kerberos-io/deployment
1
0
Fork 0
mirror of https://github.com/kerberos-io/deployment.git synced 2026-11-07 20:30:26 +00:00
Code Issues Packages Projects Releases Wiki Activity
425 Commits 17 Branches 7 Tags
ebd5fffd8bb09ad3bc31adaad0a998cfa6ff53b0
Commit Graph
425 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Cédric VerstraetenandCopilot ebd5fffd8b docs: simplify Hub hardening overview 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 19:46:45 +00:00
Cédric VerstraetenandCopilot eaa6bd0367 docs: link all products to Learn pages 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 19:38:33 +00:00
Cédric Verstraeten 21536ed1b0 Merge pull request #45 from uug-ai/docs/continuous-deployment-badges 
Show all continuous deployment workflow badges
 2026-11-04 20:25:06 +01:00
Cédric VerstraetenandCopilot 711ace1f15 docs: show all continuous deployment badges 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 19:16:38 +00:00
Cédric Verstraeten 4d5d7e3c18 Merge pull request #42 from uug-ai/chore/hub-chart-0.170.1 
Upgrade Hub chart to 0.170.1 with hardened API defaults
 2026-11-04 18:42:49 +01:00
Cédric Verstraeten c643012993 Merge pull request #44 from uug-ai/chore/hardened-factory-release 
Deploy verified hardened Factory v2.0.13
 2026-11-04 18:42:40 +01:00
Cédric VerstraetenandCopilot 913706fe3f Deploy verified hardened Factory v2.0.13 with coordinated runtime settings 
Pin the signed multiarchitecture digest, route unchanged external ports to HTTP 8080, enforce restricted security context and mount writable config/tmp volumes. Exercise a legacy upgrade and ConfigMap-backed settings after pod replacement on kind.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 17:16:29 +00:00
Cédric Verstraeten d41b425035 Merge pull request #43 from uug-ai/docs/deployment-diagrams-vault-hardening 
Refresh deployment diagrams and harden Vault
 2026-11-04 17:33:07 +01:00
Cédric VerstraetenandCopilot f5a9eaef15 ci: wait for Vault rollout readiness 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 16:16:10 +00:00
Cédric VerstraetenandCopilot 674875a754 docs: refresh deployment diagrams and harden Vault 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 15:44:28 +00:00
Cédric VerstraetenandCopilot 718fdbe302 Pin Hub chart 0.170.1 and verify hardened API runtime 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 14:53:34 +00:00
Cédric Verstraeten 05b68ca070 Merge pull request #41 from uug-ai/fix/deployment-workflow-failures 
Replace default MinIO backend with persistent Garage S3
 2026-11-04 12:16:39 +01:00
Cédric VerstraetenandCopilot 45d8b1a5a3 Check enabled Hub deployments rather than optional component names 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 11:06:39 +00:00
Cédric VerstraetenandCopilot a9a6ce33b5 Use AWS CLI for portable Garage S3 verification 
Avoid the broken SigV4 upload behavior of Ubuntu 22.04 curl. Use isolated path-style AWS CLI configuration and explicit checksum compatibility settings.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 10:55:54 +00:00
Cédric VerstraetenandCopilot 9f069cfdaa Sign Garage S3 payload hashes explicitly on older curl 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 10:53:24 +00:00
Cédric VerstraetenandCopilot 8619bb1965 Use Garage environment secrets and document S3 setup 
Avoid Garage's root-owned secret-file permission incompatibility with non-root Kubernetes mounts. Validate generated secret formats and document fresh installation, Vault provider configuration and preservation of existing MinIO data.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 10:51:01 +00:00
Cédric VerstraetenandCopilot 7bccddb995 Use persistent Garage S3 in local deployments and CI 
Replace default MinIO operator installation with pinned non-root Garage, generated persistent credentials and authenticated S3 tests. Keep MinIO manifests intact for existing installations, add failure diagnostics and optional Slack handling, and align Kustomize chart pins.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 10:42:52 +00:00
Cédric VerstraetenandCopilot 90a146a6c4 Expose deployment failure diagnostics and remove empty workflow 
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 10:33:13 +00:00
Cédric VerstraetenandCopilot 9c3108b259 Align promoted frontend with hardened Hub chart 0.170.0 (#40) 
