Help us shape the future of Go! Take the 2026 Go Developer Survey

pando

module
v0.13.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Oct 21, 2026 License: AGPL-3.0

README

Pando

Pando

Deploy and share apps

trypando.ai · Quickstart · Docs

CI Docker Hub codecov OpenSSF Scorecard OpenSSF Best Practices Quality gate status

https://github.com/user-attachments/assets/9c2cc4df-e2c5-4ff7-bc26-a8f08a4b6061

What is Pando?

Pando is an open-source, self-hosted platform for running the apps your team builds, including ones written with AI. Point it at a git repo or image and it builds the app, scans it for vulnerabilities, runs it on its own isolated network, and puts it behind your company's SSO, shared only with the people who need it.

Built for IT and platform teams who want employees to deploy internal tools without those tools living on laptops or personal cloud accounts. Also works on a home server.

Status: alpha. Expect breaking changes; see the CHANGELOG before upgrading. Needs Docker and Docker Compose. Quickstart →

Get started

Install Pando with the quickstart.

Documentation

On trypando.ai/docs:

In this repository:

  • docs/identity-providers.md: connecting Okta, Microsoft Entra ID, Google Workspace, Keycloak, Authentik or another provider, and SCIM.
  • docs/rootless.md: running Pando on rootless Docker or Podman on Linux.
  • docs/reference.md: running on several hosts or on Kubernetes, host policy at startup, and what an app receives from Pando.
  • CHANGELOG.md: what changed in each release, and whether you need to act.

Reporting a problem

Contributing

Bug reports and pull requests are welcome. See CONTRIBUTING.md for how the project is organized, how to build it, and what a change needs before it can be merged. CODE_OF_CONDUCT.md applies everywhere the project happens.

License

AGPL-3.0, with a commercial license available for embedding Pando in a proprietary product or offering it as a hosted service without publishing modifications. See LICENSING.md for which applies to you, and LICENSE for the full text. Contributors sign the Contributor License Agreement once, by posting a comment on their first pull request.

