Commit Graph

Select branches

Hide Pull Requests

feat/sg2428lp-harden

main

#1

#2

pre-credscrub-20260427

Mono Color

• 5e0a1bda85 feat: Add GitOps (Gitea) and Supabase integration, plus database options chrisfu 2026-02-26 18:32:15 -0800
• dafed53810 Enhance build system with 'make test' and fix installer test debris. Added 'make test' to Makefile with 'pyconv' (black) integration and coverage summary. Reformatted codebase with black. Fixed 'install.py' test bug where MagicMock objects created directory debris by improving mocking and patching in 'tests/test_navigation.py', 'tests/test_service_layer_navigation.py', and 'tests/test_install_logic.py'. chrisfu 2026-02-25 14:55:05 -0800
• f589cbd397 Remove PostgREST deployment, service, and related configs from prole-db namespace chrisfu 2026-02-25 00:38:07 -0800
• 1573bb59c2 Add prole.spec and extend OpenTofu k3s configuration chrisfu 2026-02-24 21:47:02 -0800
• 51c91595b9 Refactor infrastructure, installer, and deployment configs: expanded CloudNativePG and PostgREST init scripts, updated ArgoCD/OpenTofu/K8s manifests (ingress, kustomization, postgrest, prole-db), added installer config helpers and revised cluster UI, updated prole.cfg and prole.sh, simplified Makefile, added env helper tests, removed stale spec/log files, added prole/ directory chrisfu 2026-02-23 21:19:19 -0800
• d68925bbc5 Add TLS certificates to CNPG cluster and restore missing Optional Features config - Add certificates section (prole-db-tls, prole-db-ca) to prole-db.yaml and prole-db-recovery.yaml.tpl - Expand generate_tls_if_missing() to create both CA and server TLS secrets with proper SANs - Add detect_and_reprovision_unencrypted_cluster() for existing clusters needing encryption conversion - Propagate AT_REST_ENCRYPTION_ENABLED to shell scripts via _script_env_for_namespace() - Restore AT_REST_ENCRYPTION_ENABLED, SUPABASE_ENABLED, KERBEROS_ENABLED in prole.cfg - Update installer milestones, docker screens, port-mapping, init_kerberos, init_postgrest, prole.sh chrisfu 2026-02-22 18:58:01 -0800
• a98c6d9d1c Fix Kong OOM crash: increase memory limit to 1Gi, mount ConfigMap to subdirectory chrisfu 2026-02-22 01:02:00 -0800
• b03efa8f69 Kong API gateway, docker-import preload, OpenTofu graceful fallback, milestone fix chrisfu 2026-02-22 00:57:49 -0800
• 4bbd3b2dd3 fix: UI runtime fixes, idempotent k3d KUBECONFIG, Ollama screen redesign, mode-conditional init scripts, Grafana restart, real-time docker build output, shell script fixes, test updates chrisfu 2026-02-20 23:19:48 -0800
• 312fb27df5 test: add unit tests for core helpers, milestone base, controller, and build - 141 tests for env.py/config.py pure functions (bool, cluster env, ollama, port-forwards, yaml, render_prole_cfg, etc.) - 48 tests for state, milestone base class, controller, build, and milestone subclasses - Combined coverage improved from 15% to 20% (2414/12349 stmts) chrisfu 2026-02-20 19:30:13 -0800
• 322ed0cbfb fix: clean install bugs + coverage support for prole.sh start command - DatabaseCreationMilestone: detect unresolvable OpenBao secret refs, generate fresh password - NetworkScreenMixin: guard _scan_frames with getattr, add lazy accessor - port-mapping.cfg: resolve NAMESPACE refs in UI and silent paths, skip MagicMock entries - init_k8s.sh: add --api-port and --agents flags to k3d cluster create - prole.sh: extend coverage flag support to start command chrisfu 2026-02-20 19:18:32 -0800
