ba4c935182
- Added support for bootstrap providers in AuthorityIdentityProviderRegistry. - Introduced a new property for bootstrap providers and updated AggregateCapabilities. - Updated relevant methods to handle bootstrap capabilities during provider registration. feat: Introduce Sealed Mode Status in OpenIddict Handlers - Added SealedModeStatusProperty to AuthorityOpenIddictConstants. - Enhanced ValidateClientCredentialsHandler, ValidatePasswordGrantHandler, and ValidateRefreshTokenGrantHandler to validate sealed mode evidence. - Implemented logic to handle airgap seal confirmation requirements. feat: Update Program Configuration for Sealed Mode - Registered IAuthoritySealedModeEvidenceValidator in Program.cs. - Added logging for bootstrap capabilities in identity provider plugins. - Implemented checks for bootstrap support in API endpoints. chore: Update Tasks and Documentation - Marked AUTH-MTLS-11-002 as DONE in TASKS.md. - Updated documentation to reflect changes in sealed mode and bootstrap capabilities. fix: Improve CLI Command Handlers Output - Enhanced output formatting for command responses and prompts in CommandHandlers.cs. feat: Extend Advisory AI Models - Added Response property to AdvisoryPipelineOutputModel for better output handling. fix: Adjust Concelier Web Service Authentication - Improved JWT token handling in Concelier Web Service to ensure proper token extraction and logging. test: Enhance Web Service Endpoints Tests - Added detailed logging for authentication failures in WebServiceEndpointsTests. - Enabled PII logging for better debugging of authentication issues. feat: Introduce Air-Gap Configuration Options - Added AuthorityAirGapOptions and AuthoritySealedModeOptions to StellaOpsAuthorityOptions. - Implemented validation logic for air-gap configurations to ensure proper setup.
128 lines
4.4 KiB
JSON
128 lines
4.4 KiB
JSON
{
|
|
"registry": "registry.stella-ops.org/stellaops",
|
|
"platforms": ["linux/amd64", "linux/arm64"],
|
|
"defaultChannel": "edge",
|
|
"docker": {
|
|
"sdkImage": "mcr.microsoft.com/dotnet/nightly/sdk:10.0",
|
|
"runtimeImage": "mcr.microsoft.com/dotnet/nightly/aspnet:10.0",
|
|
"nodeImage": "node:20.14.0-bookworm",
|
|
"nginxImage": "nginx:1.27-alpine"
|
|
},
|
|
"components": [
|
|
{
|
|
"name": "authority",
|
|
"repository": "authority",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Authority/StellaOps.Authority/StellaOps.Authority/StellaOps.Authority.csproj",
|
|
"entrypoint": "StellaOps.Authority.dll"
|
|
},
|
|
{
|
|
"name": "signer",
|
|
"repository": "signer",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Signer/StellaOps.Signer/StellaOps.Signer.WebService/StellaOps.Signer.WebService.csproj",
|
|
"entrypoint": "StellaOps.Signer.WebService.dll"
|
|
},
|
|
{
|
|
"name": "attestor",
|
|
"repository": "attestor",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Attestor/StellaOps.Attestor/StellaOps.Attestor.WebService/StellaOps.Attestor.WebService.csproj",
|
|
"entrypoint": "StellaOps.Attestor.WebService.dll"
|
|
},
|
|
{
|
|
"name": "scanner-web",
|
|
"repository": "scanner-web",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Scanner/StellaOps.Scanner.WebService/StellaOps.Scanner.WebService.csproj",
|
|
"entrypoint": "StellaOps.Scanner.WebService.dll"
|
|
},
|
|
{
|
|
"name": "scanner-worker",
|
|
"repository": "scanner-worker",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Scanner/StellaOps.Scanner.Worker/StellaOps.Scanner.Worker.csproj",
|
|
"entrypoint": "StellaOps.Scanner.Worker.dll"
|
|
},
|
|
{
|
|
"name": "concelier",
|
|
"repository": "concelier",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Concelier/StellaOps.Concelier.WebService/StellaOps.Concelier.WebService.csproj",
|
|
"entrypoint": "StellaOps.Concelier.WebService.dll"
|
|
},
|
|
{
|
|
"name": "excititor",
|
|
"repository": "excititor",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/Excititor/StellaOps.Excititor.WebService/StellaOps.Excititor.WebService.csproj",
|
|
"entrypoint": "StellaOps.Excititor.WebService.dll"
|
|
},
|
|
{
|
|
"name": "advisory-ai-web",
|
|
"repository": "advisory-ai-web",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/AdvisoryAI/StellaOps.AdvisoryAI.WebService/StellaOps.AdvisoryAI.WebService.csproj",
|
|
"entrypoint": "StellaOps.AdvisoryAI.WebService.dll"
|
|
},
|
|
{
|
|
"name": "advisory-ai-worker",
|
|
"repository": "advisory-ai-worker",
|
|
"kind": "dotnet-service",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.dotnet-service",
|
|
"project": "src/AdvisoryAI/StellaOps.AdvisoryAI.Worker/StellaOps.AdvisoryAI.Worker.csproj",
|
|
"entrypoint": "StellaOps.AdvisoryAI.Worker.dll"
|
|
},
|
|
{
|
|
"name": "web-ui",
|
|
"repository": "web-ui",
|
|
"kind": "angular-ui",
|
|
"context": ".",
|
|
"dockerfile": "ops/devops/release/docker/Dockerfile.angular-ui"
|
|
}
|
|
],
|
|
"cli": {
|
|
"project": "src/Cli/StellaOps.Cli/StellaOps.Cli.csproj",
|
|
"runtimes": [
|
|
"linux-x64",
|
|
"linux-arm64",
|
|
"osx-x64",
|
|
"osx-arm64",
|
|
"win-x64"
|
|
],
|
|
"packagePrefix": "stella",
|
|
"outputDir": "out/release/cli"
|
|
},
|
|
"helm": {
|
|
"chartPath": "deploy/helm/stellaops",
|
|
"outputDir": "out/release/helm"
|
|
},
|
|
"compose": {
|
|
"files": [
|
|
"deploy/compose/docker-compose.dev.yaml",
|
|
"deploy/compose/docker-compose.stage.yaml",
|
|
"deploy/compose/docker-compose.airgap.yaml"
|
|
]
|
|
},
|
|
"buildxPlugin": {
|
|
"project": "src/Scanner/StellaOps.Scanner.Sbomer.BuildXPlugin/StellaOps.Scanner.Sbomer.BuildXPlugin.csproj"
|
|
}
|
|
}
|