59:30 +02:00

handler.go

hub v0.37.0: offsite provisioning SLICE 1 — Cloud-API client + provisioning core

2026-07-09 18:38:24 +02:00

host_enroll_test.go

hub v0.14.0: passphrase-authed host enrollment (Day-0 option C)

2026-06-26 15:35:24 +02:00

host_recovery_test.go

feat(hub,install): break-glass recovery vault + mgmt_plane surfacing (TASK G1)

2026-07-05 19:03:18 +02:00

host_test.go

hub v0.7.4: ingest agent pbs_snapshots (slice 6 Phase B)

2026-06-09 17:15:58 +02:00

mail_test.go

hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP

2026-06-29 08:45:22 +02:00

mail.go

hub v0.18.0: app-email passthrough POST /api/v1/mail → Resend SMTP

2026-06-29 08:45:22 +02:00

offsite_test.go

hub v0.37.0: offsite provisioning SLICE 1 — Cloud-API client + provisioning core

2026-07-09 18:38:24 +02:00

offsite.go

hub v0.37.0: offsite provisioning SLICE 1 — Cloud-API client + provisioning core

2026-07-09 18:38:24 +02:00

wg_test.go

feat(hub): operator OOB peer + oob_peer_ip desired-state merge (H1 Part 1)

2026-07-05 22:08:06 +02:00

wg.go

feat(hub): OOB access health ingest + degraded alert (H1 Part 4)

2026-07-05 22:30:03 +02:00