3 Commits

Author	SHA1	Message	Date
Adolfo Delorenzo	dfed6ddba8	feat(update): channels, maintenance windows, min-version gate ... Phase 6 of v0.3. The update agent now refuses to apply artifacts whose channel doesn't match local policy, whose architecture differs from the running host, or whose min_compatible_version is above the current version. It also refuses to apply outside a configured maintenance window unless --force is given. New package update/pkg/config: - config.Load parses /etc/kubesolo/update.conf (key=value, # comments, unknown keys ignored). Missing file is fine — fresh systems before cloud-init has run. - ParseWindow handles "HH:MM-HH:MM" plus the wrapping midnight case (e.g. "23:00-01:00"). Empty input -> AlwaysOpen (no constraint). Degenerate zero-length windows never match. - CompareVersions does a simple 3-component semver compare with the 'v' prefix optional and pre-release suffix ignored. - 14 unit tests total. update/pkg/image/image.UpdateMetadata gains three optional fields: - channel ("stable", "beta", ...) - min_compatible_version (refuse upgrade if current < this) - architecture ("amd64", "arm64", ...) update/cmd/opts.go reads update.conf and merges it into opts; explicit --server / --channel / --pubkey / --maintenance-window CLI flags override the file. New --force, --conf, --channel, --maintenance-window flags. Precedence: CLI > config file > package defaults. update/cmd/apply.go gains four gates in order: 1. Maintenance window — checked locally before any HTTP work; skipped with --force. 2. Channel — refused if metadata.channel doesn't match opts.Channel. 3. Architecture — refused if metadata.architecture != runtime.GOARCH. 4. Min compatible version — refused if FromVersion < min_compatible. All gate failures transition state to Failed with a clear LastError. cloud-init gains a top-level updates: block (Server, Channel, MaintenanceWindow, PubKey). cloud-init.ApplyUpdates writes /etc/kubesolo/update.conf from those fields on first boot. Empty block leaves any existing file alone (so hand-edited update.conf survives a reboot without cloud-init re-applying). 4 new tests cover empty / all / partial / parent-dir-creation cases. full-config.yaml example updated. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>	2026-05-14 18:21:46 -06:00
Adolfo Delorenzo	49a37e30e8	feat: add production hardening — Ed25519 signing, Portainer Edge, SSH extension (Phase 4) ... Image signing: - Ed25519 sign/verify package (pure Go stdlib, zero deps) - genkey and sign CLI subcommands for build system - Optional --pubkey flag for verifying updates on apply - Signature URLs in update metadata (latest.json) Portainer Edge Agent: - cloud-init portainer.go module writes K8s manifest - Auto-deploys Edge Agent when portainer.edge-agent.enabled - Full RBAC (ServiceAccount, ClusterRoleBinding, Deployment) - 5 Portainer tests in portainer_test.go Production tooling: - SSH debug extension builder (hack/build-ssh-extension.sh) - Boot performance benchmark (test/benchmark/bench-boot.sh) - Resource usage benchmark (test/benchmark/bench-resources.sh) - Deployment guide (docs/deployment-guide.md) Test results: 50 update agent tests + 22 cloud-init tests passing. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-11 11:26:23 -06:00
Adolfo Delorenzo	d900fa920e	feat: add cloud-init Go parser (Phase 2) ... Implement a lightweight cloud-init system for first-boot configuration: - Go parser for YAML config (hostname, network, KubeSolo settings) - Static/DHCP network modes with DNS override - KubeSolo extra flags and API server SAN configuration - Portainer Edge Agent and air-gapped deployment support - New init stage 45-cloud-init.sh runs before network/hostname stages - Stages 50/60 skip gracefully when cloud-init has already applied - Build script compiles static Linux/amd64 binary (~2.7 MB) - 17 unit tests covering parsing, validation, and example files - Full documentation at docs/cloud-init.md Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>	2026-02-11 10:39:05 -06:00