• ec50f82cc8 refactor: deduplicate installer business logic & split screens.py into package chrisfu 2026-02-20 14:43:20 -0800
• 9094d10117 Installer refactor: k3d cluster lifecycle, kubeconfig handling, UI polish & cleanup - Fix KUBECONFIG not generated for dev/k3d clusters by merging k3d kubeconfig in _script_env_for_namespace() and after cluster creation - Fix Add/Delete button macOS black focus ring with highlightbackground/highlightthickness styling - Refactor milestones, actions, controller, deploy pipeline, and env helpers - Simplify prole.cfg and port-mapping.cfg defaults - Improve archive_garage_backup.py and init_cloudnative_pg.sh - Remove unused img/LOADING_GIF_README.md and img/generate_loading_gif.py - Add qodana.yaml for static analysis configuration chrisfu 2026-02-20 01:28:52 -0800
• 6e2d3e9011 refactor: modernize installer and monitoring setup chrisfu 2026-02-19 21:07:39 -0800
• 57a7f12e7d k3s: Fix CloudNative-PG installation and improve Retropie networking chrisfu 2026-02-17 17:32:47 -0800
• ec2795f8a3 Checkpoint: Kerberos egress fixes, local registry provisioning for k3d/k3s, and installer GUI workflow enhancements. Key changes: AD forwarder port offsets, outbound NetworkPolicy, KDC dns_lookup disabling; k3d/k3s registry support with Docker network connect fix; GUI 'Deploy Services' button and manual pause; new test_service_layer_navigation.py. chrisfu 2026-02-17 14:26:12 -0800
• f706c6ad9e k3s: Fix networking-related hangs on Retropie by using async network restart chrisfu 2026-02-17 00:18:55 -0800
• fcf0c0ef0d k3s: Fix image pull failures on Retropie by blacklisting CNI interfaces in connman chrisfu 2026-02-16 23:58:21 -0800
• ec8a4e98af k3s: Fix installation hangs, CA mismatches, and arm64 networking chrisfu 2026-02-16 23:30:27 -0800
• 9aa959f61d Milestone: Balanced iSCSI IO, updated prole.sh launcher with log/verbose/debug/coverage/silent options, and enhanced installer logging chrisfu 2026-02-16 16:44:18 -0800
• 3d29ab70f2 feat(k3s): enhance k3s install and factory reset reliability. Implement dynamic token discovery, serialized cluster setup with 'serial: 1', readiness checks, and image pre-staging for more robust cluster bootstrapping. chrisfu 2026-02-16 15:04:04 -0800
• 23cf4ac33d Configure K3s for retropie and add Traefik Ingress. Updated K3s templates for node-ip/flannel-iface, configured retropie host vars, enabled Traefik, added Ingress resources for Grafana, Prole, Kong, and Supabase, and set Postgres to LoadBalancer. chrisfu 2026-02-16 04:28:40 -0800
• cad49cc0a6 Summary of recent repairs and infrastructure updates chrisfu 2026-02-15 17:51:57 -0800
• 6b89ea23d7 Stabilize deliverable k3d pipeline and refactor installer components chrisfu 2026-02-15 00:03:24 -0800
• d2efb835b0 Refactor project structure and update initialization scripts chrisfu 2026-02-14 13:44:49 -0800
• f2c9012cce Refactor installation and initialization logic, and expand test coverage chrisfu 2026-02-13 21:36:39 -0800
• e228dd9243 checkpoint: installer refinements, k3s drift protection, and infra updates chrisfu 2026-02-12 02:30:44 -0800
• 96f594fd3c Refactor initialization scripts and add new service components chrisfu 2026-02-11 13:09:31 -0800
• 87e2f5d385 Checkpoint: Refactor common services and monitoring initialization. Updates: etc/init_monitoring.sh (Grafana naming, legacy cleanup), etc/init_common_services.sh (migration/cleanup logic), added etc/init_registry.sh, updated etc/init_cloudnative_pg.sh (manifest filtering), updated configs, and enhanced tests. Fixed: excluded .ansible logs and added to .gitignore. chrisfu 2026-02-09 18:50:44 -0800
