From 004cc07589c22883aab22a6446bd8e15f546ab12 Mon Sep 17 00:00:00 2001 From: Venact Installer Date: Sun, 4 Oct 2026 18:11:35 +0000 Subject: [PATCH] Commit install canvas seed --- .../admin-auth-site-current.vauth/canvas.json | 443 ++++++++++++++++++ .../metadata.json | 3 + .../canvas.json | 14 + .../metadata.json | 3 + .../srvr-d7-scripted.yaml | 25 + .../srvr-d7gitfrg.yaml | 30 ++ .../srvr-d7venact.yaml | 109 +++++ 7 files changed, 627 insertions(+) create mode 100644 envs/dev7/admin-auth-site-current.vauth/canvas.json create mode 100644 envs/dev7/admin-auth-site-current.vauth/metadata.json create mode 100644 envs/dev7/admin-infra-site-current.vinfra/canvas.json create mode 100644 envs/dev7/admin-infra-site-current.vinfra/metadata.json create mode 100644 envs/dev7/admin-infra-site-current.vinfra/srvr-d7-scripted.yaml create mode 100644 envs/dev7/admin-infra-site-current.vinfra/srvr-d7gitfrg.yaml create mode 100644 envs/dev7/admin-infra-site-current.vinfra/srvr-d7venact.yaml diff --git a/envs/dev7/admin-auth-site-current.vauth/canvas.json b/envs/dev7/admin-auth-site-current.vauth/canvas.json new file mode 100644 index 0000000..1e07f08 --- /dev/null +++ b/envs/dev7/admin-auth-site-current.vauth/canvas.json @@ -0,0 +1,443 @@ +{ + "groups": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system administrators.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "name": "MENTORS-LOCAL" + } + ], + "layout": {}, + "roles": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system access.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "merged_to_group_name": "ADMINS", + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "merged_to_group_name": "VAULT-BOOT", + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "merged_to_group_name": "EVERYONE", + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "merged_to_group_name": "MENTORS-ONLINE", + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "merged_to_group_name": "MENTORS-LOCAL", + "name": "MENTORS-LOCAL" + } + ], + "schema_version": 1, + "stickies": [], + "user_memberships": [] +} diff --git a/envs/dev7/admin-auth-site-current.vauth/metadata.json b/envs/dev7/admin-auth-site-current.vauth/metadata.json new file mode 100644 index 0000000..e311293 --- /dev/null +++ b/envs/dev7/admin-auth-site-current.vauth/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "auth" +} diff --git a/envs/dev7/admin-infra-site-current.vinfra/canvas.json b/envs/dev7/admin-infra-site-current.vinfra/canvas.json new file mode 100644 index 0000000..a97b7a7 --- /dev/null +++ b/envs/dev7/admin-infra-site-current.vinfra/canvas.json @@ -0,0 +1,14 @@ +{ + "schema_version": 2, + "servers": [ + { + "id": "srvr-d7-scripted" + }, + { + "id": "srvr-d7gitfrg" + }, + { + "id": "srvr-d7venact" + } + ] +} diff --git a/envs/dev7/admin-infra-site-current.vinfra/metadata.json b/envs/dev7/admin-infra-site-current.vinfra/metadata.json new file mode 100644 index 0000000..a7cb3ce --- /dev/null +++ b/envs/dev7/admin-infra-site-current.vinfra/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "infra" +} diff --git a/envs/dev7/admin-infra-site-current.vinfra/srvr-d7-scripted.yaml b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7-scripted.yaml new file mode 100644 index 0000000..e8d8255 --- /dev/null +++ b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7-scripted.yaml @@ -0,0 +1,25 @@ +id: srvr-d7-scripted +bootstrap_label: scripted-mentor-provider +name: scripted-mentor-provider +address: http://192.168.4.162:8790/v1 +kind: ai +grid_x: 23 +grid_y: 20 +services: + - id: svce-d7-scripted + name: scripted-provider + port: 8790 + connectors: + - connector_id: cntr-d7-scripted + name: ai-provider (scripted-provider) + connector_type: ai-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + api_key: vault:///AI_PROVIDER_SCRIPTED_PROVIDER_API_KEY + config: + models: + - id: venact-scripted + supports_tools: true + kind: openai diff --git a/envs/dev7/admin-infra-site-current.vinfra/srvr-d7gitfrg.yaml b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7gitfrg.yaml new file mode 100644 index 0000000..a29375a --- /dev/null +++ b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7gitfrg.yaml @@ -0,0 +1,30 @@ +id: srvr-d7gitfrg +bootstrap_label: shared gitea +name: Forgejo dev7 +address: 192.168.4.197 +kind: git +grid_x: 23 +grid_y: 0 +services: + - id: svce-d7forgejo + name: Gitea + port: 3000 + connectors: + - connector_id: cntr-4osc1gfk + name: Git Provider + connector_type: git-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + service_token: vault:///PRIMARY_GIT_SERVICE_TOKEN + oauth2_client_secret: vault:///PRIMARY_GIT_OAUTH2_CLIENT_SECRET + config: + idp_server: dev7 + management_ssh: venact@192.168.4.197 + management_ssh_host_key: 192.168.4.197 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDxQShW46ZPEDszkxMDEu3GtnCBTJZRZ34iNkpHqx+ti + org: venact + primary: true + url: http://192.168.4.197:3000 + public_url: https://git.dev7.venact.eu + kind: forgejo diff --git a/envs/dev7/admin-infra-site-current.vinfra/srvr-d7venact.yaml b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7venact.yaml new file mode 100644 index 0000000..6df32df --- /dev/null +++ b/envs/dev7/admin-infra-site-current.vinfra/srvr-d7venact.yaml @@ -0,0 +1,109 @@ +id: srvr-d7venact +bootstrap_label: local venact +name: venact-dev7 +address: 192.168.4.157 +kind: venact +grid_x: 18 +grid_y: 10 +services: + - id: svce-d7login + name: Login + ports: + - 80 + - 7801 + config: module:login + containers: + - venact-login + connectors: [] + - id: svce-d7admin + name: Admin + ports: + - 7810 + - 7811 + config: module:admin + containers: + - venact-admin + connectors: [] + - id: svce-d7studio + name: Studio + ports: + - 7820 + - 7821 + config: module:studio + containers: + - venact-studio + connectors: + - connector_id: cntr-stdi01gt + name: Git + connector_type: git-consumer + handle_side: left + connected_to: + - cntr-4osc1gfk + auth: {} + secrets: {} + config: {} + kind: git + - id: svce-d7compute + name: Compute + ports: + - 7830 + - 7831 + config: module:compute + containers: + - venact-compute + connectors: + - connector_id: cntr-comp01st + name: storage-consumer + connector_type: storage-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: storage + - connector_id: cntr-comp01en + name: engine-consumer + connector_type: engine-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: engine + - id: svce-d7mentor + name: Mentor + ports: + - 7840 + - 7841 + config: module:mentor + containers: + - venact-mentor + connectors: + - connector_id: cntr-mntr-online + name: online + connector_type: ai-consumer + handle_side: left + connected_to: + - cntr-d7-scripted + auth: {} + secrets: {} + config: {} + kind: ai + - connector_id: cntr-mntr-local + name: local + connector_type: ai-consumer + handle_side: left + connected_to: + - cntr-d7-scripted + auth: {} + secrets: {} + config: {} + kind: ai + - id: svce-d7resmon + name: Resmon + ports: + - 7890 + config: module:resmon + containers: + - resmon + connectors: []