feat(dir): kagenti deployment

api/go.mod

@@ -2,6 +2,8 @@ module github.com/agntcy/dir/api
 
 go 1.25.2
 
+replace github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
+
 require (
 	buf.build/gen/go/agntcy/oasf-sdk/protocolbuffers/go v1.36.10-20251029125108-823ea6fabc82.1
 	buf.build/gen/go/agntcy/oasf/protocolbuffers/go v1.36.10-20251022143645-07a420b66e81.1

cli/Dockerfile

@@ -15,7 +15,7 @@ RUN --mount=type=cache,id=${TARGETPLATFORM}-apt,target=/var/cache/apt,sharing=lo
       gcc \
       libc6-dev
 
-WORKDIR /build/cli
+WORKDIR /build/dir/cli
 
 RUN --mount=type=cache,target=/go/pkg/mod \
     --mount=type=cache,target=/root/.cache/go-build \

cli/go.mod

@@ -9,6 +9,8 @@ replace (
 	github.com/agntcy/dir/importer => ../importer
 	github.com/agntcy/dir/mcp => ../mcp
 	github.com/agntcy/dir/utils => ../utils
+	github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
+	github.com/kagenti/operator => github.com/kagenti/kagenti-operator/kagenti-operator v0.0.0-20251209235923-207524f24e65
 )
 
 require (
@@ -180,6 +182,7 @@ require (
 	github.com/jedisct1/go-minisign v0.0.0-20230811132847-661be99b8267 // indirect
 	github.com/josharian/intern v1.0.0 // indirect
 	github.com/json-iterator/go v1.1.12 // indirect
+	github.com/kagenti/operator v0.0.0-00010101000000-000000000000 // indirect
 	github.com/klauspost/compress v1.18.1 // indirect
 	github.com/klauspost/cpuid/v2 v2.3.0 // indirect
 	github.com/letsencrypt/boulder v0.0.0-20240726163629-a21c417bc04e // indirect
@@ -317,6 +320,7 @@ require (
 	k8s.io/kube-openapi v0.0.0-20250318190949-c8a335a9a2ff // indirect
 	k8s.io/utils v0.0.0-20241210054802-24370beab758 // indirect
 	lukechampine.com/blake3 v1.4.1 // indirect
+	sigs.k8s.io/controller-runtime v0.20.0 // indirect
 	sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 // indirect
 	sigs.k8s.io/randfill v1.0.0 // indirect
 	sigs.k8s.io/structured-merge-diff/v4 v4.6.0 // indirect

cli/go.sum

@@ -694,8 +694,6 @@ github.com/ThalesIgnite/crypto11 v1.2.5 h1:1IiIIEqYmBvUYFeMnHqRft4bwf/O36jryEUpY
 github.com/ThalesIgnite/crypto11 v1.2.5/go.mod h1:ILDKtnCKiQ7zRoNxcp36Y1ZR8LBPmR2E23+wTQe/MlE=
 github.com/agnivade/levenshtein v1.2.1 h1:EHBY3UOn1gwdy/VbFwgo4cxecRznFk7fKWN1KOX7eoM=
 github.com/agnivade/levenshtein v1.2.1/go.mod h1:QVVI16kDrtSuwcpd0p1+xMC6Z/VfhtCyDIjcwga4/DU=
-github.com/agntcy/oasf-sdk/pkg v0.0.14 h1:DNKQNf4R4SMDbnaawoSl6FVOBvkSy4O9MyqKd7iHE8I=
-github.com/agntcy/oasf-sdk/pkg v0.0.14/go.mod h1:FvcEB49gsvK+JO5i6l/pt5QgTK0LZeR7KYKsdcI6ZIM=
 github.com/airbrake/gobrake v3.6.1+incompatible/go.mod h1:wM4gu3Cn0W0K7GUuVWnlXZU11AGBXMILnrdOU8Kn00o=
 github.com/ajstarks/deck v0.0.0-20200831202436-30c9fc6549a9/go.mod h1:JynElWSGnm/4RlzPXRlREEwqTHAN3T56Bv2ITsFT3gY=
 github.com/ajstarks/deck/generate v0.0.0-20210309230005-c3f852c02e19/go.mod h1:T13YZdzov6OU0A1+RfKZiZN9ca6VeKdBdyDV+BY97Tk=
@@ -1316,6 +1314,8 @@ github.com/jtolds/gls v4.20.0+incompatible h1:xdiiI2gbIgH/gLH7ADydsJ1uDOEzR8yvV7
 github.com/jtolds/gls v4.20.0+incompatible/go.mod h1:QJZ7F/aHp+rZTRtaJ1ow/lLfFfVYBRgL+9YlvaHOwJU=
 github.com/jung-kurt/gofpdf v1.0.0/go.mod h1:7Id9E/uU8ce6rXgefFLlgrJj/GYY22cpxn+r32jIOes=
 github.com/jung-kurt/gofpdf v1.0.3-0.20190309125859-24315acbbda5/go.mod h1:7Id9E/uU8ce6rXgefFLlgrJj/GYY22cpxn+r32jIOes=
+github.com/kagenti/kagenti-operator/kagenti-operator v0.0.0-20251209235923-207524f24e65 h1:vCTulD30lqp5IpZ3Nh6+zQ0I9XBIoDoN4cqZ5mREZl4=
+github.com/kagenti/kagenti-operator/kagenti-operator v0.0.0-20251209235923-207524f24e65/go.mod h1:ONO2PmpfRSPDfYAkgIKlABLlBFh9kpQNJg+Es+krw4s=
 github.com/kardianos/osext v0.0.0-20190222173326-2bc1f35cddc0/go.mod h1:1NbS8ALrpOvjt0rHPNLyCIeMtbizbir8U//inJ+zuB8=
 github.com/kballard/go-shellquote v0.0.0-20180428030007-95032a82bc51/go.mod h1:CzGEWj7cYgsdH8dAjBGEr58BoE7ScuLd+fwFZ44+/x8=
 github.com/kisielk/errcheck v1.5.0/go.mod h1:pFxgyoBC7bSaBwPgfKdkLd5X25qrDl4LWUI2bnpBCr8=
@@ -2550,6 +2550,8 @@ rsc.io/binaryregexp v0.2.0/go.mod h1:qTv7/COck+e2FymRvadv62gMdZztPaShugOCi3I+8D8
 rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
 rsc.io/quote/v3 v3.1.0/go.mod h1:yEA65RcK8LyAZtP9Kv3t0HmxON59tX3rD+tICJqUlj0=
 rsc.io/sampler v1.3.0/go.mod h1:T1hPZKmBbMNahiBKFy5HrXp6adAjACjK9JXDnKaTXpA=
+sigs.k8s.io/controller-runtime v0.20.0 h1:jjkMo29xEXH+02Md9qaVXfEIaMESSpy3TBWPrsfQkQs=
+sigs.k8s.io/controller-runtime v0.20.0/go.mod h1:BrP3w158MwvB3ZbNpaAcIKkHQ7YGpYnzpoSTZ8E14WU=
 sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3 h1:/Rv+M11QRah1itp8VhT6HoVx1Ray9eB4DBr+K+/sCJ8=
 sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3/go.mod h1:18nIHnGi6636UCz6m8i4DhaJ65T6EruyzmoQqI2BVDo=
 sigs.k8s.io/randfill v0.0.0-20250304075658-069ef1bbf016/go.mod h1:XeLlZ/jmk4i1HRopwe7/aU3H5n1zNUcX6TM94b3QxOY=

