prole/scripts
chrisfu d114801758 feat: wire ekosystem UUID system into CNPG manifests (Tasks 1, 3, 4)
Task 1 — ConfigMap + CNPG wiring:
- Add k8s/knoe/knoe-ekosystem-sql.yaml: ConfigMap embedding ekosystem.sql
  and ekosystem_objects.sql for CNPG postInitApplicationSQLRefs
- Add scripts/gen-ekosystem-configmap.py: generation script to keep the
  ConfigMap in sync with knoe-db/schema/ekosystem*.sql source files
- Add Makefile target: make k8s/knoe/knoe-ekosystem-sql.yaml
- Wire postInitApplicationSQLRefs into all three CNPG cluster manifests:
    k8s/knoe/knoe-db.yaml (k3s / prole-service-context production)
    deploy/gcp/gke/knoe-db.yaml (GKE)
    deploy/opentofu/k3s/manifests/knoe/knoe-db.yaml (OpenTofu k3s)
- Add knoe-ekosystem-sql.yaml to k8s/knoe/kustomization.yaml

Task 3 — Python counterpart utility:
- Add knoe/ekosystem.py: thread-safe EkosystemID generator matching the
  PostgreSQL bit layout [49:ts_ms|12:tenant|10:shard|11:seq], with
  decode() and can_access() helpers
- Add tests/test_ekosystem.py: 23 tests covering base36 encoding,
  round-trips, thread safety, can_access, and the spec round-trip assertion

Task 4 — knoe.user ekosystem_uuid column:
- Add ALTER TABLE knoe.user ADD COLUMN IF NOT EXISTS ekosystem_uuid text UNIQUE
  to postInitSQL in all three CNPG manifests

Task 2 (register prole tenant) requires a live DB connection — manual step.
Task 5 (LDAP/AD reconciler) is design-only per spec.

Co-authored-by: Junie <junie@jetbrains.com>
2026-05-30 00:26:48 -07:00
..
validation fix(check_kerberos): default PROLE_KDC_NAME to authority-knoe-auth (matches init_kdc.sh) 2026-05-03 15:23:40 -07:00
cleanup_stale_rs.sh stable: slimmed Supabase + CNPG 3-node healthy build (2026-03-25) 2026-03-25 11:56:40 -07:00
cleanup-supabase-pvs.sh chore: enhance Supabase retained disk cleanup with project resolution and detailed skip reasons 2026-04-19 17:16:49 -07:00
docker-root-knoe-db.sh Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
docker-run-knoe-db.sh Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
fix_gitlab_tls.sh Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
gen-ekosystem-configmap.py feat: wire ekosystem UUID system into CNPG manifests (Tasks 1, 3, 4) 2026-05-30 00:26:48 -07:00
generate_spec.py Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00
k3d-knoe-down.sh feat(k3d): laptop dev loop for knoe-auth — CNPG + KDC + port-forward 2026-05-02 11:47:09 -07:00
k3d-knoe-pf.sh feat(knoe-auth): Phase 2 OIDC sandbox in k3d dev loop 2026-05-02 11:55:50 -07:00
k3d-knoe-smoke.sh feat(k3d): laptop dev loop for knoe-auth — CNPG + KDC + port-forward 2026-05-02 11:47:09 -07:00
k3d-knoe-up.sh feat(knoe-auth): Phase 2 OIDC sandbox in k3d dev loop 2026-05-02 11:55:50 -07:00
patch_clusters.sh checkpoint: stabilize k8s cluster setup and shelve cluster-storage UI 2026-04-07 21:11:25 -07:00
patch_garage_cross_cluster.sh fix(scripts): patch_garage_cross_cluster — three defects from 2026-04-29 review 2026-05-02 03:01:22 -07:00
reset_clusters.sh Harden prod deploy namespace/context routing and vault password handling 2026-04-10 00:43:07 -07:00
reset-ns.sh Fix DB image build and k3s registry/CNPG robustness 2026-03-29 19:35:37 -07:00
sync_upstream_knoe_db.sh feat(scripts): upstream knoe-db sync tooling and docs 2026-05-23 21:31:48 -07:00
test-cnpg-knoe-db.sh Complete rebranding from prole to knoe and fix macOS application identity. Bulk renamed 'prole' to 'knoe' across code, scripts, and manifests. Updated Makefile with 'knoe', 'build', and 'start' targets. Implemented macOS Application Bundle (.app) support for correct identity. Fixed macOS 'Python' process name to 'Knoe.DB Installer' via Objective-C bridge. Standardized application name to 'Knoe.DB Installer' across all interfaces. 2026-04-22 15:08:35 -07:00