• d88f5b6424 Add scripts for managing common services and enhance service namespace handling chrisfu 2026-02-07 23:20:08 -0800
• f47c18fef7 feat(infrastructure): enhance k3s automation and OpenTofu integration chrisfu 2026-02-07 22:53:18 -0800
• 42ec9bb7ab Refactor shell scripts for manifest rendering via prole_render_manifest function, introduce dynamic port forwarding configuration, and improve handling for k3d compatibility. chrisfu 2026-02-06 21:22:26 -0800
• 63e6f18b5b Enhance cgroup management: normalize, clean up backslashes, and optimize cmdline processing logic. Add memory controller check. chrisfu 2026-02-06 12:19:42 -0800
• 58faab34fb Add playbooks and manifests for cgroups and iSCSI storage setup chrisfu 2026-02-06 01:19:59 -0800
• 6b6e5e2aec nodeSelector and storage updates across k8s manifests chrisfu 2026-02-06 01:17:54 -0800
• 1e87f4684e Add k3s vault token update steps to k3s_sync.yml chrisfu 2026-02-05 23:44:05 -0800
• abd97008e7 Refactor k3s_sync.yml to improve sync source host selection logic. chrisfu 2026-02-05 23:15:30 -0800
• 92988d8bd2 Refactor k3s_sync.yml to improve sync source host selection logic. chrisfu 2026-02-05 23:11:55 -0800
• 7dca902d39 Refactor k3s_sync.yml to improve sync source host selection logic. chrisfu 2026-02-05 23:05:02 -0800
• e7d2b8fe52 Refactor k3s_sync.yml to improve sync source host selection logic. chrisfu 2026-02-05 22:42:45 -0800
• 68948be107 Refactor k3s synchronization playbooks to streamline metadata handling and ensure source inclusion. chrisfu 2026-02-05 22:37:17 -0800
• 5ae0c0bcb9 k3s_sync task chrisfu 2026-02-05 22:26:17 -0800
• da2f6600ba feat: infrastructure and installer updates for k3s, OpenTofu, and prole-db chrisfu 2026-02-05 21:27:18 -0800
• 82dc879116 cleanup: remove references to prole/workstation chrisfu 2026-02-05 14:51:35 -0800
• 620ce63190 checkpoint: update infrastructure scripts, manifests, and installer. etc/init_*.sh: added namespace support and OpenBao monitoring configuration; k8s/prole: added grafana-pvc, updated prole-db with S3 region support; install.py: implemented config secret encryption and improved ARM64 platform detection; .gitignore: expanded ignore patterns; prole-net: updated prole-agent binary chrisfu 2026-02-04 01:37:46 -0800
• bcc8f23a0d Enhance secret management and k8s infrastructure chrisfu 2026-02-03 22:39:50 -0800
• edbc6c5385 Checkpoint: Refactor installer UI and update Supabase deployment strategy chrisfu 2026-02-03 14:55:05 -0800
• 12d00c468a Configure Silent Install Test with unique logging and shared run configuration chrisfu 2026-02-02 16:13:15 -0800
• 5ab6381982 Fix YAML parsing errors in init_authority.sh and improve SSH key management. Resolved 'invalid Yaml document separator' and 'could not find expected :' errors in etc/init_authority.sh by using printf to inject multi-line SSH keys safely. Added 'ansible' user setup. Updated etc/init_openbao.sh to store ansible keys. Created prole/tests/test_init_authority.sh for validation. chrisfu 2026-02-02 13:15:31 -0800
• f908585f23 feat: integrate Supabase deployment with prole-db and update installer chrisfu 2026-02-02 06:51:23 -0800
• 96aaf488d6 Bump Prole-DB image version to 17.7-059, enable at-rest encryption, and comment out Kerberos and pg_prolelog configurations. Update kdc and admin_server IPs in Kerberos config. chrisfu 2026-02-02 01:18:22 -0800
• 7e9e6d0c11 Add CNPG build/init test and skip tiger geocoder chrisfu 2026-02-02 01:15:11 -0800
