-
Notifications
You must be signed in to change notification settings - Fork 6
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
chore(ci): delete stale azure-/gcp- junk GitHub environments; root cause identified and already fixed
effort/xsTrivial / one-linerTrivial / one-linerimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/eventuallyNo deadlineNo deadlineStatus: Open.#1684 In LeanerCloud/CUDly;Azure role-parity guard: principalId unchecked; no assertion on expected grant set
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1681 In LeanerCloud/CUDly;chore(db): evaluate reconstructing purchase_history rows lost to the VARCHAR(20) account_id truncation (#1603)
effort/mDaysDaysimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/eventuallyNo deadlineNo deadlineStatus: Open.#1680 In LeanerCloud/CUDly;fix(exchange): interactive AWS/Azure RI exchange endpoints persist no ri_exchange_history row, so their spend bypasses the daily-cap accounting
effort/mDaysDaysimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/highSignificant harmSignificant harmstatus/needs-infoAwaiting clarification from the askerAwaiting clarification from the askertriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1679 In LeanerCloud/CUDly;fix(db): ri_exchange_history.account_id VARCHAR(20) + AWS-shaped CHECK would reject Azure/GCP exchanges (latent, sibling of #1603)
effort/sHoursHoursimpact/fewLimited audienceLimited audiencepriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/eventuallyNo deadlineNo deadlineStatus: Open.#1676 In LeanerCloud/CUDly;sec(iac): setup-gcp-wif.sh provider-reuse path validates attribute condition but not attribute mapping
effort/sHoursHoursimpact/fewLimited audienceLimited audiencepriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1672 In LeanerCloud/CUDly;fix(plans): retrying two failed accounts of one ramp step advances CurrentStep twice, so a later step silently never purchases
effort/mDaysDaysimpact/manyAffects most usersAffects most userspriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1669 In LeanerCloud/CUDly;fix(purchase): user-facing Retry ignores recIsSafeToRedrive, so retrying a landed Azure savings-plan buys a second one
effort/sHoursHoursimpact/fewLimited audienceLimited audiencepriority/p1Next up; this sprintNext up; this sprintseverity/criticalMajor harm when it happensMajor harm when it happenstriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1668 In LeanerCloud/CUDly;sec(iac): GCP WIF Terraform bypass - IAM user path defeats contains() role check, plus pool-wide grant
effort/mDaysDaysimpact/all-usersAffects every userAffects every userpriority/p0Drop everything; same-day fixDrop everything; same-day fixseverity/criticalMajor harm when it happensMajor harm when it happenstriagedItem has been triagedItem has been triagedtype/securitySecurity findingSecurity findingurgency/nowDrop other thingsDrop other thingsStatus: Open.#1667 In LeanerCloud/CUDly;chore(iac): remove or wire up unused roleAssignmentGuidPrefix ARM parameter
effort/xsTrivial / one-linerTrivial / one-linerimpact/internalTeam-internal onlyTeam-internal onlypriority/p3Polish / idea / may never shipPolish / idea / may never shipseverity/lowMinor harmMinor harmtriagedItem has been triagedItem has been triagedtype/choreMaintenance / non-user-visibleMaintenance / non-user-visibleurgency/eventuallyNo deadlineNo deadlineStatus: Open.#1666 In LeanerCloud/CUDly;fix(ci): deploy-all.yml declares no permissions, so called deploy workflows cannot obtain an OIDC token
effort/xsTrivial / one-linerTrivial / one-linerimpact/all-usersAffects every userAffects every userpriority/p1Next up; this sprintNext up; this sprintseverity/highSignificant harmSignificant harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-sprintWithin the current sprintWithin the current sprintStatus: Open.#1665 In LeanerCloud/CUDly;fix(gcp): GroupCommitments merges different machine families into one untyped commitment
effort/sHoursHoursimpact/manyAffects most usersAffects most userspriority/p2Backlog-worthyBacklog-worthyseverity/mediumModerate harmModerate harmtriagedItem has been triagedItem has been triagedtype/bugDefectDefecturgency/this-quarterWithin the quarterWithin the quarterStatus: Open.#1664 In LeanerCloud/CUDly;