Directories

Path Synopsis
cmd
gen-api-types command
Command gen-api-types emits TypeScript types for the console from the Go types the API actually returns.
 Command gen-api-types emits TypeScript types for the console from the Go types the API actually returns.
gen-reference command
gen-reference writes docs/api.md, docs/cli.md and docs/mcp.md from the binary that serves them.
 gen-reference writes docs/api.md, docs/cli.md and docs/mcp.md from the binary that serves them.
pando command
Command pando is both the CLI and the server entrypoint (design 00 §2).
 Command pando is both the CLI and the server entrypoint (design 00 §2).
internal
adapter/ai/aikit
Package aikit is what every AI adapter does the same way, whatever its provider: the prompts, the tools a model is given and their schemas, the budgeted reader a model reads the repository through, and what a tool call does.
 Package aikit is what every AI adapter does the same way, whatever its provider: the prompts, the tools a model is given and their schemas, the budgeted reader a model reads the repository through, and what a tool call does.
adapter/ai/aikit/aitest
Package aitest holds what the AI adapters' tests share: a repository in memory.
 Package aitest holds what the AI adapters' tests share: a repository in memory.
adapter/ai/anthropic
Package anthropic screens deployment plans with Claude (design 10 §6).
 Package anthropic screens deployment plans with Claude (design 10 §6).
adapter/ai/local
Package local performs Pando's AI functions with a model served on your own hardware, by any server that speaks the OpenAI Chat Completions API: Ollama, LM Studio, llama.cpp's server, vLLM.
 Package local performs Pando's AI functions with a model served on your own hardware, by any server that speaks the OpenAI Chat Completions API: Ollama, LM Studio, llama.cpp's server, vLLM.
adapter/ai/openai
Package openai performs Pando's AI functions with OpenAI's models, through the Responses API.
 Package openai performs Pando's AI functions with OpenAI's models, through the Responses API.
adapter/api
Package api defines the seven adapter interfaces.
 Package api defines the seven adapter interfaces.
adapter/auditsink/https
Package https is the audit sink adapter for a SIEM's HTTPS ingest endpoint (R-382, design 12 §5.1): one POST per batch, in the body shape the destination reads — newline-delimited JSON, a JSON array, Splunk HEC's envelope, Elastic's bulk action lines, or Datadog log items.
 Package https is the audit sink adapter for a SIEM's HTTPS ingest endpoint (R-382, design 12 §5.1): one POST per batch, in the body shape the destination reads — newline-delimited JSON, a JSON array, Splunk HEC's envelope, Elastic's bulk action lines, or Datadog log items.
adapter/auditsink/sinkkit
Package sinkkit holds what the audit sink kinds share: the settings that narrow and shape what core sends (R-384), reading inline credentials out of plain configuration (R-190), and a trusted certificate bundle.
 Package sinkkit holds what the audit sink kinds share: the settings that narrow and shape what core sends (R-384), reading inline credentials out of plain configuration (R-190), and a trusted certificate bundle.
adapter/auditsink/syslog
Package syslog is the audit sink adapter for a syslog collector (R-382, design 12 §5.1): RFC 5424 messages over TCP, octet-counted as RFC 5425 and RFC 6587 frame them, with TLS unless the operator turns it off.
 Package syslog is the audit sink adapter for a syslog collector (R-382, design 12 §5.1): RFC 5424 messages over TCP, octet-counted as RFC 5425 and RFC 6587 frame them, with TLS unless the operator turns it off.
adapter/backup/local
Package local stores backup bundles on a filesystem path.
 Package local stores backup bundles on a filesystem path.
adapter/builder/buildkit
Package buildkit implements the builder adapter: rootless, containerized, no socket.
 Package buildkit implements the builder adapter: rootless, containerized, no socket.
adapter/checkkit
Package checkkit lets a kind of adapter check a configuration as it is saved, by running its own Configure on it, without anything stored.
 Package checkkit lets a kind of adapter check a configuration as it is saved, by running its own Configure on it, without anything stored.
adapter/identity/local
Package local implements the local identity adapter: username and password, argon2id.
 Package local implements the local identity adapter: username and password, argon2id.
adapter/identity/oidc
Package oidc is the generic OpenID Connect identity adapter (R-043).
 Package oidc is the generic OpenID Connect identity adapter (R-043).
adapter/identity/saml
Package saml is the SAML 2.0 identity adapter (R-043).
 Package saml is the SAML 2.0 identity adapter (R-043).
