Shankar e1630bcb44 feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM ...

Extend certificate discovery from filesystem + network to cloud secret
managers. Three pluggable DiscoverySource connectors feed into the
existing discovery pipeline via sentinel agent pattern, with a 9th
scheduler loop for periodic cloud scanning.

- AWS Secrets Manager: aws-sdk-go-v2, tag/prefix filtering, 10 tests
- Azure Key Vault: stdlib HTTP + OAuth2, base64 DER/PEM, 16 tests
- GCP Secret Manager: stdlib HTTP + JWT OAuth2, label filter, 14 tests
- CloudDiscoveryService orchestrator with 9 tests
- 9th scheduler loop (6h default, atomic.Bool idempotency)
- Discovery page: color-coded source type badges
- 14 new env vars across CloudDiscoveryConfig structs
- Docs: connectors.md, architecture.md, features.md, README updated

49 new tests. All CI checks pass (go vet, race, lint, coverage).

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-04-15 23:01:00 -04:00

..

agent_group_test.go

fix: resolve test compilation and runtime failures across codebase

2026-03-27 22:53:46 -04:00

agent_group.go

fix(quality): TICKET-012 propagate request context instead of context.Background()

2026-03-27 21:35:22 -04:00

agent_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

agent.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

audit_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

audit.go

Fix runtime bugs, implement service layer, and overhaul documentation

2026-03-14 21:38:11 -04:00

ca_operations_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

ca_operations.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

certificate_nil_safety_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

certificate_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

certificate.go

fix: end-to-end certificate lifecycle bugs + integration test environment

2026-04-02 17:02:20 -04:00

cloud_discovery_test.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

cloud_discovery.go

feat(M50): cloud secret manager discovery — AWS SM, Azure KV, GCP SM

2026-04-15 23:01:00 -04:00

concurrent_test.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

config_helpers_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

config_helpers.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

context_test.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

crypto_validation_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

crypto_validation.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

csr_renewal_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

deployment_test.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

deployment.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

digest_test.go

feat(m28+m29+m30): ACME ARI, email digest, and Helm chart

2026-03-28 21:18:35 -04:00

digest.go

fix: staticcheck S1016 struct conversion + Helm with/else-if parse error

2026-03-28 21:25:25 -04:00

discovery_test.go

feat: M18b Filesystem Certificate Discovery — agent scanning, server dedup, triage API

2026-03-24 00:25:00 -04:00

discovery.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

est_test.go

feat: add EST server (RFC 7030) for device certificate enrollment (M23)

2026-03-25 15:31:06 -04:00

est.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

export_test.go

feat(m27): certificate export (PEM/PKCS#12) and S/MIME EKU support

2026-03-28 16:16:19 -04:00

export.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

health_check_test.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

health_check.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

issuer_adapter_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_adapter.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

issuer_bootstrap_test.go

test: comprehensive test gap closure across 24 packages

2026-04-09 23:09:40 -04:00

issuer_registry_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

issuer_registry.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

issuer_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

issuer.go

feat(M49): Entrust, GlobalSign & EJBCA issuer connectors

2026-04-15 22:24:12 -04:00

job_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

job.go

fix: end-to-end certificate lifecycle bugs + integration test environment

2026-04-02 17:02:20 -04:00

m11c_crypto_enforcement_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

network_scan_test.go

fix: security audit remediation (AUDIT-001, 003, 004, 005, 006, 018)

2026-03-28 14:11:16 -04:00

network_scan.go

feat(M48): continuous TLS health monitoring — endpoint state machine, shared tlsprobe, 8 API endpoints, GUI

2026-04-15 21:45:45 -04:00

notification_test.go

Implement M4: comprehensive test coverage with 120 tests

2026-03-15 00:25:01 -04:00

notification.go

feat: M15a — certificate revocation API, CRL endpoint, and revocation notifications

2026-03-22 10:59:18 -04:00

owner_test.go

test: comprehensive test expansion — 330+ to 525+ tests, close M11b coverage gaps

2026-03-21 23:43:32 -04:00

owner.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

policy_test.go

style: run gofmt -s across all Go files

2026-03-17 19:32:29 -04:00

policy.go

fix(ci): resolve 9 remaining staticcheck issues

2026-03-27 23:20:28 -04:00

profile_test.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

profile.go

feat: M11a — certificate profiles, crypto policy enforcement, short-lived cert expiry

2026-03-20 20:39:49 -04:00

renewal_test.go

docs: rewrite features.md, audit README + architecture against repo

2026-04-15 00:22:57 -04:00

renewal.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

revocation_svc_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

revocation_svc.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

revocation_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

scep_test.go

feat(M51): add SCEP server (RFC 8894) for MDM and network device enrollment

2026-04-15 16:47:18 -04:00

scep.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

shortlived_test.go

feat(M34): dynamic issuer configuration with encrypted config storage

2026-04-04 00:20:13 -04:00

stats_test.go

fix: resolve flaky TestGetJobStats_WithData timezone issue

2026-03-25 20:55:48 -04:00

stats.go

fix: normalize certificate status case in stats service

2026-03-24 12:17:24 -04:00

target_test.go

feat(M35): dynamic target configuration with encrypted config, test connection, and GUI updates

2026-04-04 01:09:53 -04:00

target.go

feat(M47): add Kubernetes Secrets target + AWS ACM PCA issuer connectors

2026-04-07 20:21:09 -04:00

team_test.go

fix: resolve NULL csr_pem scan errors and QA smoke test failures

2026-03-30 00:51:18 -04:00

team.go

fix: replace fmt.Printf with structured slog logging across all services

2026-03-20 01:20:03 -04:00

testutil_test.go

feat(M11c): crypto policy enforcement — CSR validation, MaxTTL caps, key metadata

2026-04-15 21:05:14 -04:00

verification_test.go

feat(M31): agent work routing — scope jobs to assigned agents

2026-03-30 14:10:42 -04:00

verification.go

fix: remove unused time import in verification service

2026-03-27 21:11:16 -04:00