chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-23 12:03:59 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
709 Commits 2 Branches 1 Tag 176 MiB
dc099b99f9
Commit Graph

28 Commits

Author SHA1 Message Date
chrisfu
0e937eb9db docs(readme): document prole.org fork — identity stack, live services, SSO 
Add dedicated sections covering:
- prole.org cluster topology (myrddin/gandalf/merlin, namespaces, kubectl context)
- Live services table (db.prole.org, git.prole.org, pg.prole.org)
- Full identity/SSO stack: PROLE.ORG Kerberos → knoe-auth OIDC → Supabase Studio
- knoe-auth operational notes: Subject.callAs vs doAs, JDK 21 RC4 removal,
  AES-only keytab requirement, samba-tool exportkeytab --principal empty-keytab gotcha
- git.prole.org SPNEGO: proxy challenge logic, keytab rotation, arm64 build procedure
- Supabase Studio SSO: oauth2-proxy flow, basic-auth removal from Kong dashboard route
- Chrome SPNEGO policy deployment via make workstation
- Fork-specific files table

Update status section to 2026-05-28 with Identity/SSO commits clearly grouped.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-05-28 06:14:53 -07:00
chrisfu
03d1c3d9e8 docs: update README and branch/plan indexes for pg-knoe-auth import (Task 1 complete) 2026-05-23 21:54:35 -07:00
chrisfu
5babe04516 docs: update status — cfg files clean, no pending working-tree changes 2026-05-23 21:38:25 -07:00
chrisfu
decb9a5ad0 feat(scripts): upstream knoe-db sync tooling and docs 
Add scripts/sync_upstream_knoe_db.sh — idempotent script that registers
the upstream-knoe-db remote (git@git.knoe.dev:knoe-dev/knoe-db.git),
fetches upstream main, and creates a dated review branch
upstream/knoe-db/YYYYMMDD. Supports --dry-run; returns to previous
branch automatically.

Add docs/upstream-knoe-db-sync.md — step-by-step procedure covering
quick start, clean-tree requirement, diff/review, merge-to-main, PR
workflow, branch cleanup, and how to change the upstream branch name.

Update README.md: add 'Upstream fork — knoe-db' section with quick-start
commands and link to the sync procedure doc.

Co-authored-by: Junie <junie@jetbrains.com>
 2026-05-23 21:31:48 -07:00
chrisfu
7487ed68a3 docs: update README; IntelliJ run config picks up Python 3.14 SDK 
pytest_all.xml updated by IntelliJ to bind SDK name
'Python 3.14 (knoe-db)' and add PYTHONUNBUFFERED=1.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-04-27 14:47:27 -07:00
chrisfu
b421f49af1 Migrate Ansible-based scripts and documentation to 1Password integration. Removed deprecated and redundant Ansible vault workflows, added 1Password CLI handling for secrets management, and updated tests to reflect the change. 2026-04-22 20:54:13 -07:00
chrisfu
55b6a6aff3 Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 
Co-authored-by: Junie <junie@jetbrains.com>
 2026-04-22 15:08:35 -07:00
chrisfu
bb92ec3576 feat: service layer — GitLab, Redis, DB ArgoCD app, Kong, monitoring updates 
- Add init_redis.sh for Redis deployment
- Extend init_gitlab.sh with Kerberos/OIDC prep and service wiring
- Add init_monitoring.sh improvements
- Update init_kong.sh and init_service_layer.sh
- Rename ArgoCD application-openbao → application-db; add DB kustomization
- Update kong-configmap, kustomization, port-mapping, service configs
- Bump knoe-db version; refresh network scan

Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>
 2026-04-01 20:38:57 -07:00
chrisfu
2c6df07933 Harden monitoring init; improve k3s reset cleanup 
- Add diagnostics/reset/retry logic for stuck monitoring Helm installs\n- Add optional cluster-side node/lease deletion during k3s reset via delegated control-plane\n- Bump prole-db image tag/version to 18-123\n- Update monitoring init unit test for reset/diagnostics path
 2026-03-15 16:02:15 -07:00
chrisfu
cf6d79f505 ansible: fix netplan_static YAML, dashboard conky pkg, mariadb vault vars 
- netplan_static: avoid Jinja whitespace/indent YAML breakage with trim_blocks; set /etc/netplan perms to 0600; add render+YAML-parse test

