wmantly
c28e53e505
Merge pull request #158 from theta42/fix/theta-agent-text-file-busy-v1.35.15
...
CI/CD / build-theta-agent (push) Successful in 43s
CI/CD / docker-push (push) Failing after 17s
fix: stop theta-agent before overwriting binary (v1.35.15)
2026-08-04 00:34:43 -04:00
wmantly
7ae2472c62
fix: stop theta-agent before overwriting binary (v1.35.15)
...
cp into a running executable fails with 'Text file busy' on a re-install.
Stop the service before copying the prebuilt binary.
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-04 00:32:33 -04:00
wmantly
0c4abd82be
Merge pull request #157 from theta42/release/v1.35.14-token-lifecycle
...
CI/CD / build-theta-agent (push) Successful in 43s
CI/CD / docker-push (push) Failing after 17s
feat: OpenBao token lifecycle + bump sso to v1.23.0 (v1.35.14)
2026-08-04 00:25:16 -04:00
wmantly
c27e8c7867
feat: OpenBao token lifecycle + bump sso to v1.23.0 (v1.35.14)
...
- theta-svc token role (periodic 768h): SSO/PROXY/JUMP_VAULT_TOKEN now minted
through it; ensure_token renews periodic tokens on every setup.sh re-run and
detects/revokes/re-mints valid-but-non-periodic tokens from older installs.
- bao-renewer sidecar (docker-compose): renews the three service tokens every
12h while the stack runs.
- sso-app token role (periodic 768h) + sso-broker policy grants for
auth/token/create/sso-app and renew/revoke/lookup-accessor.
- docs/secrets.md rewritten around the new lifecycle.
- Bump sso-manager-node gitlink to v1.23.0 (real vault-403 fix + app-token
lifecycle).
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-04 00:21:51 -04:00
wmantly
9750413178
Merge pull request #156 from theta42/release/v1.35.13-agents-page
...
CI/CD / build-theta-agent (push) Successful in 44s
CI/CD / docker-push (push) Failing after 18s
feat: bump sso to v1.22.0 (Agents page + secure /api/agent) (v1.35.13)
2026-08-03 23:16:39 -04:00
wmantly
c1a9d8f059
feat: bump sso to v1.22.0 (Agents page + secure /api/agent) (v1.35.13)
2026-08-03 23:15:19 -04:00
wmantly
0edce57f80
Merge pull request #155 from theta42/fix/theta-agent-service-control-v1.35.12
...
CI/CD / build-theta-agent (push) Successful in 41s
CI/CD / docker-push (push) Failing after 18s
fix: stop writing invalid service_control:true for theta-agent (v1.35.12)
2026-08-03 23:06:39 -04:00
wmantly
49b868fedb
fix: stop writing invalid service_control:true for theta-agent (v1.35.12)
...
setup.sh's 'full control' edit set service_control: true, but that field is a
[]string allowlist, so theta-agent failed YAML decode and crash-looped. Remove
the invalid edit; leave the operator's allowlist (or [] default = deny all).
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-03 23:05:04 -04:00
wmantly
f9af81983b
Merge pull request #154 from theta42/fix/unseal-key-unbound-v1.35.11
...
CI/CD / build-theta-agent (push) Successful in 45s
CI/CD / docker-push (push) Failing after 16s
fix: UNSEAL_KEY unbound variable in setup.sh (v1.35.11)
2026-08-03 22:45:27 -04:00
wmantly
5ef2493e17
chore: changelog for v1.35.11
2026-08-03 22:44:03 -04:00
wmantly
8535372123
fix: guard UNSEAL_KEY with ${UNSEAL_KEY:-} in setup.sh (v1.35.11)
...
On a re-run where OpenBao is already unsealed, the unseal block is skipped and
UNSEAL_KEY is never set; line 778 then referenced it under set -u and aborted
with 'UNSEAL_KEY: unbound variable'. Guard with ${UNSEAL_KEY:-} so the
VAULT_UNSEAL_KEY upsert is simply skipped when there's no key this run.