• fff18fdbe4 Update Prole-DB and improve Supabase integration chrisfu 2026-02-01 23:50:09 -0800
• 9c1f58caf4 Checkpoint: namespace management improvements and prole-db updates. Enhanced namespace management with automated namespace detection and configuration in etc/prole_cfg.sh and etc/init_prole-db.sh. Added namespace reset and recovery scripts: scripts/reset-ns.sh, etc/init_prole-db-reset.sh, and k8s/prole/prole-db-recovery.yaml.tpl. Updated prole-db image versioning to use release files and bumped version to 17.7-041. Improved installer UI and configuration handling in install.py and installer/screen.py. Updated Kerberos and CloudNativePG initialization scripts for better namespace support. Added /prole/backup/ to .gitignore. chrisfu 2026-01-31 19:22:05 -0800
• 1e42bf6029 Adjust canvas element placement in install.py for improved UI alignment and consistency. chrisfu 2026-01-31 02:33:24 -0800
• b65dc14553 Adjust canvas element placement in install.py for improved UI alignment and consistency. chrisfu 2026-01-31 02:06:47 -0800
• 1df4f47dd6 Reduce entry window width in install.py from 650 to 325 for better UI alignment. chrisfu 2026-01-31 01:49:27 -0800
• a8cc2f1c32 Update prole-scan with latest changes chrisfu 2026-01-31 01:36:19 -0800
• 9060518877 Sourced prole_cfg.sh for environment and config loading across all init scripts, consolidating configuration management. Removed redundant env.sh loading logic. chrisfu 2026-01-31 01:24:18 -0800
• 7fcf419c01 Refactor admin key handling in init_cloudnative_pg.sh to support generic naming and simplify key management. Introduce dynamic CNPG version resolution and fetch the latest release automatically. chrisfu 2026-01-31 00:58:07 -0800
• 0e1b588637 fix missing file chrisfu 2026-01-31 00:35:48 -0800
• ed39bac75c Merge branch 'main' of github.com:dredx/prole chrisfu 2026-01-30 23:40:49 -0800
• a720ad9d4f Enable fallback to RSA for SSH key generation and streamline keypair handling. chrisfu 2026-01-30 23:40:34 -0800
• a7cb5b5fca Add prole_cfg.sh sourcing for configuration management chrisfu 2026-01-30 23:37:32 -0800
• a9c1c18891 samba family passwords never expire chrisfu 2026-01-30 00:03:29 -0800
• ac95cdba00 cleaning up; tests in the folder, scripts in the desk chrisfu 2026-01-29 23:58:43 -0800
• f0e75f6107 feat: complete end-to-end installation and storage integration. This commit marks a significant milestone where the end-to-end installation process is now fully functional. Key changes: Integrated Garage storage service (S3-compatible); Implemented Prole DB backup; Enhanced Kerberos integration; Updated default namespace to prole-chrisfu-deadbeef; Streamlined dependencies (removed Ollama); Added installation validation and testing scripts; Improved installer UI and deployment logic. chrisfu 2026-01-29 22:50:05 -0800
• 519235558a add ansible role samba_dns. master group_vars/all/dns.yml\nfixed role iscsi chrisfu 2026-01-29 16:58:30 -0800
• 706fbbd28b ansible correct retropie fstab chrisfu 2026-01-29 00:50:45 -0800
• 05ff335e3e Add cluster existence check and hostNetwork patch application chrisfu 2026-01-28 23:23:47 -0800
• dda938ee95 Integrate namespace setup and management into scripts, Dockerfile, and update installer UI. chrisfu 2026-01-28 23:02:50 -0800
• d7b6a72ece Refactor cgroups task for cleaner syntax using a ternary filter chrisfu 2026-01-28 15:27:12 -0800
• c2498594a2 Merge remote-tracking branch 'origin/main' chrisfu 2026-01-28 15:18:53 -0800
• 826f28ccdb Add cgroups prerequisite role for k3s chrisfu 2026-01-28 15:10:20 -0800
