080 - Users and rbac

.env.docker

@@ -36,8 +36,17 @@ HIERA_CONTROL_REPO_PATH=/pabawi/control-repo
 HIERA_CONFIG_PATH=hiera.yaml
 
 # Bolt integration
-BOLT_COMMAND_WHITELIST_ALLOW_ALL=false
-BOLT_COMMAND_WHITELIST=["ls","pwd","whoami","uptime"]
+COMMAND_WHITELIST_ALLOW_ALL=false
+COMMAND_WHITELIST=["ls","pwd","whoami","uptime"]
 BOLT_EXECUTION_TIMEOUT=300000
 # Bolt project files can stay in the control repo or in a separate dir
 BOLT_PROJECT_PATH=/pabawi/control-repo
+
+# SSH integration configuration
+SSH_ENABLED=true
+SSH_CONFIG_PATH=/pabawi/ssh/config
+# SSH_DEFAULT_USER=al
+
+ANSIBLE_ENABLED=true
+ANSIBLE_PROJECT_PATH=/pabawi/ansible
+ANSIBLE_INVENTORY_PATH=inventory/hosts

.env.example

@@ -0,0 +1 @@
+backend/.env.example

.github/copilot-instructions.md

@@ -145,8 +145,8 @@ PORT=3000                        # Server port
 LOG_LEVEL=info                   # error | warn | info | debug
 DATABASE_PATH=./data/executions.db
 BOLT_EXECUTION_TIMEOUT=300000    # 5 minutes default
-BOLT_COMMAND_WHITELIST_ALLOW_ALL=false
-BOLT_COMMAND_WHITELIST=["ls","pwd"]  # CSV in env, JSON in code
+COMMAND_WHITELIST_ALLOW_ALL=false
+COMMAND_WHITELIST=["ls","pwd"]  # CSV in env, JSON in code
 
 # Performance & Caching (v0.4+)
 CACHE_INVENTORY_TTL=30000        # 30 seconds

.gitignore

@@ -52,3 +52,7 @@ bolt-project/.task_cache.json
 bolt-project/.resource_types/
 bolt-project/bolt-debug.log
 bolt-project/data/
+
+# Stress test generated files (large inventory files)
+samples/stresstest/ansible/inventory/
+samples/stresstest/bolt/inventory.yaml

.kiro/specs/pabawi/design.md → .kiro/specs/070/pabawi/design.md

@@ -966,8 +966,8 @@ CMD ["node", "dist/server.js"]
 ```bash
 PORT=3000
 BOLT_PROJECT_PATH=/bolt-project
-BOLT_COMMAND_WHITELIST_ALLOW_ALL=false
-BOLT_COMMAND_WHITELIST='["ls","pwd","whoami"]'
+COMMAND_WHITELIST_ALLOW_ALL=false
+COMMAND_WHITELIST='["ls","pwd","whoami"]'
 BOLT_EXECUTION_TIMEOUT=300000
 LOG_LEVEL=info
 DATABASE_PATH=/data/executions.db
@@ -985,7 +985,7 @@ docker run -d \
   -p 3000:3000 \
   -v /path/to/bolt-project:/bolt-project:ro \
   -v bolt-data:/data \
-  -e BOLT_COMMAND_WHITELIST_ALLOW_ALL=false \
+  -e COMMAND_WHITELIST_ALLOW_ALL=false \
   bolt-web-interface:0.1.0
 ```
 

.kiro/specs/pabawi/tasks.md → .kiro/specs/070/pabawi/tasks.md

@@ -563,7 +563,7 @@
     - _Requirements: 10.1, 10.5_
 
   - [x] 23.2 Create configuration guide in docs/configuration.md
-    - Document all environment variables and their defaults (PORT, BOLT_PROJECT_PATH, BOLT_COMMAND_WHITELIST_*,
+    - Document all environment variables and their defaults (PORT, BOLT_PROJECT_PATH, COMMAND_WHITELIST_*,
       BOLT_EXECUTION_TIMEOUT, DATABASE_PATH, PACKAGE_INSTALL_*, STREAMING_*, CONCURRENT_EXECUTION_LIMIT)
     - Create user guide for command whitelist configuration with examples
     - Document Bolt project requirements (inventory.yaml format, bolt-project.yaml structure)

.kiro/specs/puppetserver-integration/design.md → .kiro/specs/070/puppetserver-integration/design.md

@@ -312,7 +312,7 @@ Node Detail Page:
 ├── Overview Tab
 │   ├── General Info (OS, IP from facts)
 │   ├── Latest Puppet Runs (if PuppetDB active)
-│   └── Latest Executions
+│   └── Latest Actions
 ├── Facts Tab
 │   ├── Facts from all sources
 │   ├── Source attribution

.kiro/specs/puppetserver-integration/manual-testing-guide.md → .kiro/specs/070/puppetserver-integration/manual-testing-guide.md

@@ -47,8 +47,8 @@ DATABASE_PATH=./data/executions.db
 
 # Bolt Configuration
 BOLT_PROJECT_PATH=./bolt-project
-BOLT_COMMAND_WHITELIST_ALLOW_ALL=false
-BOLT_COMMAND_WHITELIST=["ls","pwd","whoami","cat","hostname"]
+COMMAND_WHITELIST_ALLOW_ALL=false
+COMMAND_WHITELIST=["ls","pwd","whoami","cat","hostname"]
 BOLT_EXECUTION_TIMEOUT=300000
 
 # PuppetDB Configuration

.kiro/specs/inventory-node-groups/.config.kiro

@@ -0,0 +1 @@
+{"specId": "d5a7de16-585a-4236-9911-1cb9ca3b2ffa", "workflowType": "requirements-first", "specType": "feature"}