5 commits

Author	SHA1	Message	Date
rcourtman	3dba961abf	test: Add permanent failure test for ClusterClient.GetNodes ... Tests the error logging path when all endpoints fail with auth error (83.3% to 91.7% coverage).	2025-12-02 01:05:48 +00:00
rcourtman	d69b0bbc86	test: Add edge case test for isNotImplementedError fallback branch ... Tab character triggers extractStatusCode fallback path (regex \s+ matches tab but ' 501' substring check doesn't). Coverage: 87.5% to 100%.	2025-12-01 23:18:45 +00:00
rcourtman	1542093cba	Add unit tests for cluster_client utility functions ... Test coverage for error detection and retry logic: - extractStatusCode: 13 test cases for HTTP status code extraction - isTransientRateLimitError: 17 test cases for rate limit detection - isNotImplementedError: 14 test cases for 501 error detection - isVMSpecificError: 16 test cases for VM-scoped errors - calculateRateLimitBackoff: backoff timing verification - isAuthError: 12 test cases for authentication errors Coverage 35.5% → 37.3%	2025-12-01 00:24:21 +00:00
rcourtman	4c1da82e28	Handle VM guest agent errors without marking nodes unhealthy (related to #736)	2025-11-21 17:34:25 +00:00
rcourtman	524f42cc28	security: complete Phase 1 sensor proxy hardening ... Implements comprehensive security hardening for pulse-sensor-proxy: - Privilege drop from root to unprivileged user (UID 995) - Hash-chained tamper-evident audit logging with remote forwarding - Per-UID rate limiting (0.2 QPS, burst 2) with concurrency caps - Enhanced command validation with 10+ attack pattern tests - Fuzz testing (7M+ executions, 0 crashes) - SSH hardening, AppArmor/seccomp profiles, operational runbooks All 27 Phase 1 tasks complete. Ready for production deployment.	2025-10-20 15:13:37 +00:00