4 Commits

Author	SHA1	Message	Date
Sienna Meridian Satterwhite	d5b963253b	refactor: cross-platform tool downloads, configurable infra dir and ACME email ... - Make tool downloads platform-aware (darwin/linux, arm64/amd64) - Add buildctl to bundled tools - Add get_infra_dir() with config fallback for REPO_ROOT resolution - Add ACME email to sunbeam config (set/get) - Add REGISTRY_HOST_IP substitution in kustomize builds - Update Kratos admin identity schema to employee - Fix logs command to use production tunnel and context	2026-03-10 19:37:02 +00:00
Sienna Meridian Satterwhite	14dd685398	feat: add kratos-admin-ui build target and user management commands ... - images.py: add 'kratos-admin' build target (deno task build → docker buildx → containerd pre-seed → rollout restart) - secrets.py: seed kratos-admin-ui secrets (cookie, csrf, admin identity); fix _seed_kratos_admin_identity to return (recovery_link, recovery_code) and print both in cmd_seed output - users.py: new module with cmd_user_{list,get,create,delete,recover} via port-forwarded kratos-admin API - cli.py: add 'user' verb dispatching to users.py subcommands - tools.py: minor tool resolution updates	2026-03-03 11:32:09 +00:00
Sienna Meridian Satterwhite	fb3fd93f0f	fix: sunbeam apply and bootstrap reliability ... manifests.py: fix REPO_ROOT parents index (was 3, needed 2) which caused kustomize overlay lookup to resolve against the wrong directory. tools.py: call ensure_tool("helm") before running kustomize so the bundled helm v3.17.1 is on PATH; system helm v4 dropped the -c flag that kustomize 5.6.0 uses for version detection. gitea.py: pass --must-change-password=false to gitea admin user change-password, removing the separate Postgres UPDATE workaround that was fragile and required a second exec into the CNPG pod.	2026-03-03 00:57:39 +00:00
Sienna Meridian Satterwhite	cdc109d728	feat: initial sunbeam CLI package ... stdlib-only Python CLI replacing infrastructure/scripts/sunbeam.py. Verbs: up, down, status, apply, seed, verify, logs, restart, get, build, mirror, bootstrap. Service scoping via ns/name target syntax. Auto-bundled kubectl/kustomize/helm (SHA256-verified, cached in ~/.local/share/sunbeam/bin). 63 unittest tests, all passing.	2026-03-02 20:59:57 +00:00