danvics/Pulse
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
1921 commits 1 branch 0 tags 55 MiB
Commit graph

7 commits

Author SHA1 Message Date
rcourtman
26133cf0cf feat: Improve cluster endpoint error messages for users 
- Add sanitizeEndpointError() to transform raw Go errors into user-friendly messages
- Transform 'context deadline exceeded' into helpful messages mentioning possible causes
- Storage timeout errors now suggest checking PBS/NFS/Ceph backend connectivity
- Connection refused, certificate errors, and auth errors get actionable hints
- Apply sanitization everywhere cluster endpoint lastError is stored
- Add comprehensive tests for all error transformations
 2025-12-16 21:50:02 +00:00
rcourtman
72af7bed5e style: Apply gofmt to 37 files 
Standardize code formatting across test files and monitor.go.
No functional changes.
 2025-12-02 17:21:48 +00:00
rcourtman
3dba961abf test: Add permanent failure test for ClusterClient.GetNodes 
Tests the error logging path when all endpoints fail with auth error
(83.3% to 91.7% coverage).
 2025-12-02 01:05:48 +00:00
rcourtman
d69b0bbc86 test: Add edge case test for isNotImplementedError fallback branch 
Tab character triggers extractStatusCode fallback path (regex \s+ matches
tab but ' 501' substring check doesn't). Coverage: 87.5% to 100%.
 2025-12-01 23:18:45 +00:00
rcourtman
1542093cba Add unit tests for cluster_client utility functions 
Test coverage for error detection and retry logic:
- extractStatusCode: 13 test cases for HTTP status code extraction
- isTransientRateLimitError: 17 test cases for rate limit detection
- isNotImplementedError: 14 test cases for 501 error detection
- isVMSpecificError: 16 test cases for VM-scoped errors
- calculateRateLimitBackoff: backoff timing verification
- isAuthError: 12 test cases for authentication errors

Coverage 35.5% → 37.3%
 2025-12-01 00:24:21 +00:00
rcourtman
4c1da82e28 Handle VM guest agent errors without marking nodes unhealthy (related to #736) 2025-11-21 17:34:25 +00:00
rcourtman
524f42cc28 security: complete Phase 1 sensor proxy hardening 
Implements comprehensive security hardening for pulse-sensor-proxy:
- Privilege drop from root to unprivileged user (UID 995)
- Hash-chained tamper-evident audit logging with remote forwarding
- Per-UID rate limiting (0.2 QPS, burst 2) with concurrency caps
- Enhanced command validation with 10+ attack pattern tests
- Fuzz testing (7M+ executions, 0 crashes)
- SSH hardening, AppArmor/seccomp profiles, operational runbooks

All 27 Phase 1 tasks complete. Ready for production deployment.
 2025-10-20 15:13:37 +00:00