Every commit scored for change-risk against this repo's own history, so 'elevated' means elevated here rather than on some global curve.
Needs review
21 commits sit in this repo's top risk tercile, which is 31% of the 67scored. The cut is drawn against this codebase's own history rather than a global curve, so a quiet repo still fills its top band, and here it starts at 6.4 out of 10. What pushes a commit up is size and spread together: a large change confined to one area scores below a smaller one scattered across a dozen files.
Commit categories over time, read off the subject line. Fixes carry the accent because that is the series this chart exists to show.
Consistently feature-driven across its history.
Ranked by change-risk, highest first. Priority is a tercile of this repo's own distribution, so a quiet repo still fills its top band.
| # | Commit | Author | When | Lines | Risk | Top driver |
|---|---|---|---|---|---|---|
| 1 | f5d7ea4ffeat(platform): add observability, byo-ca, csi-driver, storage-provisioner; fix argocd-repo-creds and issuer wiring | Bharat Baliyan | 1mo ago | +704 -16 | 99%Elevated | more lines added than baseline |
| 2 | 454123e2Vendor system-upgrade-controller manifests instead of Kustomize | Bharat Baliyan | 3w ago | +344 -12 | 98%Elevated | more lines added than baseline |
| 3 | 668f5155feat: add headlamp, ingress-routes, ingress-tls platform apps (wave 2) | Bharat Baliyan | 1mo ago | +193 -0 | 96%Elevated | more lines added than baseline |
| 4 | 0c9a96bcstorage-provisioner: add local-path as a lean, dependency-free option | Bharat Baliyan | 4w ago | +181 -1 | 95%Elevated | more lines added than baseline |
| 5 | 01b5c2aeAdd system-upgrade-controller and RKE2 upgrade Plans | Bharat Baliyan | 3w ago | +169 -0 | 92%Elevated | more lines added than baseline |
| 6 | ef10d445feat: add trust-manager, traefik, pki-issuer platform apps (wave 1) | Bharat Baliyan | 1mo ago | +148 -0 | 92%Elevated | more lines added than baseline |
| 7 | c6aacabfchore: scaffold kube-platform repo and bootstrap Helm chart | Bharat Baliyan | 1mo ago | +221 -0 | 92%Elevated | more lines added than baseline |
| 8 | e3736dd0feat: add k3s-system patches and cert-manager platform apps (wave 0) | Bharat Baliyan | 1mo ago | +106 -0 | 89%Elevated | more lines added than baseline |
| 9 | b2c7f20fbootstrap: add Cilium and Argo CD self-management Applications | Bharat Baliyan | 4w ago | +96 -0 | 87%Elevated | more lines added than baseline |
| 10 | b6444ca6feat(bootstrap): add ESO and argocd-repo-creds apps (conditional on secretStoreType) | Bharat Baliyan | 1mo ago | +89 -0 | 86%Elevated | more lines added than baseline |
| 11 | 6fbd6ca0feat(platform): add argocd-repo-creds chart (ClusterSecretStore + ExternalSecret) | Bharat Baliyan | 1mo ago | +77 -0 | 84%Elevated | more lines added than baseline |
| 12 | 004705e2storage-provisioner: implement longhorn and democratic-csi backends | Bharat Baliyan | 4w ago | +68 -8 | 82%Elevated | more lines added than baseline |
| 13 | 78f8dd07feat: add trust-bundle and workload-set platform apps (waves 2-3) | Bharat Baliyan | 1mo ago | +74 -0 | 82%Elevated | more lines added than baseline |
| 14 | 3a650607Add renovate.json | Bharat Baliyan | 1w ago | +69 -0 | 79%Elevated | more lines added than baseline |
| 15 | 27d6f05fAdd MetalLB as the LoadBalancer mechanism, gated behind metallbAddressPool | Bharat Baliyan | 4w ago | +85 -0 | 79%Elevated | more lines added than baseline |
| 16 | baef9a29Add a second storage-provisioner instance for consumers needing two backends | Bharat Baliyan | 1w ago | +54 -0 | 77%Elevated | more lines added than baseline |
| 17 | b7c2926bargocd: support token auth for repo-creds and CA trust for internal git hosts | Bharat Baliyan | 1mo ago | +55 -5 | 75%Elevated | more lines added than baseline |
| 18 | c60cf3cefix(traefik,pki-issuer): wire traefikExtraConfig.ports; decouple pki-issuer secret store | Bharat Baliyan | 1mo ago | +56 -1 | 75%Elevated | more lines added than baseline |
| 19 | 407c4791Give democratic-csi's containers real resource requests and limits | Bharat Baliyan | 1w ago | +45 -0 | 72%Elevated | more lines added than baseline |
| 20 | dca8e01bfeat(observability): scrape Argo CD metrics and add its Grafana dashboard | Bharat Baliyan | 1mo ago | +41 -0 | 72%Elevated | more lines added than baseline |
| 21 | 5e42a532Point the EBS CSI config at the sidecar that actually handles VAC | Bharat Baliyan | 1w ago | +38 -30 | 69%Elevated | more lines added than baseline |
| 22 | 9a06b453Re-enable volumeModificationFeature -- the native resizer path isn't working here | Bharat Baliyan | 1w ago | +33 -20 | 66%Typical | more lines added than baseline |
| 23 | 3b61e25dAdd CAPI/CAPMOX/CAPRKE2/cluster-autoscaler version pins and bootstrap Application | Bharat Baliyan | 2w ago | +39 -0 | 66%Typical | more lines added than baseline |
| 24 | cdc4bd52Give Argo CD's repo-server/controller resource requests and probe headroom | Bharat Baliyan | 4w ago | +34 -0 | 66%Typical | more lines added than baseline |
