feat: create a new caipe stack with sub-directories for different configurations#71
Merged
sriaradhyula merged 155 commits intocnoe-io:mainfrom Oct 22, 2025
Merged
feat: create a new caipe stack with sub-directories for different configurations#71sriaradhyula merged 155 commits intocnoe-io:mainfrom
sriaradhyula merged 155 commits intocnoe-io:mainfrom
Conversation
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
The image has ENTRYPOINT defined, so command field overrides it incorrectly. This fixes CrashLoopBackOff: executable file not found in PATH.
- Add proper security context with non-root user - Add ephemeral storage limit to prevent file descriptor issues - Set readOnlyRootFilesystem for security
Remove complex MCP configuration that requires file watchers. Use minimal config with just admin, stats, and readiness endpoints.
Remove config file argument to prevent file watcher creation that causes 'too many open files' error in container environment.
- Change from cnoe.localtest.me/agentgateway to agentgateway.cnoe.localtest.me - Use root path (/) instead of /agentgateway prefix - Simplify to single host rule for cleaner subdomain access
- Add /mcp path routing to service port 3000 - Keep root path (/) routing to port 15000 - Enables MCP protocol access via agentgateway.cnoe.localtest.me/mcp
- Change from local stdio MCP server to remote weather.outshift.io - Configure MCP target with host, path, and port 443 - Enables connection to remote weather MCP service
- Remove adminAddr field that is not supported in config format - Keep only binds configuration for MCP routing - Fixes config parsing error
- Change replicas from 2 to 1 for simpler deployment - Reduces resource usage for development environment
…mplete, slim, and agentgateway variants Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Enable backend auth with BACKSTAGE_API_TOKEN environment variable - Add BACKSTAGE_API_TOKEN to backstage-env-vars secret template - Token will be sourced from keycloak-clients secret in Vault Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Add separate ExternalSecret for Backstage API token using vault-secret-store - Update Backstage deployment to include backstage-api-token secret - Generate random BACKSTAGE_API_TOKEN in vault-config-job - Set BACKSTAGE_URL to local cluster backend URL - Create ArgoCD token sync CronJob running every 10 minutes - Update ArgoCD secret with cluster URL and SSL false Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
…g-0.2.6 feat(caipe): update ai-platform-engineering chart to 0.2.6
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
…g-0.2.6 Update ai platform engineering 0.2.6
- Modified prompt_with_env to automatically use .env values when ENV_LOADED=true - Added conditional logic for LLM credential collection - Added conditional logic for agent credential collection - Prevents script from hanging when .env file is present
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
fix: update caipe 0.3.0
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
sriaradhyula
approved these changes
Oct 22, 2025
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Install git package for both Linux and macOS - Add git configuration verification and setup guidance - Add GitHub CLI authentication checking and instructions - Include git and GitHub CLI in tool verification loop - Update final setup instructions with git/GitHub CLI guidance Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Add comprehensive debconf preselections to prevent interactive prompts - Configure keyboard layout (US English), display manager (lightdm), timezone, and locale - Set DEBIAN_FRONTEND=noninteractive for all apt operations - Add needrestart configuration to prevent service restart prompts - Configure console setup, wireshark, and other common interactive packages - Resolves keyboard configuration and gdm3/lightdm selection prompts Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Replace complex xstartup with simple working version - Matches confirmed working configuration from production environment - Removes unnecessary fallback logic that can cause issues - Direct exec i3 approach that successfully starts window manager Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Create ~/.kube directory with proper permissions (755) - Set correct ownership for .kube directory - Create additional common user directories (~/.local/bin, ~/.cache, ~/.config) - Add troubleshooting instructions for KUBECONFIG permission issues - Prevents 'permission denied' errors when writing kubectl config files Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
Signed-off-by: Sri Aradhyula <sraradhy@cisco.com>
- Remove Firefox snap packages to prevent AppArmor conflicts - Add Mozilla PPA repository for newer Firefox versions (144.0+) - Configure apt priority to prevent future snap reinstalls - Add i3-specific Firefox window management rules - Create optimized Firefox launcher with --no-sandbox flags - Add Firefox cache cleanup utilities for troubleshooting - Configure AppArmor complain mode for Firefox - Update VNC startup script with Firefox optimizations - Add comprehensive Firefox/i3 troubleshooting documentation This resolves Firefox freezing and crashing issues in i3 desktop environment by eliminating snap confinement conflicts and optimizing for i3 window management.
- Override Neo4j storageClassName from 'gp2' to 'standard' for KIND clusters - Override Neo4j-Ontology storageClassName from 'gp2' to 'standard' for KIND clusters - Remove duplicate kb-rag-ingress that conflicts with main rag-webui ingress - Clean up rag-webui ingress configuration for single host setup Resolves: - Persistent volume provisioning issues in KIND environments - Conflicting ingress rules causing routing problems
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
New caipe directory includes different configurations such as basic, complete p2p as well as using slim and agent gateway.