adapter/imageregistry/ecr
Package ecr is the image registry adapter for Amazon ECR.
 Package ecr is the image registry adapter for Amazon ECR.
adapter/imageregistry/oci
Package oci is the image registry adapter for any registry that signs in with a username and password, or not at all: the Distribution registry docker-compose.registry.yml runs, Harbor, GitHub Container Registry, Google Artifact Registry, Zot.
 Package oci is the image registry adapter for any registry that signs in with a username and password, or not at all: the Distribution registry docker-compose.registry.yml runs, Harbor, GitHub Container Registry, Google Artifact Registry, Zot.
adapter/imageregistry/registrykit
Package registrykit is what the image registry adapters share: reading a registry address, laying built images out in it, and deleting a deleted app's (R-224).
 Package registrykit is what the image registry adapters share: reading a registry address, laying built images out in it, and deleting a deleted app's (R-224).
adapter/notify/chat
Package chat is the notify adapters for chat platforms that take an incoming webhook: Slack, Microsoft Teams and Discord (R-374, issue #50).
 Package chat is the notify adapters for chat platforms that take an incoming webhook: Slack, Microsoft Teams and Discord (R-374, issue #50).
adapter/notify/console
Package console is the v1 notification adapter (R-230, R-231).
 Package console is the v1 notification adapter (R-230, R-231).
adapter/notify/notifykit
Package notifykit is what notify adapters share.
 Package notifykit is what notify adapters share.
adapter/notify/ntfy
Package ntfy is the notify adapter for ntfy, the push notification service (R-374, issue #50): ntfy.sh or a server of your own.
 Package ntfy is the notify adapter for ntfy, the push notification service (R-374, issue #50): ntfy.sh or a server of your own.
adapter/notify/slack
Package slack is the notify adapter for Slack (R-374): a channel adapter (R-373) that posts the events a subscription chooses to the Slack channel that subscription names.
 Package slack is the notify adapter for Slack (R-374): a channel adapter (R-373) that posts the events a subscription chooses to the Slack channel that subscription names.
adapter/notify/smtp
Package smtp is the email notify adapter (R-232, R-374, issue #50).
 Package smtp is the email notify adapter (R-232, R-374, issue #50).
adapter/routing/cloudflare
Package cloudflare routes apps through a Cloudflare Tunnel (R-160, design 03 §4.5).
 Package cloudflare routes apps through a Cloudflare Tunnel (R-160, design 03 §4.5).
adapter/routing/loopback
Package loopback implements port-mode routing with no TLS: the laptop default.
 Package loopback implements port-mode routing with no TLS: the laptop default.
adapter/routing/traefik
Package traefik implements subdomain and path routing with TLS.
 Package traefik implements subdomain and path routing with TLS.
adapter/runtime/docker
Package docker implements the runtime adapter for local containers.
 Package docker implements the runtime adapter for local containers.
adapter/runtime/incus
Package incus runs each app in its own Incus virtual machine (notes-incus-runtime.md).
 Package incus runs each app in its own Incus virtual machine (notes-incus-runtime.md).
adapter/runtime/incus/incusapi
Package incusapi is the part of the Incus REST API the Incus runtime uses: the types, with Incus's own JSON names, and a client for them.
 Package incusapi is the part of the Incus REST API the Incus runtime uses: the types, with Incus's own JSON names, and a client for them.
adapter/runtime/kubernetes
Package kubernetes runs apps on a Kubernetes cluster (issue #72, PR 6, O-33).
 Package kubernetes runs apps on a Kubernetes cluster (issue #72, PR 6, O-33).
adapter/runtime/multidocker
Package multidocker runs apps on several Docker hosts (notes-multi-host-docker-issue-72.md, issue #72 PR 7).
 Package multidocker runs apps on several Docker hosts (notes-multi-host-docker-issue-72.md, issue #72 PR 7).
adapter/scanner/trivy
Package trivy scans what an app deploys, with Trivy in a container.
 Package trivy scans what an app deploys, with Trivy in a container.
adapter/secrets/local
Package local implements the secrets adapter, encrypted at rest with the key on disk (R-190).
 Package local implements the secrets adapter, encrypted at rest with the key on disk (R-190).
adapter/services/docker
Package docker provisions services that fill declared slots: postgres, mysql, redis.
 Package docker provisions services that fill declared slots: postgres, mysql, redis.
adapter/source/azuredevops
Package azuredevops is the source adapter for Azure DevOps Services and Azure DevOps Server (R-091).
