mirror of
https://github.com/CloudNebulaProject/barycenter.git
synced 2026-04-10 21:20:41 +00:00
c8b27bf196
Add comprehensive deployment support for: - Docker: Multi-stage Dockerfile with security hardening - Docker Compose: Production-ready compose file with volume persistence - Kubernetes: Complete Helm chart with configurable values, ingress, PVC - Linux: systemd service unit with extensive security hardening - FreeBSD: rc.d init script with proper daemon management - illumos/Solaris: SMF manifest with service contract management Each platform includes: - Installation scripts/manifests - Configuration examples - Management instructions - Security best practices - Troubleshooting guides The Helm chart provides: - Configurable resources and autoscaling - Security contexts and pod security - Health checks (liveness/readiness probes) - Ingress with TLS support - Persistent volume claims - Service account management All deployments follow security best practices: - Non-root user execution - Minimal privileges - Read-only root filesystems where applicable - Resource limits - Network policies Added DEPLOYMENT.md with comprehensive deployment guide covering all platforms, configuration options, and production checklist. 🤖 Generated with [Claude Code](https://claude.com/claude-code) Co-Authored-By: Claude <noreply@anthropic.com>
92 lines
2.5 KiB
XML
92 lines
2.5 KiB
XML
<?xml version="1.0"?>
|
|
<!DOCTYPE service_bundle SYSTEM "/usr/share/lib/xml/dtd/service_bundle.dtd.1">
|
|
<!--
|
|
SMF manifest for Barycenter OpenID Connect Identity Provider
|
|
|
|
Install with:
|
|
svccfg import barycenter.xml
|
|
|
|
Enable with:
|
|
svcadm enable barycenter
|
|
-->
|
|
|
|
<service_bundle type='manifest' name='barycenter'>
|
|
|
|
<service
|
|
name='application/barycenter'
|
|
type='service'
|
|
version='1'>
|
|
|
|
<create_default_instance enabled='false' />
|
|
|
|
<single_instance />
|
|
|
|
<!-- Dependencies -->
|
|
<dependency
|
|
name='network'
|
|
grouping='require_all'
|
|
restart_on='error'
|
|
type='service'>
|
|
<service_fmri value='svc:/milestone/network:default' />
|
|
</dependency>
|
|
|
|
<dependency
|
|
name='filesystem'
|
|
grouping='require_all'
|
|
restart_on='error'
|
|
type='service'>
|
|
<service_fmri value='svc:/system/filesystem/local' />
|
|
</dependency>
|
|
|
|
<!-- Start/Stop Methods -->
|
|
<exec_method
|
|
type='method'
|
|
name='start'
|
|
exec='/opt/barycenter/bin/barycenter --config /etc/barycenter/config.toml &'
|
|
timeout_seconds='60'>
|
|
<method_context>
|
|
<method_credential user='barycenter' group='barycenter' />
|
|
<method_environment>
|
|
<envvar name='RUST_LOG' value='info' />
|
|
</method_environment>
|
|
</method_context>
|
|
</exec_method>
|
|
|
|
<exec_method
|
|
type='method'
|
|
name='stop'
|
|
exec=':kill'
|
|
timeout_seconds='60' />
|
|
|
|
<!-- Properties -->
|
|
<property_group name='startd' type='framework'>
|
|
<propval name='duration' type='astring' value='contract' />
|
|
<propval name='ignore_error' type='astring' value='core,signal' />
|
|
</property_group>
|
|
|
|
<property_group name='application' type='application'>
|
|
<propval name='config_file' type='astring' value='/etc/barycenter/config.toml' />
|
|
<propval name='data_dir' type='astring' value='/var/barycenter' />
|
|
</property_group>
|
|
|
|
<!-- Stability -->
|
|
<stability value='Evolving' />
|
|
|
|
<!-- Documentation -->
|
|
<template>
|
|
<common_name>
|
|
<loctext xml:lang='C'>Barycenter OpenID Connect IdP</loctext>
|
|
</common_name>
|
|
<description>
|
|
<loctext xml:lang='C'>
|
|
Barycenter OpenID Connect Identity Provider with federation support
|
|
</loctext>
|
|
</description>
|
|
<documentation>
|
|
<manpage title='barycenter' section='1M' />
|
|
</documentation>
|
|
</template>
|
|
|
|
</service>
|
|
|
|
</service_bundle>
|