orca/internal/sshpush at 3a3ea74d769ed748ab43e12142063dcecbec3b03 - orca

Files

T

Jon Chery 3a3ea74d76 fix(P08): transport + SSH safety — typed errors, IPv6, timeouts, signal (REQ-157)

- transport.IsTransient: typed sentinels (ErrTransient/ErrPermanent) +
  standard net.Error/io errors.Is; substring matching removed
- sshpush.isTransient: same typed-error classification
- rotateSSHKeys: 2-phase atomic swap (stage peers -> swap local ->
  verify -> cleanup old); no more partial-result window
- known_hosts: dial() reads stored field (was reading v0.8 path directly)
- IPv6: net.JoinHostPort in proxmox SSH dial + drain splitHostPort
- SSH timeouts: context.WithTimeout on peer-setup, drift, txn rollback,
  job restart (default 2m)
- verifyCutover: orca CA pool TLS config (was default http.Client)
- OIDC callback: ReadHeaderTimeout 5s (slowloris defense)
- root Execute: signal.NotifyContext for SIGINT/SIGTERM (clean exit
  for non-watch commands)

Tests: typed-error classification table, IPv6 JoinHostPort, signal
handler context cancellation.

---ci---
project: orca
phase: 8
milestone: v0.13
status: complete
requirements:
  covered: [157]
---/ci---

2026-08-10 13:11:07 +00:00

atomic_writer_test.go

feat(P02): Service block + Traefik emitter + atomic reload (REQ-077, gate C-10)

2026-08-05 17:48:04 +00:00

auth_test.go

fix(P04): wire ACL enforcement + WebAuthn reg auth + audit actor (REQ-153)

2026-08-07 20:33:39 +00:00

auth.go

fix(P04): wire ACL enforcement + WebAuthn reg auth + audit actor (REQ-153)

2026-08-07 20:33:39 +00:00

doc.go

feat(P01): SSH-push transport layer — connection pool, retry, fan-out, idempotent writes (REQ-073)