Skip to content

v0.7.0 — kubectl + Helm, one-flag sandbox kit, apt mirrors

Choose a tag to compare

View all tags
@dirien dirien released this 10 Aug 12:54
· 4 commits to main since this release
v0.7.0
b0a99ef
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Requires Docker Sandboxes (sbx) 0.38.0+.

Changes since v0.6.1

  • kubectl 1.36.3 + Helm 4.2.3 (#10): pinned and verified against each vendor's published checksums, on both architectures. Cluster API endpoints and chart registries stay out of the egress allow-list on purpose; add yours per docs/network.md.
  • One-flag sandbox kit (#9): ghcr.io/dirien/infrastructure-sandbox-kit is a kind: sandbox kit that pins the template image and carries the network rules, the Pulumi credential, setup and agent instructions. sbx run --kit ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0 infrastructure-sandbox . is the whole invocation.
  • Ubuntu + Docker apt mirrors allowed (#7): plain apt-get update && apt-get install works inside the sandbox.
  • ShellCheck gate (#6): all provisioning scripts pass a pinned ShellCheck v0.11.0 with four optional checks; CI enforces it on every scripts change. The arch-to-checksum case statements now refuse unverified installs on unknown arches.
  • my-claude-apm-setup v0.6.2 (#8): adds the shellcheck-configuration skill; 34 skills materialize into the agent home.

Artifacts

  • Sandbox kit (one flag): ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0
  • Mixin kit: ghcr.io/dirien/infrastructure-kit:v0.7.0
  • Template image: ghcr.io/dirien/infrastructure-sandbox:v0.7.0 (multi-arch: amd64 + arm64)

All four kit artifacts validated with sbx kit validate (sbx 0.38.0) before pushing.

sbx run --kit ghcr.io/dirien/infrastructure-sandbox-kit:v0.7.0 infrastructure-sandbox .
Assets 2
Loading