72d16929ca
Major refactoring to hexagonal (ports & adapters) architecture: - Add service layer (apikey_service, project_service) for business logic - Add webhook system with dispatcher and delivery tracking - Add command queue with priority-based processing - Add rate limiting with sliding window algorithm - Add audit logging for command execution - Add OpenTelemetry integration (traces, metrics, spans) - Add circuit breaker for fault tolerance - Add cached repository wrapper for performance - Add comprehensive validation package - Add Kubernetes client integration for pod management - Add database migrations (allowed_ips, audit_log, rate_limiting, queue, webhooks) - Add network policy and PodDisruptionBudget for k8s - Remove legacy executor and projects/registry packages - Untrack secrets.yaml (now managed via envault) - Add coverage.out to .gitignore - Add e2e test infrastructure with docker-compose - Add comprehensive documentation (API, architecture, operations, plans) - Add golangci-lint config and pre-commit hook Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
37 lines
927 B
YAML
37 lines
927 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: rdev
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
|
|
# v0.1 - Generic claudebox (for testing/dev)
|
|
- pvc.yaml
|
|
- claudebox.yaml
|
|
|
|
# v0.2 - Project-specific claudeboxes
|
|
- pvc-pantheon.yaml
|
|
- pvc-aeries.yaml
|
|
|
|
# v0.6 - Shared Claude credentials (auth only)
|
|
- pvc-shared-claude.yaml
|
|
- configmaps.yaml
|
|
# NOTE: secrets.yaml and credentials.yaml contain real keys and are gitignored.
|
|
# Copy from *.example files and fill in real values before deploying.
|
|
- secrets.yaml # from secrets.yaml.example
|
|
- credentials.yaml # from credentials.yaml.example
|
|
- claudebox-pantheon.yaml
|
|
- claudebox-aeries.yaml
|
|
|
|
# v0.4+ - API Server (RBAC now included in rdev-api.yaml)
|
|
- rdev-api.yaml
|
|
|
|
# v0.8+ - Production hardening
|
|
- pdb.yaml
|
|
- network-policy.yaml
|
|
|
|
commonLabels:
|
|
app.kubernetes.io/managed-by: kustomize
|
|
app.kubernetes.io/part-of: rdev
|