Use frontend port 8080 and named NodePort routing, remove the invalid registry prefix on GHCR images, and validate both frontends with the published chart before infrastructure installation. Runtime preflight passes; full-stack CI remains blocked at MinIO before Hub, with separate missing Slack webhook failures.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
 2026-11-04 11:30:18 +01:00
Cédric Verstraeten da59b223a7 Merge pull request #39 from uug-ai/public-release-1793786033 
A new public release - 1793786033
 2026-11-04 11:07:13 +01:00
uug4ai 67be7d76e8 A new public release - 1793786033 2026-11-04 09:53:55 +00:00
Cédric Verstraeten 266d036468 feat(devcontainer): add Azure CLI feature to development container 2026-09-16 14:42:45 +00:00
cedricve a20419bf96 fix(vault): standardize MQTT variable naming from MQTTURI to MQTT_URI 2026-09-14 14:29:00 +00:00
cedricve 9a47ad3f4a feat(vault): add runtime configuration options and deployment examples for local development 2026-09-14 14:23:55 +00:00
cedricve 4704e4f0ab fix(docs): clarify Kerberos Vault integration and remove CONTINUOUS_FORWARDING variable 2026-09-10 18:31:13 +00:00
Cédric Verstraeten 739d9ec944 feat(database-import): enhance user import logic with verification and error handling 2026-09-03 12:30:45 +02:00
Cédric Verstraeten f7fef4b85c feat(database-import): enhance user import logic and add verification checks 2026-09-03 10:04:30 +00:00
Cédric Verstraeten ad11d1cb70 Update README.md 2026-08-30 21:16:29 +02:00
Cédric Verstraeten 62244cff93 Merge pull request #34 from uug-ai/public-release-1786356403 
A new public release - 1786356403
 2026-08-13 13:30:19 +02:00
Cédric Verstraeten c7be7901ff feat(mongodb-configmap): add MongoDB connection behavior and TLS configuration options 2026-08-13 10:18:31 +00:00
Cédric Verstraeten 6f6e95ae7a docs(README): clarify cert-manager self-checks DNS configuration 2026-08-11 14:22:20 +00:00
Cédric Verstraeten bdbb9ae538 feat(cert-manager): replace CRDs enabled flag with values file for configuration 2026-08-11 14:10:32 +00:00
Cédric Verstraeten b44775ef2a feat(ingress): add public HTTPS ingress configuration with cert-manager support 2026-08-11 14:05:37 +00:00
Cédric Verstraeten d888d7e243 feat(database-import): add DocumentDB import job and script with example data 2026-08-11 13:00:10 +00:00
Cédric Verstraeten 2150a146b9 Update .gitignore 2026-08-11 13:56:41 +02:00
Cédric Verstraeten bf164c208b Force DocumentDB replacement on VPC change 
AWS cannot move a DocumentDB subnet group or cluster to a different VPC. Include the VPC ID in the subnet group name and create it before destroy, and add a replace_triggered_by lifecycle rule so the cluster is recreated when the subnet group changes instead of failing on an unsupported in-place update.

Document the behaviour and the snapshot caveat in the module README.
 2026-08-11 13:08:35 +02:00
Cédric Verstraeten 687a0019d8 Update .gitignore 2026-08-10 14:38:04 +02:00
uug4ai ba4f0df8be A new public release - 1786356403 2026-08-10 10:06:44 +00:00
Cédric Verstraeten bf5eb0187e Merge remote-tracking branch 'refs/remotes/origin/main' 2026-08-06 15:45:40 +00:00
Cédric Verstraeten 8c620ccf1f feat(aws): add Terraform module for Amazon EKS and DocumentDB setup 2026-08-06 12:21:27 +00:00
Cédric Verstraeten 245b276d80 Update factory image version to v2.0.4 2026-07-30 16:18:08 +02:00
Cédric Verstraeten 442137cab2 Update kerberos-hub-values.yaml 2026-07-22 09:02:05 +02:00
Cédric Verstraeten 1751c76aa5 Merge pull request #33 from kerberos-io/feat/case-share-email-template 
feat(email): add case-share white-label template + values
 2026-07-22 09:00:35 +02:00
Cédric Verstraeten 67c9ae9dd5 Update kerberos-factory-deployment.yaml 2026-06-30 17:29:56 +02:00
Kilian Boute a8001b37dc feat(email): add case-share white-label template + values 
Adds the Kerberos-branded share_case email template (html/txt) and wires
caseShare/caseShareTitle into the hub email template values so the case-share
invitation renders with the dedicated template instead of the recording-share
one.
 2026-06-23 13:46:41 +00:00
Cédric Verstraeten 85feb1d574 Update container image source in deployment YAML 2026-06-23 09:46:46 +02:00
Cédric Verstraeten 63b6607c02 Update factory image version to v2.0.2 2026-06-23 09:17:29 +02:00
cedricve 1d5c492959 Update documentation to replace 'Kerberos Agents' with 'Agents' for consistency 2026-06-22 13:00:14 +00:00
cedricve 8f41e9c375 Refactor Factory references and update deployment configurations 2026-06-22 12:36:57 +00:00
Cédric Verstraeten 0c1520c936 Merge pull request #32 from kerberos-io/public-release-1781595581 
A new public release - 1781595581
 2026-06-16 09:48:22 +02:00