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-03 22:43:51 -04:00
wmantly
ade9a41aed
Merge pull request #153 from theta42/release/v1.35.10-reset-openbao-theta-agent
...
CI/CD / build-theta-agent (push) Successful in 47s
CI/CD / docker-push (push) Failing after 16s
feat: --reset-openbao + fix theta-agent install; bump sso to v1.21.0 (v1.35.10)
2026-08-03 22:26:35 -04:00
wmantly
ce664f5cb9
feat: --reset-openbao + fix theta-agent install; bump sso to v1.21.0 (v1.35.10)
...
- Add --reset-openbao: full clean OpenBao reset (re-init store, flush the
Redis vault-token cache) to clear stale policies/tokens causing recurring
vault 403s.
- Fix theta-agent install: copy the prebuilt theta-agent-linux-amd64 from the
submodule instead of a broken go build; write config to /etc/theta42/agent.yml
(the path the agent reads), not /etc/theta/agent.yml.
- Bump sso-manager-node gitlink to v1.21.0 (shared secrets + durable vault 403 fix).
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-03 22:24:48 -04:00
wmantly
647f5b846c
Merge pull request #152 from theta42/fix/submodule-version-sync-v1.35.9
...
CI/CD / build-theta-agent (push) Successful in 42s
CI/CD / docker-push (push) Failing after 17s
fix: bump sso & proxy submodules to corrected version tags (v1.35.9)
2026-08-03 21:37:39 -04:00
wmantly
fe08c2f8c7
fix: bump sso & proxy submodules to corrected version tags (v1.35.9)
...
The v1.20.2 / v1.32.0 release tags were created but their package.json
versions lagged (1.20.1 / 1.14.3), so the deployed apps' update-check
banner falsely reported a newer version. Repoint the sso-manager-node and
proxy gitlinks to the corrected commits and release v1.35.9.
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-03 21:36:24 -04:00
wmantly
43c58e7ed5
Merge pull request #151 from theta42/fix/auto-reset-unseal-key-loss-v1.35.8
...
CI/CD / build-theta-agent (push) Successful in 44s
CI/CD / docker-push (push) Failing after 17s
fix(setup): auto-reset OpenBao volume and re-initialize if unseal key is lost v1.35.8
2026-08-03 15:44:22 -04:00
wmantly
13d8a979c7
fix(setup): auto-reset OpenBao volume and re-initialize if unseal key is lost v1.35.8
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 13s
2026-08-03 15:43:35 -04:00
wmantly
16cbe46793
Merge pull request #150 from theta42/fix/restore-bao-init-from-backup-v1.35.7
...
CI/CD / build-theta-agent (push) Successful in 41s
CI/CD / docker-push (push) Failing after 17s
fix(setup): auto-restore bao-init.json from backups if missing from config/ v1.35.7
2026-08-03 15:42:35 -04:00
wmantly
40a1e7f64e
fix(setup): auto-restore bao-init.json from backups if missing from config/ v1.35.7
Lint / Shellcheck setup.sh (push) Failing after 10s
Lint / Syntax check bootstrap.js (push) Successful in 14s
2026-08-03 15:42:01 -04:00
wmantly
45715b61ea
Merge pull request #149 from theta42/fix/env-get-function-order-v1.35.6
...
CI/CD / build-theta-agent (push) Successful in 44s
CI/CD / docker-push (push) Failing after 17s
fix(setup): move env_get helper function definition to top of setup.sh v1.35.6
2026-08-03 15:39:39 -04:00
wmantly
54ebb83bb1
fix(setup): move env_get helper function definition to top of setup.sh v1.35.6
Lint / Shellcheck setup.sh (push) Failing after 10s
Lint / Syntax check bootstrap.js (push) Successful in 14s
2026-08-03 15:39:05 -04:00
wmantly
a67d972217
Merge pull request #148 from theta42/fix/setup-openbao-unseal-fallback-v1.35.5
...
