clawmates/deploy/helm/teamclaw/Chart.yaml at 05e96126882724e4da1533fe72526aff7d824414 - clawmates - Gitea: Git with a cup of tea

osobh/clawmates

Files

T

Omar SobhandClaude Fable 5 70ec39f696 P6: S3 blob store, Helm chart, air-gapped installer verify loop

- S3BlobStore (object_store, path-style) behind the same BlobStore trait,
  tested against a REAL MinIO container (round trip, overwrite, NotFound
  on get and delete, nested keys); [storage] backend=local|s3 config with
  validation + server-side selection (S3 creds via env overlay)
- Helm chart: server pod with the secret broker as a SIDECAR sharing a
  private emptyDir unix socket (no network hop carries credentials),
  frontend, optional local PVC vs S3, OIDC/oauth values, unbuffered-SSE
  ingress annotations, NetworkPolicies (frontend->server only), hardened
  securityContexts; ci/check-helm.sh lints AND asserts the rendered
  topology properties
- deploy/airgapped/install.sh: offline signature+checksum verification via
  the bundled teamclaw-bundler BEFORE any docker load; --verify-only mode;
  ci/test-install.sh rehearses clean/tampered/wrong-key paths with the
  real binary
- CI: helm gate + installer rehearsal wired in

149 Rust tests; helm lint + rendered assertions green; installer
verify-path rehearsal green.

Co-Authored-By: Claude Fable 5 <[email protected]>

2026-06-10 08:19:43 -05:00

10 lines

331 B

YAML

Raw Blame History

 apiVersion: v2
 name: teamclaw
 description: >-
   TeamClaw — collaborative AI agents with a human-in-the-loop safety layer.
   One chart deploys the server (API + gateway + runtime), the secret broker,
   and the frontend; Postgres is either managed (external URL) or in-cluster.
 type: application
 version: 0.1.0
 appVersion: "0.1.0"