Commit Graph
107 Commits
Author SHA1 Message Date
Cédric Verstraeten 4d5d7e3c18 Merge pull request #42 from uug-ai/chore/hub-chart-0.170.1
Upgrade Hub chart to 0.170.1 with hardened API defaults
2026-11-04 18:42:49 +01:00
Cédric VerstraetenandCopilot 913706fe3f Deploy verified hardened Factory v2.0.13 with coordinated runtime settings
Pin the signed multiarchitecture digest, route unchanged external ports to HTTP 8080, enforce restricted security context and mount writable config/tmp volumes. Exercise a legacy upgrade and ConfigMap-backed settings after pod replacement on kind.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 17:16:29 +00:00
Cédric VerstraetenandCopilot 674875a754 docs: refresh deployment diagrams and harden Vault
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 15:44:28 +00:00
Cédric VerstraetenandCopilot 718fdbe302 Pin Hub chart 0.170.1 and verify hardened API runtime
Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 14:53:34 +00:00
Cédric VerstraetenandCopilot a9a6ce33b5 Use AWS CLI for portable Garage S3 verification
Avoid the broken SigV4 upload behavior of Ubuntu 22.04 curl. Use isolated path-style AWS CLI configuration and explicit checksum compatibility settings.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 10:55:54 +00:00
Cédric VerstraetenandCopilot 8619bb1965 Use Garage environment secrets and document S3 setup
Avoid Garage's root-owned secret-file permission incompatibility with non-root Kubernetes mounts. Validate generated secret formats and document fresh installation, Vault provider configuration and preservation of existing MinIO data.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 10:51:01 +00:00
Cédric VerstraetenandCopilot 7bccddb995 Use persistent Garage S3 in local deployments and CI
Replace default MinIO operator installation with pinned non-root Garage, generated persistent credentials and authenticated S3 tests. Keep MinIO manifests intact for existing installations, add failure diagnostics and optional Slack handling, and align Kustomize chart pins.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 10:42:52 +00:00
Cédric VerstraetenandCopilot 9c3108b259 Align promoted frontend with hardened Hub chart 0.170.0 (#40)
Use frontend port 8080 and named NodePort routing, remove the invalid registry prefix on GHCR images, and validate both frontends with the published chart before infrastructure installation. Runtime preflight passes; full-stack CI remains blocked at MinIO before Hub, with separate missing Slack webhook failures.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
2026-11-04 11:30:18 +01:00
uug4ai 67be7d76e8 A new public release - 1793786033 2026-11-04 09:53:55 +00:00
cedricve a20419bf96 fix(vault): standardize MQTT variable naming from MQTTURI to MQTT_URI 2026-09-14 14:29:00 +00:00
cedricve 9a47ad3f4a feat(vault): add runtime configuration options and deployment examples for local development 2026-09-14 14:23:55 +00:00
cedricve 4704e4f0ab fix(docs): clarify Kerberos Vault integration and remove CONTINUOUS_FORWARDING variable 2026-09-10 18:31:13 +00:00
Cédric Verstraeten 739d9ec944 feat(database-import): enhance user import logic with verification and error handling 2026-09-03 12:30:45 +02:00
Cédric Verstraeten f7fef4b85c feat(database-import): enhance user import logic and add verification checks 2026-09-03 10:04:30 +00:00
Cédric Verstraeten 62244cff93 Merge pull request #34 from uug-ai/public-release-1786356403
A new public release - 1786356403
2026-08-13 13:30:19 +02:00
Cédric Verstraeten c7be7901ff feat(mongodb-configmap): add MongoDB connection behavior and TLS configuration options 2026-08-13 10:18:31 +00:00
uug4ai ba4f0df8be A new public release - 1786356403 2026-08-10 10:06:44 +00:00
Cédric Verstraeten 245b276d80 Update factory image version to v2.0.4 2026-07-30 16:18:08 +02:00
Cédric Verstraeten 442137cab2 Update kerberos-hub-values.yaml 2026-07-22 09:02:05 +02:00
Cédric Verstraeten 1751c76aa5 Merge pull request #33 from kerberos-io/feat/case-share-email-template
feat(email): add case-share white-label template + values
2026-07-22 09:00:35 +02:00
Cédric Verstraeten 67c9ae9dd5 Update kerberos-factory-deployment.yaml 2026-06-30 17:29:56 +02:00
Kilian Boute a8001b37dc feat(email): add case-share white-label template + values
Adds the Kerberos-branded share_case email template (html/txt) and wires
caseShare/caseShareTitle into the hub email template values so the case-share
invitation renders with the dedicated template instead of the recording-share
one.
