hsiegeln 45bcc954ac feat: certificate management with stage/activate/restore lifecycle ...

Provider-based architecture (Docker now, K8s later):
- CertificateManager interface + DockerCertificateManager (file-based)
- Atomic swap via .wip files for safe cert replacement
- Stage -> Activate -> Archive lifecycle with one-deep rollback
- Bootstrap supports user-supplied certs via CERT_FILE/KEY_FILE/CA_FILE
- CA bundle aggregates platform + tenant CAs, distributed to containers
- Vendor UI: Certificates page with upload, activate, restore, discard
- Stale tenant tracking (ca_applied_at) with restart banner
- Conditional TLS skip removal when CA bundle exists

Includes design spec, migration V012, service + controller tests.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-10 18:29:02 +02:00

.gitea/workflows

ci: exclude new integration tests from CI (no Testcontainers in CI)

2026-04-09 23:11:45 +02:00

.mvn/wrapper

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

audit

Add SaaS platform UX polish design spec with audit findings

2026-04-09 19:39:33 +02:00

docker

fix: register /platform/ as post-logout redirect URI, improve sidebar contrast

2026-04-10 13:41:18 +02:00

docs

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

src

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

ui

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

.env.example

fix: register API resource in Logto for JWT access tokens

2026-04-05 01:01:32 +02:00

.gitattributes

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

.gitignore

fix: use CAMELEER_API_URL env var for server-ui container

2026-04-10 09:16:42 +02:00

CLAUDE.md

docs: update CLAUDE.md with provisioning fixes and OIDC role flow

2026-04-10 12:43:45 +02:00

docker-compose.dev.yml

feat: clean control plane — remove all example tenant resources

2026-04-10 08:24:28 +02:00

docker-compose.yml

feat: certificate management with stage/activate/restore lifecycle

2026-04-10 18:29:02 +02:00

Dockerfile

refactor: deployment infrastructure cleanup (4 fixes)

2026-04-07 17:08:37 +02:00

HOWTO.md

feat: add SPA controller, Traefik route, CI frontend build, and HOWTO update

2026-04-04 22:06:36 +02:00

mvnw

fix: set execute permission on Maven wrapper

2026-04-04 15:34:52 +02:00

mvnw.cmd

feat: initialize Maven project with Spring Boot 3.4.3 + Java 21

2026-03-30 10:08:14 +02:00

pom.xml

feat: add TenantProvisioner interface with auto-detection

2026-04-09 22:29:01 +02:00

STRATEGY.md

Add moat-strengthening features design spec

2026-03-29 16:14:04 +02:00

traefik.yml

feat: HTTPS admin console via Traefik with NODE_TLS_REJECT_UNAUTHORIZED

2026-04-07 00:44:33 +02:00

Description

Multi-tenant SaaS platform — Camel application runtime with built-in observability. Wraps cameleer3 agent + server.

8.2 MiB

Languages

Java 47.4%

TypeScript 23.4%

Shell 16.5%

PowerShell 11.3%

Dockerfile 0.7%

Other 0.7%