 Package azuredevops is the source adapter for Azure DevOps Services and Azure DevOps Server (R-091).
adapter/source/bitbucket
Package bitbucket is the source adapter for Bitbucket Cloud and Bitbucket Data Center (R-091).
 Package bitbucket is the source adapter for Bitbucket Cloud and Bitbucket Data Center (R-091).
adapter/source/forgekit
Package forgekit is what source adapters share: reading a repository address in each of the forms people write one, deciding whether a connection covers it, and building the credential core clones with.
 Package forgekit is what source adapters share: reading a repository address in each of the forms people write one, deciding whether a connection covers it, and building the credential core clones with.
adapter/source/generic
Package generic is the source adapter for any git host (R-091): an HTTPS username and token, or an SSH key with the host's key pinned.
 Package generic is the source adapter for any git host (R-091): an HTTPS username and token, or an SSH key with the host's key pinned.
adapter/source/gitea
Package gitea is the source adapter for Gitea and Forgejo, Codeberg among them (R-091).
 Package gitea is the source adapter for Gitea and Forgejo, Codeberg among them (R-091).
adapter/source/github
Package github is the source adapter for GitHub (R-091): github.com and GitHub Enterprise Server, reached with a GitHub App installation, an OAuth application, a personal access token or a deploy key.
 Package github is the source adapter for GitHub (R-091): github.com and GitHub Enterprise Server, reached with a GitHub App installation, an OAuth application, a personal access token or a deploy key.
adapter/source/gitlab
Package gitlab is the source adapter for GitLab, on gitlab.com or self-managed (R-091).
 Package gitlab is the source adapter for GitLab, on gitlab.com or self-managed (R-091).
cli
Package cli is the command-line client (design 04 §4).
 Package cli is the command-line client (design 04 §4).
clientaddr
Package clientaddr decides which address a request came from, for the audit log (R-379, R-380), and carries it on the request's context to the audit writer.
 Package clientaddr decides which address a request came from, for the audit log (R-379, R-380), and carries it on the request's context to the audit writer.
config
Package config loads configuration from YAML, environment, and flags (R-271).
 Package config loads configuration from YAML, environment, and flags (R-271).
console
Package console embeds the built console assets into the binary (R-253).
 Package console embeds the built console assets into the binary (R-253).
core/address
Package address changes where a configured app is reached (R-162, R-163, R-165).
 Package address changes where a configured app is reached (R-162, R-163, R-165).
core/appdelete
Package appdelete deletes an app: settles its storage (R-204), archives it and starts its teardown.
 Package appdelete deletes an app: settles its storage (R-204), archives it and starts its teardown.
core/applimit
Package applimit decides how many apps a person may own (R-244, issue #131).
 Package applimit decides how many apps a person may own (R-244, issue #131).
core/approval
Package approval is deploy approval (R-154 – R-159): whether a deploy needs somebody's sign-off, and the request, approval, rejection and expiry of one.
 Package approval is deploy approval (R-154 – R-159): whether a deploy needs somebody's sign-off, and the request, approval, rejection and expiry of one.
core/assertion
Package assertion mints the identity assertions the proxy passes to apps, and publishes the keys that verify them.
 Package assertion mints the identity assertions the proxy passes to apps, and publishes the keys that verify them.
core/assist
Package assist is which AI adapter performs each AI function (R-259), and the administrative functions built on that: drafting access and policy, searching the audit log, and answering from the reference (R-343 … R-346).
 Package assist is which AI adapter performs each AI function (R-259), and the administrative functions built on that: drafting access and policy, searching the audit log, and answering from the reference (R-343 … R-346).
core/audit
Package audit writes the append-only event log.
 Package audit writes the append-only event log.
core/audit/ocsf
Package ocsf encodes native audit lines as OCSF events (design 12 §6.2, R-384).
 Package ocsf encodes native audit lines as OCSF events (design 12 §6.2, R-384).
core/auditstream
Package auditstream pushes the audit log to audit sinks as it is written (R-382, R-383, design 12 §5).
 Package auditstream pushes the audit log to audit sinks as it is written (R-382, R-383, design 12 §5).
core/authz
Package authz evaluates the two authorization planes.