CI/CD / build-theta-agent (push) Successful in 42s
CI/CD / docker-push (push) Failing after 18s
fix(setup): fallback to .env VAULT_UNSEAL_KEY and VAULT_TOKEN if bao-init.json is missing v1.35.5
2026-08-03 15:36:46 -04:00
wmantly
875ea874b4
fix(setup): fallback to .env VAULT_UNSEAL_KEY and VAULT_TOKEN if bao-init.json is missing v1.35.5
Lint / Shellcheck setup.sh (push) Failing after 8s
Lint / Syntax check bootstrap.js (push) Successful in 12s
2026-08-03 15:36:22 -04:00
wmantly
119f21b821
Merge pull request #147 from theta42/bump/sso-v1.20.2-proxy-v1.32.0
...
CI/CD / build-theta-agent (push) Successful in 42s
CI/CD / docker-push (push) Failing after 18s
bump(deps): update sso-manager-node to v1.20.2 and proxy to v1.32.0
2026-08-03 15:31:29 -04:00
wmantly
80275c42e4
bump(deps): update sso-manager-node to v1.20.2 and proxy to v1.32.0
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 13s
2026-08-03 15:30:56 -04:00
wmantly
a30deae866
Merge pull request #146 from theta42/bump/theta-agent-v1.2.1
...
CI/CD / build-theta-agent (push) Successful in 44s
CI/CD / docker-push (push) Failing after 17s
bump(theta-agent): update to v1.2.1 for automatic SSSD installation
2026-08-03 15:02:56 -04:00
wmantly
dc9a7ff9c4
bump(theta-agent): update to v1.2.1 for automatic SSSD installation
Lint / Shellcheck setup.sh (push) Failing after 8s
Lint / Syntax check bootstrap.js (push) Successful in 13s
2026-08-03 15:02:14 -04:00
wmantly
7937d6cf92
Merge pull request #145 from theta42/fix/setup-unbound-var-v1.35.2
...
CI/CD / build-theta-agent (push) Successful in 45s
CI/CD / docker-push (push) Failing after 18s
fix(setup): export CFG_CREATE_ALL_HTTP default and add fail-safe parameter expansion v1.35.2
2026-08-03 14:59:07 -04:00
wmantly
21333de814
fix(setup): export CFG_CREATE_ALL_HTTP default and add fail-safe parameter expansion v1.35.2
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 12s
2026-08-03 14:58:39 -04:00
wmantly
b3bdebe1c9
Merge pull request #144 from theta42/release/v1.35.1
...
CI/CD / build-theta-agent (push) Successful in 44s
CI/CD / docker-push (push) Failing after 16s
release(theta-suite): v1.35.1
2026-08-03 14:02:55 -04:00
wmantly
e6b318e28e
release(theta-suite): v1.35.1 - Submodule updates, Directory, Conf layout & Jump host target filter
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 14s
2026-08-03 14:02:13 -04:00
wmantly
4d0b7f555e
Merge pull request #143 from theta42/feature/v1.35.0-final-roll-up
...
CI/CD / build-theta-agent (push) Successful in 45s
CI/CD / docker-push (push) Failing after 18s
release: v1.35.0 final roll-up
2026-08-03 02:42:24 -04:00
wmantly
67b511f8d7
release: v1.35.0 - final roll up (sso v1.20.0, proxy v1.14.3, jump-host v1.17.1, theta-agent v1.2.0)
2026-08-03 02:41:57 -04:00
wmantly
b8a8be9697
Merge pull request #142 from theta42/feature/v1.35.0-theta-suite-stack-update
...
release: v1.35.0 theta-suite stack roll-up
2026-08-03 02:22:39 -04:00
wmantly
cd9c81cd92
release: v1.35.0 - roll up submodules (sso v1.20.0, proxy v1.14.3, jump-host v1.17.1, theta-agent v1.2.0) and setup fixes
2026-08-03 02:22:10 -04:00
wmantly
c8c04440db
Merge pull request #141 from theta42/release/v1.35.0-update
...
Release v1.35.0 - Bump sso-manager-node to v1.19.6
2026-08-02 23:03:49 -04:00
wmantly
d53bdefc2a
chore: Bump sso-manager-node to v1.19.6
...