• 48e169432c Add cgroups prerequisite role for k3s chrisfu 2026-01-28 15:10:20 -0800
• b1dde37f8c Add serial execution and integrate cgroup role in k3s reset playbook chrisfu 2026-01-28 15:03:10 -0800
• f18bf3d1fa Merge branch 'main' of github.com:dredx/prole chrisfu 2026-01-28 14:38:58 -0800
• d7c4778b51 Add preflight checks for cgroup kernel params in k3s setup chrisfu 2026-01-28 14:35:29 -0800
• 7ecc69c969 Add preflight checks for cgroup kernel params in k3s setup chrisfu 2026-01-28 14:35:29 -0800
• 11a1a32677 Merge remote-tracking branch 'origin/main' chrisfu 2026-01-28 13:44:09 -0800
• 2e4d785de3 Refactor k3s version installation logic to use a ternary filter for cleaner syntax in main.yml. chrisfu 2026-01-28 13:42:09 -0800
• 852b1f8949 Refactor k3s version installation logic to use a ternary filter for cleaner syntax in main.yml. chrisfu 2026-01-28 13:42:09 -0800
• 887c485c32 Add playbooks for k3s reset and deletion with vault token removal. Include k3s cleanup tasks role. chrisfu 2026-01-28 13:34:37 -0800
• 23624eb692 ansibles roles k3s, local_user chrisfu 2026-01-28 13:05:28 -0800
• b4cea8c6f5 add samba_ad_dc role chrisfu 2026-01-28 12:41:06 -0800
• 987a7acda1 correct myrddin prole-db mount point chrisfu 2026-01-28 12:17:35 -0800
• 58d693de05 UI: Standardized console appearance and fixed cosmetic inconsistencies. This commit establishes a stable, consistent UI across the entire installer: Unified 'Light Background, Dark Text' theme for all console components. Standardized console creation routine to eliminate thick black borders on macOS. Refactored SSH key generation to use the standard canvas-based layout. Switched to tk.Frame and tk.Scrollbar for TerminalConsole to resist macOS dark mode shifts. Fixed shutil.SameFileError when PROLE_HOME matches the source directory. Improved notebook styling for inactive tabs and execution outputs. All screens now share the same professional look and feel. chrisfu 2026-01-27 22:32:27 -0800
• 453ccfd015 Add k3s kubeconfig user configuration and iSCSI target defaults chrisfu 2026-01-27 21:46:56 -0800
• c7a651552a Samba Active Directory family user setup script chrisfu 2026-01-27 16:51:35 -0800
• 5e823f82a8 feat(supabase): add optional init flow, k8s manifests, and docs • install.py • etc/init_supabase.sh • k8s/prole/kustomization.yaml • k8s/prole/prole-db-postgres-service.yaml • k8s/prole/supabase-configmap.yaml • k8s/prole/supabase-deployment.yaml • k8s/prole/supabase-service.yaml • prole-db/supabase.md chrisfu 2026-01-27 13:06:35 -0800
• 89c1e1ebef ansible add /prole/home chrisfu 2026-01-27 00:43:17 -0800
• 5803e319d5 add missing vals chrisfu 2026-01-26 20:46:44 -0800
• 37156086aa ansible stable chrisfu 2026-01-26 18:56:17 -0800
• 79515fb0ec fix LUN PROLE-PI-2 iqn chrisfu 2026-01-26 16:55:56 -0800
• 862f21fe1d reusability chrisfu 2026-01-26 00:08:29 -0800
• 035d63090c Fix Ansible YAML parsing errors and standardize host_vars. Removed invalid '---' document separators from host_vars files, merged redundant myrddin config, and renamed host_vars to use .yml extension. Verified with successful ansible-playbook --syntax-check. chrisfu 2026-01-25 23:36:25 -0800
• ff1150fa9e add iscsi mount guardrails. get k3s server token script chrisfu 2026-01-25 22:18:10 -0800
• 613d9bfbc6 ansible add myrddin.prole.org host_vars chrisfu 2026-01-25 21:27:53 -0800
• 20d408ff36 add iscsi role and vault chrisfu 2026-01-25 15:31:33 -0800
• 5cb2dbdc57 fix k3s role chrisfu 2026-01-25 06:00:38 -0800