 Package authz evaluates the two authorization planes.
core/autodeploy
Package autodeploy is the service behind an app's automatic deploy settings and its webhook (R-141, R-142).
 Package autodeploy is the service behind an app's automatic deploy settings and its webhook (R-141, R-142).
core/backup
core/bootstrap
Package bootstrap creates the first administrative account on a fresh install.
 Package bootstrap creates the first administrative account on a fresh install.
core/capacity
Package capacity is what GET /capacity shows: each runtime's room, beside what Pando has committed to apps on it (R-242, R-243, R-245).
 Package capacity is what GET /capacity shows: each runtime's room, beside what Pando has committed to apps on it (R-242, R-243, R-245).
core/clisignin
Package clisignin signs the CLI in through the browser (R-406, design 06 §3.5).
 Package clisignin signs the CLI in through the browser (R-406, design 06 §3.5).
core/clock
Package clock provides the time source core depends on.
 Package clock provides the time source core depends on.
core/cluster
Package cluster is what lets several Pando processes serve one install against one database (issue #72).
 Package cluster is what lets several Pando processes serve one install against one database (issue #72).
core/deploy
Package deploy runs the deployment pipeline: everything after the plan boundary (design 05 §3, steps 8-16).
 Package deploy runs the deployment pipeline: everything after the plan boundary (design 05 §3, steps 8-16).
core/detection
Package detection runs the detection job for an app and records the result.
 Package detection runs the detection job for an app and records the result.
core/disklimit
Package disklimit holds apps to their disk limits (R-403, issue #130).
 Package disklimit holds apps to their disk limits (R-403, issue #130).
core/edge
Package edge runs what routing adapters need in front of Pando (R-174).
 Package edge runs what routing adapters need in front of Pando (R-174).
core/edgecert
Package edgecert issues the edge's certificates when the edge cannot issue its own (R-169, R-174; notes-kubernetes-runtime-issue-72.md, "Certificates with several replicas").
 Package edgecert issues the edge's certificates when the edge cannot issue its own (R-169, R-174; notes-kubernetes-runtime-issue-72.md, "Certificates with several replicas").
core/events
Package events is the catalog of things Pando tells subscribers about (R-364, issue #50, design 11).
 Package events is the catalog of things Pando tells subscribers about (R-364, issue #50, design 11).
core/idle
Package idle stops, and later deletes, apps nobody uses (R-393 – R-398, issue #131).
 Package idle stops, and later deletes, apps nobody uses (R-393 – R-398, issue #131).
core/idp
Package idp is external identity: the providers an administrator connects, redirect sign-in through them, linking their identities to accounts, the groups they sync, and SCIM provisioning (R-043, R-045, R-047, R-048, R-050).
 Package idp is external identity: the providers an administrator connects, redirect sign-in through them, linking their identities to accounts, the groups they sync, and SCIM provisioning (R-043, R-045, R-047, R-048, R-050).
core/imageregistry
Package imageregistry is the install's image registry: where a build is pushed when the runtime pulls rather than imports (issue #72, PR 5, docs/design/notes-image-registry-issue-72.md).
 Package imageregistry is the install's image registry: where a build is pushed when the runtime pulls rather than imports (issue #72, PR 5, docs/design/notes-image-registry-issue-72.md).
core/logstream
Package logstream shares one live log stream per app part between everyone watching it on a replica (O-51).
 Package logstream shares one live log stream per app part between everyone watching it on a replica (O-51).
core/notifyconn
Package notifyconn is the install's notification adapters as core uses them (R-373, R-374): built from their rows each time one is used, connected to their provider when they need it, and asked which channels a subscription can post to.
 Package notifyconn is the install's notification adapters as core uses them (R-373, R-374): built from their rows each time one is used, connected to their provider when they need it, and asked which channels a subscription can post to.
core/observe
Package observe shares what a runtime reports about an app between the requests that ask for it at the same moment (issue #72).
 Package observe shares what a runtime reports about an app between the requests that ask for it at the same moment (issue #72).
core/oci
Package oci reads what a registry says about an image, before anything is pulled.
 Package oci reads what a registry says about an image, before anything is pulled.
