Commit Graph

112 Commits

Author SHA1 Message Date
Mondo Diaz
be139200d2 Fix dev deployment and revert CI changes
- Remove SBOM job (not starting, investigate later)
- Revert KICS rules change
- Fix memory requests to equal limits per cluster Kyverno policy
2026-01-15 19:31:44 +00:00
Mondo Diaz
bafb367811 Enable KICS job with explicit rules 2026-01-15 19:26:25 +00:00
Mondo Diaz
3b9c6bcca7 Use internal PyPI proxy for integration test dependencies 2026-01-15 19:19:51 +00:00
Mondo Diaz
9742f15c03 Add SBOM generation and atomic Helm deployments
- Add SBOM job using Syft to generate SPDX and CycloneDX formats
- Add --atomic flag to Helm deployments for auto-rollback on failure
- Add gitleaks fingerprints for additional false positives
2026-01-15 19:15:01 +00:00
Mondo Diaz
8c0327d2d2 Add secrets job to deploy dependencies
Deploy jobs now wait for the secrets/gitleaks scan to pass before
running. This ensures no deployment happens if security scans fail.
2026-01-15 19:06:18 +00:00
Mondo Diaz
fadf8cd3e1 Add more gitleaks fingerprints for s3_key false positives 2026-01-15 19:02:14 +00:00
Mondo Diaz
908a2efa41 Add gitleaks fingerprints for s3_key test false positives 2026-01-15 18:55:51 +00:00
Mondo Diaz
bd07f150f2 Add static file fix to CHANGELOG 2026-01-15 18:50:06 +00:00
Mondo Diaz
91a9192477 Center trees in favicon 2026-01-15 18:45:39 +00:00
Mondo Diaz
a9b247d0a8 Update favicon: white trees on green background 2026-01-15 18:43:26 +00:00
Mondo Diaz
d47312546f Update favicon to match navbar orchard logo 2026-01-15 18:38:18 +00:00
Mondo Diaz
7c20cf9cdf Fix static file serving for favicon and other dist root files 2026-01-15 18:36:17 +00:00
Mondo Diaz
8549956a5e Fix sorting to only enable backend-supported fields 2026-01-15 18:33:10 +00:00
Mondo Diaz
193e02baad Add favicon and enable sorting on all table columns
- Add custom Orchard favicon (tree with apples)
- Simplify browser tab title to "Orchard"
- Enable sorting on all columns except description:
  - Home: name, visibility, owner, created, updated
  - Project: name, format, tags, artifacts, size, created
  - Package: tag, size, type, filename, created
- Fix column keys to match API field names for proper sorting
2026-01-15 18:29:07 +00:00
Mondo Diaz
ece5341199 Allow external access to local dev server
- Bind orchard-server port to 0.0.0.0 for LAN testing
- Add KICS exception for unbound port (local dev only)
2026-01-15 15:46:43 +00:00
Mondo Diaz
7f7ac44c46 Fix local docker-compose security settings for stock images
Remove cap_drop: ALL and no-new-privileges from postgres, redis, minio,
and minio-init services. These stock images require certain capabilities
(SETUID, SETGID, CHOWN) to switch users during initialization.

Added KICS exceptions with documentation explaining these are local
development only settings - production Kubernetes uses securityContext.
2026-01-15 15:46:43 +00:00
Mondo Diaz
944debc831 Apply consistent table sorting to Package page
Remove SortDropdown in favor of clickable table headers for consistency
with Home and Project pages. Add responsive wrapper for horizontal scroll.
2026-01-15 15:46:43 +00:00
Mondo Diaz
005c3d0f6e Replace package cards with sortable data table on Project page
- Convert package grid to DataTable matching Home page style
- Add sortable columns: Name, Created
- Show package stats: Tags, Artifacts, Size, Latest tag
- Row click navigates to package page
- Keep existing search and format filter working
2026-01-15 15:46:43 +00:00
Mondo Diaz
54ed41183f Replace project cards with sortable data table on Home page
- Replace card grid with DataTable for better handling of large project lists
- Add sortable columns: Name, Created, Updated (click header to sort)
- Show lock icon for private projects in Name column
- Display Access column with badges for authenticated users
- Add onRowClick prop to DataTable for row navigation
- Make table responsive with horizontal scroll on small screens
- Increase Home page container width to 1200px
- Keep existing visibility filter and pagination working
2026-01-15 15:46:43 +00:00
Mondo Diaz
f3a817f8a5 Merge branch 'fix/dark-mode-lighter-theme' into 'main'
Adjust dark mode to lighter tones for better readability

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!30
2026-01-15 09:44:07 -06:00
Mondo Diaz
f212864647 Adjust dark mode to lighter tones for better readability 2026-01-15 09:44:07 -06:00
Mondo Diaz
e8f26e9976 Merge branch 'fix/cleanup-and-pod-naming' into 'main'
Cleanup: improve pod naming, remove dead code, update docs

