538ea57ed4
Claude Config API (v0.6): - Add CRUD endpoints for commands, skills, and agents - Commands/skills/agents stored in /workspace/.claude/ (per-project, in git) - Credentials shared via PVC at /root/.claude/ (shared across pods) - Use base64 encoding for file writes (prevents shell injection) - Add content size limits (1MB max) Security Hardening: - Add sanitize package for command/prompt validation - Add rate limiting middleware (token bucket algorithm) - Add concurrent command limiting - Add input sanitization to all command handlers - Gitignore secrets.yaml and credentials.yaml - Add *.example templates for secrets Testing Infrastructure: - Add testutil package with mocks and fixtures - Add unit tests for auth package (63% coverage) - Add unit tests for executor (47% coverage) - Add handler integration tests (40% coverage) - Add 100% coverage for sanitize, cmdlimit packages - Add 96% coverage for ratelimit package Infrastructure: - Shared Claude credentials PVC (ReadWriteMany) - Reduced workspace PVC size from 20Gi to 5Gi - Add init container cleanup before git clone - Document Longhorn RWX requirements Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
33 lines
425 B
Plaintext
33 lines
425 B
Plaintext
# Credentials - never commit
|
|
.claude/
|
|
*.credentials*
|
|
*.key
|
|
*.pem
|
|
|
|
# Kubernetes secrets with real values (use *.example as template)
|
|
deployments/k8s/base/secrets.yaml
|
|
deployments/k8s/base/credentials.yaml
|
|
|
|
# Local development
|
|
.env.local
|
|
|
|
# OS
|
|
.DS_Store
|
|
Thumbs.db
|
|
|
|
# IDE
|
|
.idea/
|
|
.vscode/
|
|
*.swp
|
|
*.swo
|
|
|
|
# Build artifacts
|
|
*.tar
|
|
*.gz
|
|
/rdev-api
|
|
|
|
# Deploy keys (generated, never commit)
|
|
*-deploy-key
|
|
*-deploy-key.pub
|
|
*-deploy-key.b64
|