| 25 | 9f7c362fAdd an opt-in GPU Operator Application | Bharat Baliyan | 1w ago | +40 -0 | 63%Typical | more lines added than baseline |
| 26 | 9aa42b15Make platform-versions.yaml the live source for Cilium/Argo CD versions (#1) | bbaliyan | 2w ago | +31 -16 | 63%Typical | more lines added than baseline |
| 27 | 31dd4482Make the EBS CSI comments say what's actually known | Bharat Baliyan | 1w ago | +23 -24 | 60%Typical | more lines added than baseline |
| 28 | 0233f3b4Disable volumemodifier's leader election to fix a lease collision with resizer | Bharat Baliyan | 1w ago | +24 -0 | 60%Typical | more lines added than baseline |
| 29 | cbd9b8b8Turn off volumeModificationFeature -- stop using the deprecated sidecar entirely | Bharat Baliyan | 1w ago | +21 -30 | 57%Typical | more lines added than baseline |
| 30 | be50d305feat(storage-provisioner): tag CSI-provisioned EBS volumes with clusterName + extraTags | Bharat Baliyan | 1mo ago | +19 -0 | 56%Typical | more lines added than baseline |
| 31 | f64e4fc8Publish cluster identity as a kube-public ConfigMap from ingress-tls | Bharat Baliyan | 1w ago | +23 -0 | 54%Typical | more lines added than baseline |
| 32 | 105a69a9Right-size Argo CD resource limits against community guidance + real usage | Bharat Baliyan | 4w ago | +16 -11 | 54%Typical | more lines added than baseline |
| 33 | 497b431aFix etcd metrics scrape port | Bharat Baliyan | 1w ago | +17 -0 | 51%Typical | more lines added than baseline |
| 34 | b5876c0aEnable Grafana's datasources sidecar cluster-wide | Bharat Baliyan | 1w ago | +16 -0 | 50%Typical | more lines added than baseline |
| 35 | 4336e02ecilium: set operator.replicas to 1, matching genesis's single-node default | Bharat Baliyan | 4w ago | +14 -8 | 49%Typical | more lines added than baseline |
| 36 | 9da6ffafMake cilium-operator replica count overridable per-cluster | Bharat Baliyan | 1w ago | +13 -7 | 46%Typical | more lines added than baseline |
| 37 | c4d50f10Switch load balancing to Cilium Node IPAM LB, retire MetalLB | Bharat Baliyan | 3w ago | +15 -85 | 46%Typical | more scattered than baseline |
| 38 | ab10e1c5observability: pin Grafana admin password against Argo CD sync churn | Bharat Baliyan | 1mo ago | +12 -0 | 44%Typical | more focused than baseline |
| 39 | f8c04236Remove the local-path-deprioritise job from the aws-ebs storage-provisioner chart | Bharat Baliyan | 5d ago | +11 -77 | 43%Typical | more focused than baseline |
| 40 | 4b4ca1d6Fix system-upgrade-controller RBAC sync failure | Bharat Baliyan | 3w ago | +10 -3 | 41%Typical | more focused than baseline |
| 41 | 527cc268Add a cluster-wide CronJob/Job dashboard to Grafana | Bharat Baliyan | 5d ago | +10 -0 | 39%Typical | more focused than baseline |
| 42 | 6b276f7astorage-provisioner: add generic Helm-values passthrough for non-aws-ebs backends | Bharat Baliyan | 4w ago | +11 -0 | 39%Typical | more directories than baseline |
| 43 | 5514b5f3fix(observability): add required schemaConfig for loki chart 7.0.0 | Bharat Baliyan | 1mo ago | +9 -0 | 37%Typical | fewer lines added than baseline |
| 44 | 71d85c3eRaise Argo CD controller's memory limit to stop OOM kills | Bharat Baliyan | 4w ago | +8 -2 | 35%Typical | fewer lines added than baseline |
| 45 | 2739c048Fix local-path-deprioritise job crash-looping on broken bitnami/kubectl:latest | Bharat Baliyan | 5d ago | +8 -1 | 32%Below typical | fewer lines added than baseline |
| 46 | 5e5c3a30Fix prometheus IngressRoute: wrong service name | Bharat Baliyan | 1w ago | +8 -1 | 32%Below typical | fewer lines added than baseline |
| 47 | bb497ee8Tolerate CriticalAddonsOnly on the rke2-server upgrade Plan | Bharat Baliyan | 3w ago | +8 -0 | 32%Below typical | fewer lines added than baseline |
| 48 | fdac8268Enable volumeModificationFeature so live IOPS/throughput changes actually apply | Bharat Baliyan | 1w ago | +7 -0 | 27%Below typical | fewer lines added than baseline |
| 49 | a6e37db3Remove internal planning-tooling references from comments | Bharat Baliyan | 2w ago | +7 -11 | 27%Below typical | fewer lines added than baseline |
| 50 | 5f07c871observability: use ServerSideDiff for the prometheus app | Bharat Baliyan | 3w ago | +7 -0 | 27%Below typical | fewer lines added than baseline |
Two views of the same model: where the cuts fall, and what commit shape lands you above them.
Every scored commit, binned on the raw 0 to 10 score rather than the percentile. Percentile ranks are uniform by construction, so that axis has no shape to draw. The dashed lines are the tercile cuts behind each row's priority pill.
The 67 most recent commits, on their own recency sample rather than the feed above: that defaults to risk-sorted, so reusing it would plot only the top tercile and call it the spread. Big and scattered is what the model penalises. Click a dot to open it.
bbaliyan/kube-platform has 68 commits in its history from 3 contributors, the first of them Jun 28, 2026. Every commit is scored for change risk from its size, spread and the history of the files it touches.
