commit 18ed7dd970504fac8ec12f8a591d5419b473201b Author: Venact Installer Date: Fri Oct 2 11:01:12 2026 +0000 Commit install canvas seed diff --git a/envs/test4/admin-auth-site-current.vauth/canvas.json b/envs/test4/admin-auth-site-current.vauth/canvas.json new file mode 100644 index 0000000..1e07f08 --- /dev/null +++ b/envs/test4/admin-auth-site-current.vauth/canvas.json @@ -0,0 +1,443 @@ +{ + "groups": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system administrators.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "name": "MENTORS-LOCAL" + } + ], + "layout": {}, + "roles": [ + { + "capacities": [ + { + "action": "EVERYTHING", + "module": "SUPER", + "object": null, + "permissions": "lrwx" + }, + { + "action": "infrastructure", + "module": "ADMIN", + "object": null, + "permissions": "-rwx" + }, + { + "action": "request-audit", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/shared", + "permissions": "---x" + } + ], + "description": "Full system access.", + "grid_x": 4, + "grid_y": 4, + "members": [ + "superadmin" + ], + "merged_to_group_name": "ADMINS", + "name": "ADMINS" + }, + { + "capacities": [ + { + "action": "secrets", + "module": "LOGIN", + "object": null, + "permissions": "-r--" + } + ], + "description": "Read-only Login vault bootstrap identities.", + "grid_x": 24, + "grid_y": 15, + "members": [ + "venact-boot-admin", + "venact-boot-studio", + "venact-boot-compute", + "venact-boot-mentor" + ], + "merged_to_group_name": "VAULT-BOOT", + "name": "VAULT-BOOT" + }, + { + "capacities": [ + { + "action": "session", + "module": "LOGIN", + "object": null, + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "lrwx" + }, + { + "action": "terminal", + "module": "STUDIO", + "object": "/users/$SELF", + "permissions": "---x" + }, + { + "action": "workspaces", + "module": "STUDIO", + "object": "/shared", + "permissions": "l---" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/gitea", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d1forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d2forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d3forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d4forgejo", + "permissions": "---x" + }, + { + "action": "sso-clients", + "module": "LOGIN", + "object": "/git-cntr-d5forgejo", + "permissions": "---x" + } + ], + "description": "All authenticated users.", + "grid_x": 4, + "grid_y": 15, + "members": [ + "everyone" + ], + "merged_to_group_name": "EVERYONE", + "name": "EVERYONE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/online", + "permissions": "l--x" + } + ], + "description": "Machine identity for the online (cloud) mentor.", + "grid_x": 24, + "grid_y": 4, + "members": [ + "mentor" + ], + "merged_to_group_name": "MENTORS-ONLINE", + "name": "MENTORS-ONLINE" + }, + { + "capacities": [ + { + "action": "skill-chat", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-guide", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-suggest", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "skill-act", + "module": "MENTOR", + "object": null, + "permissions": "---x" + }, + { + "action": "use-connector", + "module": "MENTOR", + "object": "/local", + "permissions": "l--x" + } + ], + "description": "Machine identity for the local mentor.", + "grid_x": 4, + "grid_y": 29, + "members": [ + "mentor-local" + ], + "merged_to_group_name": "MENTORS-LOCAL", + "name": "MENTORS-LOCAL" + } + ], + "schema_version": 1, + "stickies": [], + "user_memberships": [] +} diff --git a/envs/test4/admin-auth-site-current.vauth/metadata.json b/envs/test4/admin-auth-site-current.vauth/metadata.json new file mode 100644 index 0000000..e311293 --- /dev/null +++ b/envs/test4/admin-auth-site-current.vauth/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "auth" +} diff --git a/envs/test4/admin-infra-site-current.vinfra/canvas.json b/envs/test4/admin-infra-site-current.vinfra/canvas.json new file mode 100644 index 0000000..c4caba5 --- /dev/null +++ b/envs/test4/admin-infra-site-current.vinfra/canvas.json @@ -0,0 +1,14 @@ +{ + "schema_version": 2, + "servers": [ + { + "id": "srvr-t4-scripted" + }, + { + "id": "srvr-t4gitfrg" + }, + { + "id": "srvr-t4venact" + } + ] +} diff --git