chrisfu/prole
1
0
Fork 0
mirror of https://github.com/dredx/prole.git synced 2026-09-23 12:03:59 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity
main
prole/deploy/gcp/gke
History
chrisfu d114801758 feat: wire ekosystem UUID system into CNPG manifests (Tasks 1, 3, 4) 
Task 1 — ConfigMap + CNPG wiring:
- Add k8s/knoe/knoe-ekosystem-sql.yaml: ConfigMap embedding ekosystem.sql
  and ekosystem_objects.sql for CNPG postInitApplicationSQLRefs
- Add scripts/gen-ekosystem-configmap.py: generation script to keep the
  ConfigMap in sync with knoe-db/schema/ekosystem*.sql source files
- Add Makefile target: make k8s/knoe/knoe-ekosystem-sql.yaml
- Wire postInitApplicationSQLRefs into all three CNPG cluster manifests:
    k8s/knoe/knoe-db.yaml (k3s / prole-service-context production)
    deploy/gcp/gke/knoe-db.yaml (GKE)
    deploy/opentofu/k3s/manifests/knoe/knoe-db.yaml (OpenTofu k3s)
- Add knoe-ekosystem-sql.yaml to k8s/knoe/kustomization.yaml

Task 3 — Python counterpart utility:
- Add knoe/ekosystem.py: thread-safe EkosystemID generator matching the
  PostgreSQL bit layout [49:ts_ms|12:tenant|10:shard|11:seq], with
  decode() and can_access() helpers
- Add tests/test_ekosystem.py: 23 tests covering base36 encoding,
  round-trips, thread safety, can_access, and the spec round-trip assertion

Task 4 — knoe.user ekosystem_uuid column:
- Add ALTER TABLE knoe.user ADD COLUMN IF NOT EXISTS ekosystem_uuid text UNIQUE
  to postInitSQL in all three CNPG manifests

Task 2 (register prole tenant) requires a live DB connection — manual step.
Task 5 (LDAP/AD reconciler) is design-only per spec.

Co-authored-by: Junie <junie@jetbrains.com>
2026-05-30 00:26:48 -07:00
..
argocd-oidc-cm.yaml feat: Kerberos identity management — PROLE.LOCAL realm, cross-realm trust, user provisioning 2026-04-01 20:38:57 -07:00
cnpg-prometheus-ilb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
gitlab-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
grafana-google-oidc-secret-prole.example.yaml feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio 2026-05-06 16:22:49 -04:00
grafana-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-auth-deployment.yaml feat: ship Junie #3 (image rename) + Phase 2 OIDC GKE deploy + k3d chrisfu seed 2026-05-02 13:07:40 -07:00
knoe-auth-google-oidc-secret.example.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
knoe-auth-oidc-secret.example.yaml Phase 1: OIDC provider integration and GKE auth deployment 2026-04-28 12:22:45 -07:00
knoe-db-backup-gcs.yaml chore(deploy): split knoe-db-backup-gcs manifest — SA only, drop legacy ScheduledBackup 2026-05-02 03:00:51 -07:00
knoe-db-external-lb.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
knoe-db-podmonitor.yaml fix(cnpg,kong): wire cnpg-backup-sa, migrate PodMonitor, drop DASHBOARD consumer 2026-05-02 03:08:34 -07:00
knoe-db.yaml feat: wire ekosystem UUID system into CNPG manifests (Tasks 1, 3, 4) 2026-05-30 00:26:48 -07:00
knoe-kdc-configmap.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-kdc-secrets.yaml feat(auth): land Round 1 — invite-OTP enrollment, kadmin client, GKE manifests 2026-04-27 14:47:27 -07:00
knoe-onboard.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
namespace.yaml Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
oauth2-proxy-deployment.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
oauth2-proxy-google-oidc-secret-prole.example.yaml feat(auth): add Google Workspace OAuth (prole.org) for Grafana + Supabase Studio 2026-05-06 16:22:49 -04:00
oauth2-proxy-google-oidc-secret.example.yaml Merge claude/crazy-bose-fec256 into main 2026-05-01 16:39:10 -07:00
workload-identity.yaml fix(cnpg): stabilize CNPG/Barman Cloud init on GKE (knoe-dev-0 / knoe-db-0) 2026-04-05 02:04:11 -07:00