jordan/rdev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
214d1c8a4c
rdev/deployments/k8s/base
History
jordan 538ea57ed4 feat: Add claude-config API, security hardening, and testing infrastructure 
Claude Config API (v0.6):
- Add CRUD endpoints for commands, skills, and agents
- Commands/skills/agents stored in /workspace/.claude/ (per-project, in git)
- Credentials shared via PVC at /root/.claude/ (shared across pods)
- Use base64 encoding for file writes (prevents shell injection)
- Add content size limits (1MB max)

Security Hardening:
- Add sanitize package for command/prompt validation
- Add rate limiting middleware (token bucket algorithm)
- Add concurrent command limiting
- Add input sanitization to all command handlers
- Gitignore secrets.yaml and credentials.yaml
- Add *.example templates for secrets

Testing Infrastructure:
- Add testutil package with mocks and fixtures
- Add unit tests for auth package (63% coverage)
- Add unit tests for executor (47% coverage)
- Add handler integration tests (40% coverage)
- Add 100% coverage for sanitize, cmdlimit packages
- Add 96% coverage for ratelimit package

Infrastructure:
- Shared Claude credentials PVC (ReadWriteMany)
- Reduced workspace PVC size from 20Gi to 5Gi
- Add init container cleanup before git clone
- Document Longhorn RWX requirements

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
2026-01-25 01:29:13 -07:00
..
claudebox-aeries.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
claudebox-pantheon.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
claudebox.yaml feat: Implement v0.2-v0.4 (workspaces, git, API) 2026-01-24 21:07:00 -07:00
configmaps.yaml feat: Implement v0.2-v0.4 (workspaces, git, API) 2026-01-24 21:07:00 -07:00
credentials.yaml.example feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
kustomization.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
namespace.yaml Initial commit: rdev v0.1 base case 2026-01-24 19:24:07 -07:00
pvc-aeries.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
pvc-pantheon.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
pvc-shared-claude.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
pvc.yaml fix: Use ghcr.io and build for amd64 2026-01-24 20:04:34 -07:00
rbac.yaml feat: Implement v0.2-v0.4 (workspaces, git, API) 2026-01-24 21:07:00 -07:00
rdev-api.yaml fix: Defer health endpoints to Run() for proper middleware ordering 2026-01-24 23:28:54 -07:00
secrets.yaml feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00
secrets.yaml.example feat: Add claude-config API, security hardening, and testing infrastructure 2026-01-25 01:29:13 -07:00