a/envs/test4/admin-infra-site-current.vinfra/metadata.json b/envs/test4/admin-infra-site-current.vinfra/metadata.json new file mode 100644 index 0000000..a7cb3ce --- /dev/null +++ b/envs/test4/admin-infra-site-current.vinfra/metadata.json @@ -0,0 +1,3 @@ +{ + "kind": "infra" +} diff --git a/envs/test4/admin-infra-site-current.vinfra/srvr-t4-scripted.yaml b/envs/test4/admin-infra-site-current.vinfra/srvr-t4-scripted.yaml new file mode 100644 index 0000000..30b85b4 --- /dev/null +++ b/envs/test4/admin-infra-site-current.vinfra/srvr-t4-scripted.yaml @@ -0,0 +1,25 @@ +id: srvr-t4-scripted +bootstrap_label: scripted-mentor-provider +name: scripted-mentor-provider +address: http://192.168.4.162:8790/v1 +kind: ai +grid_x: 23 +grid_y: 20 +services: + - id: svce-t4-scripted + name: scripted-provider + port: 8790 + connectors: + - connector_id: cntr-t4-scripted + name: ai-provider (scripted-provider) + connector_type: ai-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + api_key: vault:///AI_PROVIDER_SCRIPTED_PROVIDER_API_KEY + config: + models: + - id: venact-scripted + supports_tools: true + kind: openai diff --git a/envs/test4/admin-infra-site-current.vinfra/srvr-t4gitfrg.yaml b/envs/test4/admin-infra-site-current.vinfra/srvr-t4gitfrg.yaml new file mode 100644 index 0000000..121727a --- /dev/null +++ b/envs/test4/admin-infra-site-current.vinfra/srvr-t4gitfrg.yaml @@ -0,0 +1,30 @@ +id: srvr-t4gitfrg +bootstrap_label: shared gitea +name: Forgejo test4 +address: 192.168.4.194 +kind: git +grid_x: 23 +grid_y: 0 +services: + - id: svce-t4forgejo + name: Gitea + port: 3000 + connectors: + - connector_id: cntr-4osc1gfk + name: Git Provider + connector_type: git-provider + handle_side: right + connected_to: [] + auth: {} + secrets: + service_token: vault:///PRIMARY_GIT_SERVICE_TOKEN + oauth2_client_secret: vault:///PRIMARY_GIT_OAUTH2_CLIENT_SECRET + config: + idp_server: test4 + management_ssh: venact@192.168.4.194 + management_ssh_host_key: 192.168.4.194 ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIDV9wqkH7lxF87rwEHFLY+u9FgYBH/1wAYhMMWiaX9JA + org: venact + primary: true + url: http://192.168.4.194:3000 + public_url: https://git.test4.venact.eu + kind: forgejo diff --git a/envs/test4/admin-infra-site-current.vinfra/srvr-t4venact.yaml b/envs/test4/admin-infra-site-current.vinfra/srvr-t4venact.yaml new file mode 100644 index 0000000..008289b --- /dev/null +++ b/envs/test4/admin-infra-site-current.vinfra/srvr-t4venact.yaml @@ -0,0 +1,108 @@ +id: srvr-t4venact +bootstrap_label: local venact +name: venact-test4 +address: 192.168.4.174 +kind: venact +grid_x: 18 +grid_y: 10 +services: + - id: svce-t4login + name: Login + ports: + - 80 + - 7801 + config: module:login + containers: + - venact-login + connectors: [] + - id: svce-t4admin + name: Admin + ports: + - 7810 + - 7811 + config: module:admin + containers: + - venact-admin + connectors: [] + - id: svce-t4studio + name: Studio + ports: + - 7820 + - 7821 + config: module:studio + containers: + - venact-studio + connectors: + - connector_id: cntr-stdi01gt + name: Git + connector_type: git-consumer + handle_side: left + connected_to: + - cntr-4osc1gfk + auth: {} + secrets: {} + config: {} + kind: git + - id: svce-t4compute + name: Compute + ports: + - 7830 + - 7831 + config: module:compute + containers: + - venact-compute + connectors: + - connector_id: cntr-comp01st + name: storage-consumer + connector_type: storage-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: storage + - connector_id: cntr-comp01en + name: engine-consumer + connector_type: engine-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: engine + - id: svce-t4mentor + name: Mentor + ports: + - 7840 + - 7841 + config: module:mentor + containers: + - venact-mentor + connectors: + - connector_id: cntr-mntr-online + name: online + connector_type: ai-consumer + handle_side: left + connected_to: + - cntr-t4-scripted + auth: {} + secrets: {} + config: {} + kind: ai + - connector_id: cntr-mntr-local + name: local + connector_type: ai-consumer + handle_side: left + connected_to: [] + auth: {} + secrets: {} + config: {} + kind: ai + - id: svce-t4resmon + name: Resmon + ports: + - 7890 + config: module:resmon + containers: + - resmon + connectors: []