538ea57ed4
Claude Config API (v0.6): - Add CRUD endpoints for commands, skills, and agents - Commands/skills/agents stored in /workspace/.claude/ (per-project, in git) - Credentials shared via PVC at /root/.claude/ (shared across pods) - Use base64 encoding for file writes (prevents shell injection) - Add content size limits (1MB max) Security Hardening: - Add sanitize package for command/prompt validation - Add rate limiting middleware (token bucket algorithm) - Add concurrent command limiting - Add input sanitization to all command handlers - Gitignore secrets.yaml and credentials.yaml - Add *.example templates for secrets Testing Infrastructure: - Add testutil package with mocks and fixtures - Add unit tests for auth package (63% coverage) - Add unit tests for executor (47% coverage) - Add handler integration tests (40% coverage) - Add 100% coverage for sanitize, cmdlimit packages - Add 96% coverage for ratelimit package Infrastructure: - Shared Claude credentials PVC (ReadWriteMany) - Reduced workspace PVC size from 20Gi to 5Gi - Add init container cleanup before git clone - Document Longhorn RWX requirements Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
33 lines
856 B
YAML
33 lines
856 B
YAML
apiVersion: kustomize.config.k8s.io/v1beta1
|
|
kind: Kustomization
|
|
|
|
namespace: rdev
|
|
|
|
resources:
|
|
- namespace.yaml
|
|
|
|
# v0.1 - Generic claudebox (for testing/dev)
|
|
- pvc.yaml
|
|
- claudebox.yaml
|
|
|
|
# v0.2 - Project-specific claudeboxes
|
|
- pvc-pantheon.yaml
|
|
- pvc-aeries.yaml
|
|
|
|
# v0.6 - Shared Claude credentials (auth only)
|
|
- pvc-shared-claude.yaml
|
|
- configmaps.yaml
|
|
# NOTE: secrets.yaml and credentials.yaml contain real keys and are gitignored.
|
|
# Copy from *.example files and fill in real values before deploying.
|
|
- secrets.yaml # from secrets.yaml.example
|
|
- credentials.yaml # from credentials.yaml.example
|
|
- claudebox-pantheon.yaml
|
|
- claudebox-aeries.yaml
|
|
|
|
# v0.4+ - API Server (RBAC now included in rdev-api.yaml)
|
|
- rdev-api.yaml
|
|
|
|
commonLabels:
|
|
app.kubernetes.io/managed-by: kustomize
|
|
app.kubernetes.io/part-of: rdev
|