From b03feb49558b07e158ac1b723825f947ca682ecc Mon Sep 17 00:00:00 2001 From: Venact Installer Date: Fri, 2 Oct 2026 10:56:31 +0000 Subject: [PATCH] Commit install canvas seed --- .../admin-auth-site-current.vauth/canvas.json | 443 ++++++++++++++++++ .../metadata.json | 3 + .../canvas.json | 14 + .../metadata.json | 3 + .../srvr-t3-scripted.yaml | 25 + .../srvr-t3gitfrg.yaml | 30 ++ .../srvr-t3venact.yaml | 108 +++++ 7 files changed, 626 insertions(+) create mode 100644 envs/test3/admin-auth-site-current.vauth/canvas.json create mode 100644 envs/test3/admin-auth-site-current.vauth/metadata.json create mode 100644 envs/test3/admin-infra-site-current.vinfra/canvas.json create mode 100644 envs/test3/admin-infra-site-current.vinfra/metadata.json create mode 100644 envs/test3/admin-infra-site-current.vinfra/srvr-t3-scripted.yaml create mode 100644 envs/test3/admin-infra-site-current.vinfra/srvr-t3gitfrg.yaml create mode 100644 envs/test3/admin-infra-site-current.vinfra/srvr-t3venact.yaml diff --git a/envs/test3/admin-auth-site-current.vauth/canvas.json b/envs/test3/admin-auth-site-current.vauth/canvas.json new file mode 100644 index 0000000..1e07f08 --- /dev/null +++ b/envs/test3/admin-auth-site-current.vauth/canvas.json @@ -0,0 +1,443 @@ +{ + "groups": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system administrators.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "name": "MENTORS-LOCAL" + } + ], + "layout": {}, + "roles": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system access.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "merged_to_group_name": "ADMINS", + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "merged_to_group_name": "VAULT-BOOT", + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "merged_to_group_name": "EVERYONE", + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "merged_to_group_name": "MENTORS-ONLINE", + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "merged_to_group_name": "MENTORS-LOCAL", + "name": "MENTORS-LOCAL" + } + ], + "schema_version": 1, + "stickies": [], + "user_memberships": [] +} diff --git a/envs/test3/admin-auth-site-current.vauth/metadata.json b/envs/test3/admin-auth-site-current.vauth/metadata.json new file mode 100644 index 0000000..e311293 --- /dev/null +++ b/envs/test3/admin-auth-site-current.vauth/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "auth" +} diff --git a/envs/test3/admin-infra-site-current.vinfra/canvas.json b/envs/test3/admin-infra-site-current.vinfra/canvas.json new file mode 100644 index 0000000..23354f8 --- /dev/null +++ b/envs/test3/admin-infra-site-current.vinfra/canvas.json @@ -0,0 +1,14 @@ +{ + "schema_version": 2, + "servers": [ + { + "id": "srvr-t3-scripted" + }, + { + "id": "srvr-t3gitfrg" + }, + { + "id": "srvr-t3venact" + } + ] +} diff --git a/envs/test3/admin-infra-site-current.vinfra/metadata.json b/envs/test3/admin-infra-site-current.vinfra/metadata.json new file mode 100644 index 0000000..a7cb3ce --- /dev/null +++ b/envs/test3/admin-infra-site-current.vinfra/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "infra" +} diff --git a/envs/test3/admin-infra-site-current.vinfra/srvr-t3-scripted.yaml b/envs/test3/admin-infra-site-current.vinfra/srvr-t3-scripted.yaml new file mode 100644 index 0000000..2e8d447 --- /dev/null +++ b/envs/test3/admin-infra-site-current.vinfra/srvr-t3-scripted.yaml @@ -0,0 +1,25 @@ +id: srvr-t3-scripted +bootstrap_label: scripted-mentor-provider +name: scripted-mentor-provider +address: http://192.168.4.162:8790/v1 +kind: ai +grid_x: 23 +grid_y: 20 +services: + - id: svce-t3-scripted + name: scripted-provider + port: 8790 + connectors: + - connector_id: cntr-t3-scripted + name: ai-provider (scripted-provider) + connector_type: ai-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + api_key: vault:///AI_PROVIDER_SCRIPTED_PROVIDER_API_KEY + config: + models: + - id: venact-scripted + supports_tools: true + kind: openai diff --git a/envs/test3/admin-infra-site-current.vinfra/srvr-t3gitfrg.yaml b/envs/test3/admin-infra-site-current.vinfra/srvr-t3gitfrg.yaml new file mode 100644 index 0000000..6c6efc5 --- /dev/null +++ b/envs/test3/admin-infra-site-current.vinfra/srvr-t3gitfrg.yaml @@ -0,0 +1,30 @@ +id: srvr-t3gitfrg +bootstrap_label: shared gitea +name: Forgejo test3 +address: 192.168.4.193 +kind: git +grid_x: 23 +grid_y: 0 +services: + - id: svce-t3forgejo + name: Gitea + port: 3000 + connectors: + - connector_id: cntr-4osc1gfk + name: Git Provider + connector_type: git-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + service_token: vault:///PRIMARY_GIT_SERVICE_TOKEN + oauth2_client_secret: vault:///PRIMARY_GIT_OAUTH2_CLIENT_SECRET + config: + idp_server: test3 + management_ssh: venact@192.168.4.193 + management_ssh_host_key: 192.168.4.193 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIBA7fk62dqie7MzpxlhuwFIyPI4KhTnqdAFvHDw52PP4 + org: venact + primary: true + url: http://192.168.4.193:3000 + public_url: https://git.test3.venact.eu + kind: forgejo diff --git a/envs/test3/admin-infra-site-current.vinfra/srvr-t3venact.yaml b/envs/test3/admin-infra-site-current.vinfra/srvr-t3venact.yaml new file mode 100644 index 0000000..3d27dc5 --- /dev/null +++ b/envs/test3/admin-infra-site-current.vinfra/srvr-t3venact.yaml @@ -0,0 +1,108 @@ +id: srvr-t3venact +bootstrap_label: local venact +name: venact-test3 +address: 192.168.4.173 +kind: venact +grid_x: 18 +grid_y: 10 +services: + - id: svce-t3login + name: Login + ports: + - 80 + - 7801 + config: module:login + containers: + - venact-login + connectors: [] + - id: svce-t3admin + name: Admin + ports: + - 7810 + - 7811 + config: module:admin + containers: + - venact-admin + connectors: [] + - id: svce-t3studio + name: Studio + ports: + - 7820 + - 7821 + config: module:studio + containers: + - venact-studio + connectors: + - connector_id: cntr-stdi01gt + name: Git + connector_type: git-consumer + handle_side: left + connected_to: + - cntr-4osc1gfk + auth: {} + secrets: {} + config: {} + kind: git + - id: svce-t3compute + name: Compute + ports: + - 7830 + - 7831 + config: module:compute + containers: + - venact-compute + connectors: + - connector_id: cntr-comp01st + name: storage-consumer + connector_type: storage-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: storage + - connector_id: cntr-comp01en + name: engine-consumer + connector_type: engine-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: engine + - id: svce-t3mentor + name: Mentor + ports: + - 7840 + - 7841 + config: module:mentor + containers: + - venact-mentor + connectors: + - connector_id: cntr-mntr-online + name: online + connector_type: ai-consumer + handle_side: left + connected_to: + - cntr-t3-scripted + auth: {} + secrets: {} + config: {} + kind: ai + - connector_id: cntr-mntr-local + name: local + connector_type: ai-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: ai + - id: svce-t3resmon + name: Resmon + ports: + - 7890 + config: module:resmon + containers: + - resmon + connectors: []