TSYS Group COO
9b4502f55d
Email domain bug (would have caused all provisioning to fail):
- Cloudron email default was tsys-cloudron.knel.net (the dashboard host)
instead of turnsys.com (the actual identity domain). Fixed in 3 places.
- Added explicit cloudron_email field to all agents in agents.yaml.example.
Other fixes:
- STATE_DIR.mkdir() moved from module level to main() so --dry-run and
--help work outside the container.
- IndexError guard: password_inputs[0] crashes if zero fields found.
- State file save moved to finally block so partial results survive
provisioning failures.
- Exception in provision_agent no longer re-raised (was preventing state
file write and summary reporting).
- BW item_exists no longer swallows network/session errors as 'not found'
(was causing duplicate credential creation).
- Redundant -u flag in bw generate (-uluns → -ulns).
- Dockerfile: npx install with || true → npm install -g (silent failure
would cause runtime 'bw: command not found').
- Added .dockerignore to prevent .env/agents.yaml/state from entering image.
💘 Generated with Crush
Assisted-by: Crush:glm-5.2
89 lines
2.7 KiB
Plaintext
89 lines
2.7 KiB
Plaintext
# agents.yaml — Agent identity manifest
|
|
#
|
|
# One entry per AI agent identity. The provisioner reads this file,
|
|
# enrolls each agent in Cloudron, generates API keys, and stores
|
|
# everything in Bitwarden.
|
|
#
|
|
# Generate Cloudron invite links at:
|
|
# https://tsys-cloudron.knel.net -> Users -> Add User -> copy invite URL
|
|
|
|
agents:
|
|
- name: vp-techops
|
|
display_name: "VP TechOps"
|
|
cloudron_email: "vp-techops@turnsys.com"
|
|
priority: Q3
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems:
|
|
gitea:
|
|
url: https://git.knownelement.com
|
|
token_name: vp-techops-api
|
|
scopes: ["api", "repo", "read:org"]
|
|
orgs: ["KNEL", "TechnicalOperations"]
|
|
discourse:
|
|
url: https://community.turnsys.com
|
|
categories: [74, 20]
|
|
redmine:
|
|
url: https://projects.knownelement.com
|
|
projects: [55, 59]
|
|
role: Developer
|
|
|
|
- name: vp-secops
|
|
display_name: "VP SecOps"
|
|
cloudron_email: "vp-secops@turnsys.com"
|
|
priority: Q3
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems:
|
|
gitea:
|
|
url: https://git.knownelement.com
|
|
token_name: vp-secops-api
|
|
scopes: ["api", "repo", "read:org"]
|
|
orgs: ["KNEL"]
|
|
discourse:
|
|
url: https://community.turnsys.com
|
|
categories: [74]
|
|
redmine:
|
|
url: https://projects.knownelement.com
|
|
projects: [55]
|
|
role: Developer
|
|
|
|
- name: vp-techcompliance
|
|
display_name: "VP TechCompliance"
|
|
cloudron_email: "vp-techcompliance@turnsys.com"
|
|
priority: Q3
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems:
|
|
gitea:
|
|
url: https://git.knownelement.com
|
|
token_name: vp-techcompliance-api
|
|
scopes: ["api", "repo", "read:org"]
|
|
orgs: ["KNEL"]
|
|
discourse:
|
|
url: https://community.turnsys.com
|
|
categories: [75]
|
|
redmine:
|
|
url: https://projects.knownelement.com
|
|
projects: [55]
|
|
role: Developer
|
|
|
|
# Q4 agents — enroll in Cloudron only (Phase 1), no system access yet
|
|
- name: coo
|
|
display_name: "Chief Operating Officer"
|
|
cloudron_email: "coo@turnsys.com"
|
|
priority: Q4
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems: {}
|
|
|
|
- name: svp-knel
|
|
display_name: "SVP KNEL"
|
|
cloudron_email: "svp-knel@turnsys.com"
|
|
priority: Q4
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems: {}
|
|
|
|
- name: svp-tctc
|
|
display_name: "SVP TCTC"
|
|
cloudron_email: "svp-tctc@turnsys.com"
|
|
priority: Q4
|
|
cloudron_invite: "https://tsys-cloudron.knel.net/invitation/REPLACE_WITH_TOKEN"
|
|
systems: {}
|