- dashboard: install concrete conky provider (conky-all) and add defaults test; wire role into site.yml; document dashboard service usage

- mariadb: add mariadb parent group for group_vars scope; add group defaults deriving datastore password from vault; add vault entry; add vars resolution test; remove host overrides

- misc: update port-forward mappings, generated prole.cfg, and bump prole-db version

Co-authored-by: Junie <junie@jetbrains.com>
 2026-03-05 23:02:42 -08:00
chrisfu
6e2d3e9011 refactor: modernize installer and monitoring setup 
- Monitoring: Migrated from manual Grafana/Prometheus manifests to kube-prometheus-stack based setup in etc/init_monitoring.sh. Removed old manifest files from deploy/ and k8s/.
- Installer Core: Refactored installer with new modules for actions, environment handling, and UI screens. Enhanced Milestone logic to support advanced configuration (ArgoCD, Registry namespaces, Kerberos flags, etc.).
- Service & Init Scripts: Updated multiple initialization scripts (init_*.sh) for better integration with OpenBao, Kerberos, and the new monitoring stack. Added new scripts for Nginx Ingress, Ollama parsing, and K3D route fixes.
- Infrastructure: Enhanced Samba AD DC Ansible role with realm derivation, provisioning guidance, and group management. Updated K3s role tasks.
- Configuration: Refined default settings in conf/ to align with the new deployment architecture.
- App & Tools: Updated prole-app Swift code and prole.sh for improved environment variable handling and installation flow.
 2026-02-19 21:07:39 -08:00
chrisfu
a4d0a2e0a3 Update prole-db docker tag to 17.7-037 and update pg_prolelog deb package 2026-01-15 11:58:39 -08:00
chrisfu
73bc5bfede feat: implement encrypted development database with OpenBao and CNPG - Update install.py with password matching visual feedback and OpenBao integration - Enhance etc/init_openbao.sh to store database password in OpenBao KV - Update etc/init_cloudnative_pg.sh to synchronize database password from OpenBao to K8s secrets - Configure CNPG cluster in k8s/prole/prole-db.yaml with pg_hba for password authentication - Update various scripts and app sources for better service integration 2025-12-30 22:18:55 -08:00
chrisfu
ce69e1652a quieter header 2025-11-29 08:30:18 -08:00
chrisfu
5992f076c3 Prole image to README 2025-11-29 08:09:14 -08:00
chrisfu
ea49e60d92 proleStatus bar: proper size, transparent, click through and scrolling 2025-11-17 21:18:36 -08:00
chrisfu
ca101509e3 merge README 2025-11-17 00:28:18 -08:00
chrisfu
2ccb0e3bbb fix image registry import step 2025-11-16 22:29:15 -08:00
chrisfu
10e1113eea WIP: k3s remote setup and graphical installer 2025-11-16 21:48:31 -08:00
chrisfu
50b2fbc598 imageName: prole-db:17.5-027 2025-11-12 20:52:05 -08:00
chrisfu
e6c0cfd1f8 Merge branch 'main' of github.com:dredx/prole 2025-11-06 10:47:51 -08:00
chrisfu
34b51d0d9b header 2025-11-06 10:47:00 -08:00
chrisfu
6c6451b890 add k3d node token script 2025-09-29 15:44:36 -07:00
chrisfu
693a9434ed use k3s-arg datastore-endpoint external mysql 2025-08-29 13:03:02 -07:00
chrisfu
aa389586fd merging in progress notes 2025-08-13 16:20:41 -07:00
chrisfu
72bba2ffa4 in progress cnpg deploy 2025-08-13 15:57:19 -07:00
chrisfu
25224ea93b prole-db cloudnative-pg update 2025-07-29 14:04:10 -07:00
chrisfu
6d7f0f651d
Initial commit 2025-07-12 18:02:40 -07:00