2026-06-23 13:46:41 +00:00
Cédric Verstraeten 85feb1d574 Update container image source in deployment YAML 2026-06-23 09:46:46 +02:00
Cédric Verstraeten 63b6607c02 Update factory image version to v2.0.2 2026-06-23 09:17:29 +02:00
cedricve 1d5c492959 Update documentation to replace 'Kerberos Agents' with 'Agents' for consistency 2026-06-22 13:00:14 +00:00
cedricve 8f41e9c375 Refactor Factory references and update deployment configurations 2026-06-22 12:36:57 +00:00
uug4ai 469ae03f9c A new public release - 1781595581 2026-06-16 07:39:42 +00:00
uug4ai 0257f5f323 A new public release - 1776688403 2026-04-20 12:33:24 +00:00
Cédric Verstraeten cdb907a980 Rename deployment and update image reference 2026-03-09 06:58:20 +01:00
uug4ai 2c7065d439 A new public release - 1772868774 2026-03-07 07:32:55 +00:00
uug4ai 591873e4ed A new public release - 1772208444 2026-02-27 16:07:25 +00:00
uug4ai a6101b4cf4 A new public release - 1771807234 2026-02-23 00:40:36 +00:00
uug4ai b5dff01923 A new public release - 1770446130 2026-02-07 06:35:31 +00:00
cedricve 7a13391a8a Update license key in Kerberos Hub values
Replaces the existing license key with a new value in kerberos-hub-values.yaml. This may be required for license renewal, activation, or compliance.
2025-12-04 22:33:59 +01:00
Cédric Verstraeten 3162d1f915 Merge pull request #21 from kerberos-io/public-release-1764168026 2025-11-26 23:23:26 +01:00
cedricve ff78886fa5 Update storage class in rabbitmq-values.yaml from openebs-hostpath to ssd-hostpath for improved performance 2025-11-26 21:46:24 +01:00
cedricve 53a444849b Update storage class in mongodb-values.yaml from openebs-hostpath to ssd-hostpath for improved performance 2025-11-26 21:22:20 +01:00
cedricve 088e7f3600 Refactor kind.yaml to replace sleep commands with kubectl wait for improved deployment reliability; comment out custom layout volume configurations in kerberos-hub-values.yaml 2025-11-26 16:19:18 +01:00
cedricve 3d1d804c54 Merge branch 'feature/replace-bitnami-legacy' of github.com:kerberos-io/deployment into feature/replace-bitnami-legacy 2025-11-26 15:49:56 +01:00
cedricve 4f4512c332 Update MongoDB installation command to use --wait and --timeout options; add allowInsecureImages parameter to RabbitMQ values 2025-11-26 15:49:31 +01:00
uug4ai 18edad9b0d A new public release - 1764168026 2025-11-26 14:40:28 +00:00
Cédric Verstraeten 48975025bb Merge branch 'main' into feature/replace-bitnami-legacy 2025-11-26 15:33:11 +01:00
cedricve c522cf1f51 Replace Bitnami images with Bitnami Legacy images for MongoDB and RabbitMQ 2025-11-26 13:38:27 +01:00
uug4ai 80fe4c2057 A new public release - 1756996839 2025-09-04 14:40:40 +00:00
uug4ai 934429598b A new public release - 1754552209 2025-08-07 07:36:50 +00:00
Cédric Verstraeten 0843c80e22 Refactor SSD hostpath StorageClass configuration to use microk8s provisioner and simplify parameters 2025-05-20 12:52:49 +02:00
Cédric Verstraeten 93e3982c86 Add OpenEBS storage class configuration and update deployment workflow 2025-05-20 12:52:26 +02:00
uug4ai 67672593da A new public release - 1747736737 2025-05-20 10:25:38 +00:00
uug4ai 65628ed746 A new public release - 1743746495 2025-04-04 06:01:36 +00:00
uug4ai 9ebdb11b34 A new public release - 1742908520 2025-03-25 13:15:21 +00:00