core/orphan
Package orphan stops apps none of whose owners is active, and tells administrators (R-407 – R-409).
 Package orphan stops apps none of whose owners is active, and tells administrators (R-407 – R-409).
core/planner
Package planner turns a spec plus host policy plus adapter capabilities into a bundle plan, or into a plan-time error.
 Package planner turns a spec plus host policy plus adapter capabilities into a bundle plan, or into a plan-time error.
core/policy
Package policy evaluates host policy.
 Package policy evaluates host policy.
core/reconciler
Package reconciler runs the loop that converges observed state toward pinned specs.
 Package reconciler runs the loop that converges observed state toward pinned specs.
core/retention
Package retention removes what Pando keeps only for a while: old deploys, scans, sessions, notifications, idempotency keys, sign-in flows, the event outbox, and what deleted apps left behind (issue #72, R-224).
 Package retention removes what Pando keeps only for a while: old deploys, scans, sessions, notifications, idempotency keys, sign-in flows, the event outbox, and what deleted apps left behind (issue #72, R-224).
core/screening
Package screening turns an AI adapter's proposed amendments into changes to a draft spec, or refuses them.
 Package screening turns an AI adapter's proposed amendments into changes to a draft spec, or refuses them.
core/security
Package security turns a scanner's findings into a number, and that number into a decision.
 Package security turns a scanner's findings into a number, and that number into a decision.
core/source
Package source fetches an app's source and exposes it read-only.
 Package source fetches an app's source and exposes it read-only.
core/sourceconn
Package sourceconn is the install's source connections (R-091; O-3 as re-resolved with issue #127): which connection reads a repository, what it reads it with, and the OAuth authorizations that give a connection its token.
 Package sourceconn is the install's source connections (R-091; O-3 as re-resolved with issue #127): which connection reads a repository, what it reads it with, and the OAuth authorizations that give a connection its token.
core/spec
Package spec defines the AppSpec: the sole record of how an app runs.
 Package spec defines the AppSpec: the sole record of how an app runs.
core/specgate
Package specgate decides whether somebody may write a spec revision, for the parts of a spec that app.spec.edit alone does not cover: an app's egress rules (R-182 – R-184) and automatic deploys on an app whose deploys need approval (R-158).
 Package specgate decides whether somebody may write a spec revision, for the parts of a spec that app.spec.edit alone does not cover: an app's egress rules (R-182 – R-184) and automatic deploys on an app whose deploys need approval (R-158).
core/state
Package state holds sqlc-generated queries and repository types.
 Package state holds sqlc-generated queries and repository types.
core/state/statetest
Package statetest gives integration tests a database of their own, quickly.
 Package statetest gives integration tests a database of their own, quickly.
core/subscription
Package subscription delivers Pando's events to the people who asked for them: webhooks and notification channels, retried until they arrive or plainly fail (issue #50, R-366 – R-374, design 11).
 Package subscription delivers Pando's events to the people who asked for them: webhooks and notification channels, retried until they arrive or plainly fail (issue #50, R-366 – R-374, design 11).
core/tokenkey
Package tokenkey holds the key API token digests are made with (R-063).
 Package tokenkey holds the key API token digests are made with (R-063).
core/twofactor
Package twofactor is the second factor of a local account (R-405): an authenticator app's time-based codes (TOTP, RFC 6238) and recovery codes.
 Package twofactor is the second factor of a local account (R-405): an authenticator app's time-based codes (TOTP, RFC 6238) and recovery codes.
core/update
Package update knows whether a newer Pando has been released (R-349–R-352).
 Package update knows whether a newer Pando has been released (R-349–R-352).
core/upgrade
Package upgrade replaces the running Pando with a newer release (R-355 – R-361): checked, backed up, swapped by a helper, and put back on its own when the new version does not come up.
 Package upgrade replaces the running Pando with a newer release (R-355 – R-361): checked, backed up, swapped by a helper, and put back on its own when the new version does not come up.
core/work
Package work runs work held in Postgres on a bounded number of goroutines (issue #72, O-32).