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!29
2026-01-14 14:47:11 -06:00
Mondo Diaz
32162c4ec7 Cleanup: improve pod naming, remove dead code, update docs 2026-01-14 14:47:11 -06:00
Mondo Diaz
1bb0c4e911 Merge branch 'fix/cleanup-job-git-strategy' into 'main'
Add GIT_STRATEGY: none to cleanup_feature job

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!28
2026-01-14 12:55:38 -06:00
Mondo Diaz
179503c68b Add GIT_STRATEGY: none to cleanup_feature job 2026-01-14 12:55:38 -06:00
Mondo Diaz
2f3c44b58e Merge branch 'deploy_to_stage' into 'main'
Add feature branch deployment pipeline

Closes #51

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!27
2026-01-14 12:29:37 -06:00
Mondo Diaz
4b3d2fd41d Add feature branch deployment pipeline 2026-01-14 12:29:37 -06:00
Mondo Diaz
7cfad28f67 Merge branch 'agent-config' into 'main'
Agent config

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!26
2026-01-13 15:09:02 -06:00
Mondo Diaz
37666e41a7 Agent config 2026-01-13 15:09:02 -06:00
Dane Moss
0cc4f25362 Merge branch 'update_changelog' into 'main'
add changelog entry

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!25
2026-01-12 10:11:50 -07:00
Dane Moss
5c9da9003b add changelog entry 2026-01-12 10:11:50 -07:00
Dane Moss
90bb2a3a39 Merge branch 'feature/auth-system' into 'main'
Implement authentication system with access control UI

Closes #50 and #18

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!24
2026-01-12 09:52:35 -07:00
Mondo Diaz
617bcbe89c Implement authentication system with access control UI 2026-01-12 09:52:35 -07:00
Mondo Diaz
1cbd335443 Merge branch 'feature/drag-drop-upload' into 'main'
Add drag-and-drop upload component with chunked uploads and offline support

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!23
2026-01-08 11:59:33 -06:00
Mondo Diaz
10d3694794 Add drag-and-drop upload component with chunked uploads and offline support 2026-01-08 11:59:32 -06:00
Mondo Diaz
bccbc71c13 Merge branch 'feature/download-verification' into 'main'
Add download verification with SHA256 checksum support (#26, #27, #28, #29)

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!22
2026-01-07 13:36:46 -06:00
Mondo Diaz
35fda65d38 Add download verification with SHA256 checksum support (#26, #27, #28, #29) 2026-01-07 13:36:46 -06:00
Mondo Diaz
08dce6cbb8 Merge branch 'feature/audit-history-api' into 'main'
Metadata database tracks all uploads with project, package, tag, and timestamp queryable via API

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!21
2026-01-07 12:31:46 -06:00
Mondo Diaz
2f1891cf01 Metadata database tracks all uploads with project, package, tag, and timestamp queryable via API 2026-01-07 12:31:44 -06:00
Mondo Diaz
81458b3bcb Merge branch 'feature/ref-count-management' into 'main'
Add ref_count management for deletions with atomic operations and error handling

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!20
2026-01-06 13:44:23 -06:00
Mondo Diaz
7e68baed08 Add ref_count management for deletions with atomic operations and error handling 2026-01-06 13:44:23 -06:00
Mondo Diaz
66622caf5d Add AGENTS.md to gitignore for OpenCode compatibility 2026-01-05 09:24:33 -06:00
Mondo Diaz
96d79e4127 Merge branch 'fix/helm-minio-ingress-rename' into 'main'
Fix Helm chart: rename minio.ingress to minioIngress to avoid subchart conflict

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!19
2025-12-16 12:51:42 -06:00
Mondo Diaz
accba9e404 Fix Helm chart: rename minio.ingress to minioIngress to avoid subchart conflict 2025-12-16 12:51:41 -06:00
Dane Moss
64e420fb58 Merge branch 'cut_new_release' into 'main'
release new image with presigned URL support for direct s3 downloads as default download mode

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!18
2025-12-15 15:30:38 -07:00
dane.moss
994f166de8 release new image with presigned URL support for direct s3 downloads as default download mode 2025-12-15 15:17:53 -07:00
Mondo Diaz
8999552949 Merge branch 'feature/presigned-url-downloads' into 'main'
Add presigned URL support for direct S3 downloads (#48)

Closes #48

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!17
2025-12-15 16:06:51 -06:00
Mondo Diaz
2df97ae94a Add presigned URL support for direct S3 downloads (#48) 2025-12-15 16:06:51 -06:00
Mondo Diaz
caa0c5af0c Merge branch 'feature/store-sha256-checksums' into 'main'
Store SHA256 checksums with artifacts and add multiple hash support

Closes #25

See merge request esv/bsf/bsf-integration/orchard/orchard-mvp!16
2025-12-15 14:47:31 -06:00
Mondo Diaz
3fd2747ae4 Store SHA256 checksums with artifacts and add multiple hash support 2025-12-15 14:47:30 -06:00