Lint / Shellcheck setup.sh (push) Failing after 7s
Lint / Syntax check bootstrap.js (push) Successful in 14s
### Changed
- sso-manager-node: v1.18.0-26-gef2207e → v1.19.6 (4945dec)
### sso-manager-node v1.19.6 highlights
- Fixed navbar auth (Catalog/Vault now require login)
- Added docs/directory.md
- SMTP moved to UI-only configuration
- Added test email/SMS API endpoints
- Added non-interactive theta-agent config variables
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-02 22:55:30 -04:00
wmantly
542e5fd33f
chore: Release v1.35.0 - Non-interactive theta-agent config
...
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 12s
### Added
- Non-interactive theta-agent configuration via setup.env variables
### Changed
- setup.sh: Made theta-agent setup fully non-interactive
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-02 22:34:45 -04:00
wmantly
848f35fc5e
chore: Add theta-agent configuration variables to setup.env
...
### Changed
- **setup.sh**: Made theta-agent installation and configuration non-interactive,
controlled by CFG_THETA_AGENT_* environment variables.
- **setup.env.example**: Added documentation for:
- CFG_THETA_AGENT_ENABLE (default: 1)
- CFG_THETA_AGENT_LDAP_AUTH (default: 1)
- CFG_THETA_AGENT_FULL_CONTROL (default: 1)
All options default to enabled for backwards compatibility.
Co-Authored-By: Claude <noreply@anthropic.com >
2026-08-02 22:23:29 -04:00
wmantly
1d14fcee19
feat: install theta-agent on host and add CFG_CREATE_ALL_HTTP option ( #139 )
...
CI/CD / build-theta-agent (push) Successful in 39s
CI/CD / docker-push (push) Failing after 15s
* feat: install theta-agent on host and add CFG_CREATE_ALL_HTTP option
* docs: update changelog for 1.34.5
2026-08-02 20:04:44 -04:00
wmantly
30609de3e8
chore: release v1.34.4 (update sso-manager-node submodule for vault fix) ( #138 )
CI/CD / build-theta-agent (push) Successful in 41s
CI/CD / docker-push (push) Failing after 16s
2026-08-02 19:48:54 -04:00
wmantly
925ac027a6
Merge pull request #137 from theta42/release-v1.34.3
...
CI/CD / build-theta-agent (push) Successful in 41s
CI/CD / docker-push (push) Failing after 16s
chore: release v1.34.3
2026-08-02 19:09:51 -04:00
wmantly
3b769cf24a
chore: release v1.34.3 (updates submodules, docs, bootstrap)
Lint / Shellcheck setup.sh (push) Failing after 9s
Lint / Syntax check bootstrap.js (push) Successful in 13s
2026-08-02 19:08:14 -04:00
wmantly
2785b861b3
Merge pull request #136 from theta42/update-submodules-2
...
CI/CD / build-theta-agent (push) Successful in 42s
CI/CD / docker-push (push) Failing after 15s
chore: update submodules to v1.19.4 and v1.14.2
2026-08-02 14:12:02 -04:00
wmantly
c216ddd4e8
chore: update submodules to v1.19.4 and v1.14.2
2026-08-02 14:11:11 -04:00
wmantly
9c3cbb0ec2
Merge pull request #135 from theta42/update-submodules
...
CI/CD / build-theta-agent (push) Successful in 45s
CI/CD / docker-push (push) Failing after 16s
chore: update submodules
2026-08-02 13:25:20 -04:00
wmantly
f44c075ede
chore: update sso-manager-node submodule
2026-08-02 13:24:14 -04:00
wmantly
ac9f672bae
Merge pull request #134 from theta42/fix/setup-echo-and-unbound
...
fix: setup.sh output bugs
2026-08-02 13:21:31 -04:00
wmantly
43b8307e54
docs: note docker compose v1 incompatibility
2026-08-02 13:13:50 -04:00
wmantly
9541c47470
fix: resolve jump-host naming bug and setup.sh secrets list bug
2026-08-02 12:56:55 -04:00
wmantly