From 177b43c17cdeb20dcbde8dc85d9527a2eebe67a1 Mon Sep 17 00:00:00 2001 From: Venact Installer Date: Fri, 2 Oct 2026 11:00:57 +0000 Subject: [PATCH] Commit install canvas seed --- .../admin-auth-site-current.vauth/canvas.json | 443 ++++++++++++++++++ .../metadata.json | 3 + .../canvas.json | 14 + .../metadata.json | 3 + .../srvr-t5-scripted.yaml | 25 + .../srvr-t5gitfrg.yaml | 30 ++ .../srvr-t5venact.yaml | 108 +++++ 7 files changed, 626 insertions(+) create mode 100644 envs/test5/admin-auth-site-current.vauth/canvas.json create mode 100644 envs/test5/admin-auth-site-current.vauth/metadata.json create mode 100644 envs/test5/admin-infra-site-current.vinfra/canvas.json create mode 100644 envs/test5/admin-infra-site-current.vinfra/metadata.json create mode 100644 envs/test5/admin-infra-site-current.vinfra/srvr-t5-scripted.yaml create mode 100644 envs/test5/admin-infra-site-current.vinfra/srvr-t5gitfrg.yaml create mode 100644 envs/test5/admin-infra-site-current.vinfra/srvr-t5venact.yaml diff --git a/envs/test5/admin-auth-site-current.vauth/canvas.json b/envs/test5/admin-auth-site-current.vauth/canvas.json new file mode 100644 index 0000000..1e07f08 --- /dev/null +++ b/envs/test5/admin-auth-site-current.vauth/canvas.json @@ -0,0 +1,443 @@ +{ + "groups": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system administrators.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "name": "MENTORS-LOCAL" + } + ], + "layout": {}, + "roles": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system access.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "merged_to_group_name": "ADMINS", + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "merged_to_group_name": "VAULT-BOOT", + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "merged_to_group_name": "EVERYONE", + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "merged_to_group_name": "MENTORS-ONLINE", + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "merged_to_group_name": "MENTORS-LOCAL", + "name": "MENTORS-LOCAL" + } + ], + "schema_version": 1, + "stickies": [], + "user_memberships": [] +} diff --git a/envs/test5/admin-auth-site-current.vauth/metadata.json b/envs/test5/admin-auth-site-current.vauth/metadata.json new file mode 100644 index 0000000..e311293 --- /dev/null +++ b/envs/test5/admin-auth-site-current.vauth/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "auth" +} diff --git a/envs/test5/admin-infra-site-current.vinfra/canvas.json b/envs/test5/admin-infra-site-current.vinfra/canvas.json new file mode 100644 index 0000000..d130b23 --- /dev/null +++ b/envs/test5/admin-infra-site-current.vinfra/canvas.json @@ -0,0 +1,14 @@ +{ + "schema_version": 2, + "servers": [ + { + "id": "srvr-t5-scripted" + }, + { + "id": "srvr-t5gitfrg" + }, + { + "id": "srvr-t5venact" + } + ] +} diff --git a/envs/test5/admin-infra-site-current.vinfra/metadata.json b/envs/test5/admin-infra-site-current.vinfra/metadata.json new file mode 100644 index 0000000..a7cb3ce --- /dev/null +++ b/envs/test5/admin-infra-site-current.vinfra/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "infra" +} diff --git a/envs/test5/admin-infra-site-current.vinfra/srvr-t5-scripted.yaml b/envs/test5/admin-infra-site-current.vinfra/srvr-t5-scripted.yaml new file mode 100644 index 0000000..96d80c4 --- /dev/null +++ b/envs/test5/admin-infra-site-current.vinfra/srvr-t5-scripted.yaml @@ -0,0 +1,25 @@ +id: srvr-t5-scripted +bootstrap_label: scripted-mentor-provider +name: scripted-mentor-provider +address: http://192.168.4.162:8790/v1 +kind: ai +grid_x: 23 +grid_y: 20 +services: + - id: svce-t5-scripted + name: scripted-provider + port: 8790 + connectors: + - connector_id: cntr-t5-scripted + name: ai-provider (scripted-provider) + connector_type: ai-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + api_key: vault:///AI_PROVIDER_SCRIPTED_PROVIDER_API_KEY + config: + models: + - id: venact-scripted + supports_tools: true + kind: openai diff --git a/envs/test5/admin-infra-site-current.vinfra/srvr-t5gitfrg.yaml b/envs/test5/admin-infra-site-current.vinfra/srvr-t5gitfrg.yaml new file mode 100644 index 0000000..31cb60a --- /dev/null +++ b/envs/test5/admin-infra-site-current.vinfra/srvr-t5gitfrg.yaml @@ -0,0 +1,30 @@ +id: srvr-t5gitfrg +bootstrap_label: shared gitea +name: Forgejo test5 +address: 192.168.4.198 +kind: git +grid_x: 23 +grid_y: 0 +services: + - id: svce-t5forgejo + name: Gitea + port: 3000 + connectors: + - connector_id: cntr-4osc1gfk + name: Git Provider + connector_type: git-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + service_token: vault:///PRIMARY_GIT_SERVICE_TOKEN + oauth2_client_secret: vault:///PRIMARY_GIT_OAUTH2_CLIENT_SECRET + config: + idp_server: test5 + management_ssh: venact@192.168.4.198 + management_ssh_host_key: 192.168.4.198 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIEAjubVuuyHWxzU0FyXqgENqUdA+sV7og3syv+RZr3Me + org: venact + primary: true + url: http://192.168.4.198:3000 + public_url: https://git.test5.venact.eu + kind: forgejo diff --git a/envs/test5/admin-infra-site-current.vinfra/srvr-t5venact.yaml b/envs/test5/admin-infra-site-current.vinfra/srvr-t5venact.yaml new file mode 100644 index 0000000..a04a10f --- /dev/null +++ b/envs/test5/admin-infra-site-current.vinfra/srvr-t5venact.yaml @@ -0,0 +1,108 @@ +id: srvr-t5venact +bootstrap_label: local venact +name: venact-test5 +address: 192.168.4.178 +kind: venact +grid_x: 18 +grid_y: 10 +services: + - id: svce-t5login + name: Login + ports: + - 80 + - 7801 + config: module:login + containers: + - venact-login + connectors: [] + - id: svce-t5admin + name: Admin + ports: + - 7810 + - 7811 + config: module:admin + containers: + - venact-admin + connectors: [] + - id: svce-t5studio + name: Studio + ports: + - 7820 + - 7821 + config: module:studio + containers: + - venact-studio + connectors: + - connector_id: cntr-stdi01gt + name: Git + connector_type: git-consumer + handle_side: left + connected_to: + - cntr-4osc1gfk + auth: {} + secrets: {} + config: {} + kind: git + - id: svce-t5compute + name: Compute + ports: + - 7830 + - 7831 + config: module:compute + containers: + - venact-compute + connectors: + - connector_id: cntr-comp01st + name: storage-consumer + connector_type: storage-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: storage + - connector_id: cntr-comp01en + name: engine-consumer + connector_type: engine-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: engine + - id: svce-t5mentor + name: Mentor + ports: + - 7840 + - 7841 + config: module:mentor + containers: + - venact-mentor + connectors: + - connector_id: cntr-mntr-online + name: online + connector_type: ai-consumer + handle_side: left + connected_to: + - cntr-t5-scripted + auth: {} + secrets: {} + config: {} + kind: ai + - connector_id: cntr-mntr-local + name: local + connector_type: ai-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: ai + - id: svce-t5resmon + name: Resmon + ports: + - 7890 + config: module:resmon + containers: + - resmon + connectors: []