mirror of
https://github.com/dredx/prole.git
synced 2026-09-23 11:03:59 +00:00
6d484ef13e
The next development thread is knoe-auth Phase 2 OIDC iteration, which
just landed on main but has no fast inner-loop. Instead of bouncing
edits through the GKE deploy chain, we want a laptop-resident model
where knoe-auth runs from the IDE / mvn against real Postgres + KDC
brought up in k3d.
Two new docs:
docs/plans/k3d-gke-mirror.md
Architectural plan. Top-to-bottom rationale for what the k3d
model should mirror, what we deliberately skip (supabase, kong,
oauth2-proxy, Studio — all unnecessary for knoe-auth's surfaces),
and the phasing. Captures the three scope decisions taken
2026-05-02 with the user:
- knoe-auth runs on the laptop, not as a pod (faster inner loop)
- stack scope is CNPG + KDC only
- single-replica CNPG, realm KNOE.LOCAL (distinct from KNOE.DEV)
Out-of-scope for Phase 1 listed explicitly so reviewer
expectations match scope: SPNEGO E2E, image-build-and-load,
supabase, oauth2-proxy, OidcCodeService DB persistence.
docs/plans/junie/k3d-knoe-auth-dev-loop.md
Phase 1 brief. Concrete deliverables:
- k8s/knoe/knoe-kdc-{deployment,service,configmap,pvc,init-job}.yaml
- etc/init_knoe_auth.sh --mode k3d flag (or sibling script)
- Makefile: k3d-knoe-{up,pf,down}
- etc/krb5.local.conf (with udp_preference_limit=1 for
kubectl port-forward UDP flakiness on macOS)
- docs/local-dev-knoe-auth.md (engineer-facing)
- scripts/k3d-knoe-smoke.sh
Definition of done: a fresh-clone laptop can `make k3d-knoe-up`
+ `make k3d-knoe-pf` + `mvn -pl authority spring-boot:run` and
hit /health, /.well-known/openid-configuration in <8 minutes.
Index updates:
docs/plans/README.md — k3d-gke-mirror.md row added
docs/plans/junie/README.md — split into Active / Shipped;
k3d brief listed under Active;
the 5 shipped-2026-05-02 briefs
moved to Shipped with commit refs.
docs/TODO.md In-progress — k3d brief now top of "In progress";
the previously in-flight "Phase 2
pg_oauth in install/deploy.sh"
item demoted to "paused" (resume
after the local dev loop lands).
No code changes; all docs.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
|
||
|---|---|---|
| .. | ||
| plans | ||
| build-system.md | ||
| config-environments.md | ||
| db-access.md | ||
| definition.txt | ||
| DOCKER-BUILD-FIX.md | ||
| EMBEDDED-RESOURCES.md | ||
| grafana-sso.md | ||
| IMAGE-RESOURCES.md | ||
| installer-config-persistence.md | ||
| intellij-refactor-prompt.md | ||
| k3d.md | ||
| knoe-auth-phase-2.md | ||
| knoe-db-documentation-mcp-architecture.md | ||
| layout.md | ||
| MERLIN-MARIADB-EXTERNAL-TEMP.md | ||
| mission.txt | ||
| ncurses-installer.md | ||
| oidc-path-b.md | ||
| oidc-setup.md | ||
| onboarding.md | ||
| patent-abstract.txt | ||
| patent.txt | ||
| pipeline-phases.md | ||
| prole_db.cht | ||
| PROLE-CFG-SECRETS.md | ||
| PROLE-HOME-DIRECTORY.md | ||
| prompt.txt | ||
| RELEASE-NOTES.md | ||
| TODO.md | ||
| typescript | ||