Conversation
docs(m17): track and close end-to-end audit gaps
* ci(e2e): automate intercept product paths Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): limit product flow help text Co-authored-by: jmjava <jmjava@gmail.com> * docs(m17): record intercept automation evidence Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): prepare intercept namespace and results evidence Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* ci(results): schedule strict database regression Co-authored-by: jmjava <jmjava@gmail.com> * docs(m17): record Results automation evidence Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* test(operator): add domain reconciliation integration Co-authored-by: jmjava <jmjava@gmail.com> * fix(operator): define integration list GVK Co-authored-by: jmjava <jmjava@gmail.com> * build(operator): upgrade golangci-lint for Go 1.23 Co-authored-by: jmjava <jmjava@gmail.com> * chore(operator): resolve lint gate findings Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* fix(ci): retry Tekton controller apply races Co-authored-by: jmjava <jmjava@gmail.com> * ci(operator): gate Tekton installer changes Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* fix(rbac): default pipeline bootstrap to least privilege Co-authored-by: jmjava <jmjava@gmail.com> * ci(rbac): require strict cluster regression Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* fix(test): isolate Helm RBAC rendering Co-authored-by: jmjava <jmjava@gmail.com> * fix(rbac): permit orchestrator PipelineRun creation Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* ci(rbac): isolate deterministic cluster gate Co-authored-by: jmjava <jmjava@gmail.com> * ci(rbac): gate cluster workflow changes Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
* ci(e2e): gate RBAC changes on intercept paths Co-authored-by: jmjava <jmjava@gmail.com> * fix(e2e): clone public apps without SSH secret Co-authored-by: jmjava <jmjava@gmail.com> --------- Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: jmjava <jmjava@gmail.com>
Co-authored-by: jmjava <jmjava@gmail.com>
jmjava
marked this pull request as ready for review
September 14, 2026 18:43
Co-authored-by: jmjava <jmjava@gmail.com>
jmjava
merged commit Sep 14, 2026
f7c54db
into
cursor/close-e2e-audit-gaps-fc5f
7 of 9 checks passed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
coschedule: disabledso compile TaskRuns may bind source and build-cache PVCsubuntu:22.04default instead of overriding Task defaults with an empty imageLive failure evidence
The first run confirmed the PVC change in TaskRun provenance. It then exposed two later blockers:
connection refusedbecause pod-selector waits could succeed before pods existed and ignored timeout failures.missing field(s): steps[0].Image; Pipeline defaults passed an empty value to Tasks and overrode their valid image defaults.Verification
bash -n scripts/install-tekton.shbash scripts/run-regression-agent.sh—regression exit code: 0(local-only because this environment has no kubectl context; Tekton/Newman/Results were not run locally)The live intercept and strict cluster workflows remain the cluster-backed acceptance gates.