OpenCHAMI Weekly Digest

A very busy week — tokensmith ships its first three releases, inventory-service and fabrica integration deepens, and several long-running issues close.

Highlights#

• tokensmith reaches its first releases: Three tags this week — tokensmith v0.0.1, v0.0.2, and a jump to v0.3.0. The big v0.3.0 release follows PR #19 updating tokensmith for use with SMD and the new fabrica-based services.
• inventory-service catches up to fabrica HEAD: shunr-hpe lands inventory-service #10 (update to fabrica 442df75), #11 (drop the “alternate ID” naming), and #12 (add CSM service REST endpoints). The service is taking shape fast.
• tokensmith hardening: tokensmith PR #13 (dockerfile runtime flags), #14 (per-PR container builds), #15 (JWKS format fix), #17 (generate kid on key creation), and #18 (skip publish on PR-only Goreleaser runs) — all landed this week. Plus #11 (bootstrap token feature).
• fabrica gains module compatibility checks: fabrica PR #38 from alexlovelltroy adds module compatibility checks and tests for code generation — protecting against generator/runtime drift.
• fabrica + tokensmith integration shipped: fabrica PR #34 (tokensmith authn/authz feature) lands.
• coresmd v0.6.1 cleanup release: coresmd v0.6.1 ships a follow-on to the v0.6.0 flexible hostname policy work.
• Magellan BMC configuration RFD: new magellan #129 from davidallendj proposes BMC configuration (NTP, syslog, SSH keys, etc.) via magellan — bringing more BMC lifecycle into scope.
• Old magellan issues clear: magellan #122 (manual pages), #123 (cache default), #127 (RF SerialConsole) all closed.
• /swagger → /docs resurfaces: fabrica #31 — the rename from /swagger to /docs — got attention again as fabrica matures.

New & Notable PRs#

• Update tokensmith for SMD + fabrica services (tokensmith #19) by alexlovelltroy
• Module compatibility check for code generation (fabrica #38) by alexlovelltroy
• Tokensmith authn/authz feature (fabrica #34) by alexlovelltroy
• Add CSM service REST endpoints (inventory-service #12) by shunr-hpe
• Update inventory-service to latest fabrica (inventory-service #10) by shunr-hpe
• Bootstrap token (tokensmith #11) by alexlovelltroy
• Fix JWKS format (tokensmith #15) by travisbcotton

Issues to Watch#

• BMC NTP/Syslog/SSH key config via magellan (magellan #129) — expands magellan’s scope from discovery to lifecycle.
• Add insecure token provider (tokensmith #12) — dev-mode shortcut.
• Track service version (fabrica #41) — observability + compatibility.
• id_set for CoreSMD rules (coresmd #57) — still open from last week.
• Switch coresmd to structured logging (coresmd #50) — sibling of bss structured-logging proposal.

Releases#

• tokensmith v0.3.0 — the headline release with SMD + fabrica support
• tokensmith v0.0.2
• tokensmith v0.0.1
• coresmd v0.6.1

Contributor Thanks#

• alexlovelltroy — drove the tokensmith + fabrica + coresmd integration arc this week.
• travisbcotton — tokensmith hardening (JWKS, key kid, dockerfile, signing consistency).
• shunr-hpe — sustained inventory-service progress.
• synackd — tokensmith CI patterns + ongoing review presence.
• davidallendj — BMC config RFD on magellan.

What’s next?#

• Resolve the tokensmith v0.0.x → v0.3.0 jump in the release notes / changelog narrative.
• Pick up magellan #129 BMC configuration — design the surface before implementation.
• Land coresmd #57 (id_set) and start the structured-logging work in coresmd #50 and bss #77.

Proposed Blog Titles#

1. “Introducing tokensmith v0.3.0: SMD-Compatible Service Auth”
2. “fabrica + tokensmith: How OpenCHAMI Services Talk to Each Other”
3. “inventory-service Comes of Age: CSM REST Endpoints”
4. “Beyond Discovery: Configuring BMCs Through magellan”