 Package work runs work held in Postgres on a bounded number of goroutines (issue #72, O-32).
detect
Package detect works out how to build and run an app from its source.
 Package detect works out how to build and run an app from its source.
detect/registryprobe
Package registryprobe looks for images a project already publishes.
 Package registryprobe looks for images a project already publishes.
ecr
Package ecr mints an Amazon ECR registry password from an AWS access key.
 Package ecr mints an Amazon ECR registry password from an AWS access key.
egress
Package egress is what an egress rule means: how an entry is written, what it matches, and whether a set of rules lets a connection out (R-181 – R-187).
 Package egress is what an egress rule means: how an entry is written, what it matches, and whether a set of rules lets a connection out (R-181 – R-187).
errs
Package errs defines the error envelope crossing every API boundary.
 Package errs defines the error envelope crossing every API boundary.
hash
Package hash derives and verifies password and token hashes with argon2id.
 Package hash derives and verifies password and token hashes with argon2id.
hostagent
Package hostagent is the forwarding agent that stands on each app host of a multi-host Docker install where Pando's own container stands on one host (O-45, design 06 §4, notes-multi-host-docker-issue-72.md).
 Package hostagent is the forwarding agent that stands on each app host of a multi-host Docker install where Pando's own container stands on one host (O-45, design 06 §4, notes-multi-host-docker-issue-72.md).
httpapi
Package httpapi is the REST surface: chi handlers and nothing else.
 Package httpapi is the REST surface: chi handlers and nothing else.
id
Package id generates prefixed, sortable, opaque identifiers: app_01HQ8..., spec_..., usr_...
 Package id generates prefixed, sortable, opaque identifiers: app_01HQ8..., spec_..., usr_...
keyfile
Package keyfile writes a newly generated key to disk so it survives a crash.
 Package keyfile writes a newly generated key to disk so it survives a crash.
log
Package log threads a single structured logger through context.
 Package log threads a single structured logger through context.
mcp
Package mcp exposes Pando's service layer as MCP tools.
 Package mcp exposes Pando's service layer as MCP tools.
openapi
Package openapi writes Pando's HTTP API as an OpenAPI 3.1 document, read from the handlers that serve it.
 Package openapi writes Pando's HTTP API as an OpenAPI 3.1 document, read from the handlers that serve it.
proxy
Package proxy is the identity-aware reverse proxy: the single enforcement point for every request to every app (R-023).
 Package proxy is the identity-aware reverse proxy: the single enforcement point for every request to every app (R-023).
qrcode
Package qrcode draws QR codes: an SVG for the console and API, and text for a terminal.
 Package qrcode draws QR codes: an SVG for the console and API, and text for a terminal.
reference
Package reference assembles Pando's own documentation from Pando.
 Package reference assembles Pando's own documentation from Pando.
registrylimit
Package registrylimit says what to do when a registry refuses an image because this server has downloaded too many.
 Package registrylimit says what to do when a registry refuses an image because this server has downloaded too many.
secret
Package secret provides Value, a wrapper that refuses to render.
 Package secret provides Value, a wrapper that refuses to render.
telemetry
Package telemetry is the metrics Pando exports about itself (R-399, issue #126): pushed over OTLP to a collector the operator names, stored, graphed and alerted on there and nowhere in Pando (R-016, R-245).
 Package telemetry is the metrics Pando exports about itself (R-399, issue #126): pushed over OTLP to a collector the operator names, stored, graphed and alerted on there and nowhere in Pando (R-016, R-245).
telemetry/telemetrytest
Package telemetrytest reads back what Pando recorded, for tests asserting that a piece of work is measured (R-399).
 Package telemetrytest reads back what Pando recorded, for tests asserting that a piece of work is measured (R-399).
Package migrations embeds the SQL migrations into the binary.
 Package migrations embeds the SQL migrations into the binary.
test
load command
Command load seeds a Pando install to one of the issue #72 scale tiers, drives console, API and proxy traffic through its load balancer in steps, and reports where it stopped keeping up.
 Command load seeds a Pando install to one of the issue #72 scale tiers, drives console, API and proxy traffic through its load balancer in steps, and reports where it stopped keeping up.

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.