riotpiao-poimen/homelab
2
0
Fork 0
Code Issues 24 Pull Requests 3 Actions Packages Projects 1 Releases Wiki Activity

ci: remove custom runner image approach (use public images) #5

Closed
rock wants to merge 58 commits from fix/cleanup-runner-approach into main
pull from: fix/cleanup-runner-approach
merge into: :main
Conversation 0 Commits 58 Files Changed 50
+6 -2
1 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
Showing only changes of commit ed644b2c83 - Show all commits
scripts/iam/authentik-provision.py
+6 -2
View File
@@ -185,6 +185,10 @@ GROUP_PERMISSIONS = {
"llm-users": ["llm:inference"], "llm-users": ["llm:inference"],
"memory-users": ["memory:read"], "memory-users": ["memory:read"],
"memory-writers": ["memory:read", "memory:write"], "memory-writers": ["memory:read", "memory:write"],
"s3-users": ["s3:read"],
"s3-writers": ["s3:read", "s3:write"],
"sqs-users": ["sqs:read"],
"sqs-writers": ["sqs:read", "sqs:write"],
} }
perms = set() perms = set()
for group in request.user.groups.all(): for group in request.user.groups.all():
@@ -806,7 +810,7 @@ print("\n[SERVICE ACCOUNTS] Creating service accounts for API access...")
# Format: "<api>:<action>" e.g. "llm:inference", "memory:write" # Format: "<api>:<action>" e.g. "llm:inference", "memory:write"
SERVICE_ACCOUNTS = { SERVICE_ACCOUNTS = {
"portfolio-agent": { "portfolio-agent": {
"roles": ["llm:inference", "memory:read"], "roles": ["llm:inference", "memory:read", "s3:read", "sqs:read"],
"attributes": { "attributes": {
"memory_projects": ["homelab", "portfolio"], "memory_projects": ["homelab", "portfolio"],
"memory_visibility": "public", "memory_visibility": "public",
@@ -815,7 +819,7 @@ SERVICE_ACCOUNTS = {
"secret_name": "portfolio-agent-oidc", "secret_name": "portfolio-agent-oidc",
}, },
"memory-agent": { "memory-agent": {
"roles": ["llm:inference", "memory:read", "memory:write"], "roles": ["llm:inference", "memory:read", "memory:write", "s3:read", "s3:write", "sqs:read", "sqs:write"],
"attributes": { "attributes": {
"memory_projects": ["*"], "memory_projects": ["*"],
"memory_visibility": "private", "memory_visibility": "private",