client/go.mod

@@ -5,6 +5,7 @@ go 1.25.2
 replace (
 	github.com/agntcy/dir/api => ../api
 	github.com/agntcy/dir/utils => ../utils
+	github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
 )
 
 require (

docker-bake.hcl

@@ -46,8 +46,8 @@ target "docker-metadata-action" {
 
 
 target "dir-apiserver" {
-  context = "."
-  dockerfile = "./server/Dockerfile"
+  context = ".."
+  dockerfile = "./dir/server/Dockerfile"
   target = "production"
   inherits = [
     "_common",
@@ -57,8 +57,8 @@ target "dir-apiserver" {
 }
 
 target "dir-apiserver-coverage" {
-  context = "."
-  dockerfile = "./server/Dockerfile"
+  context = ".."
+  dockerfile = "./dir/server/Dockerfile"
   target = "coverage"
   inherits = [
     "_common",
@@ -68,8 +68,8 @@ target "dir-apiserver-coverage" {
 }
 
 target "dir-ctl" {
-  context = "."
-  dockerfile = "./cli/Dockerfile"
+  context = ".."
+  dockerfile = "./dir/cli/Dockerfile"
   inherits = [
     "_common",
     "docker-metadata-action",
@@ -78,8 +78,8 @@ target "dir-ctl" {
 }
 
 target "sdks-test" {
-  context = "."
-  dockerfile = "./e2e/sdk/Dockerfile"
+  context = ".."
+  dockerfile = "./dir/e2e/sdk/Dockerfile"
   depends_on = ["dir-ctl"] # Ensures dir-ctl is built first
   inherits = [
     "_common",

e2e/go.mod

@@ -10,6 +10,7 @@ replace (
 	github.com/agntcy/dir/importer => ../importer
 	github.com/agntcy/dir/mcp => ../mcp
 	github.com/agntcy/dir/utils => ../utils
+	github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
 )
 
 require (

e2e/sdk/Dockerfile

@@ -15,7 +15,7 @@ ENV DIRECTORY_CLIENT_AUTH_MODE="x509"
 ENV DIRECTORY_CLIENT_JWT_AUDIENCE="spiffe://dir.example/spire/server"
 
 WORKDIR /tmp/
-COPY ./sdk /tmp/
+COPY ./dir/sdk /tmp/
 
 WORKDIR /tmp/dir-py
 

hub/go.mod

@@ -6,6 +6,7 @@ replace (
 	github.com/agntcy/dir/api => ../api
 	github.com/agntcy/dir/cli => ../cli
 	github.com/agntcy/dir/utils => ../utils
+	github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
 )
 
 require (

importer/go.mod

@@ -6,6 +6,7 @@ replace (
 	github.com/agntcy/dir/api => ../api
 	github.com/agntcy/dir/client => ../client
 	github.com/agntcy/dir/utils => ../utils
+	github.com/agntcy/oasf-sdk/pkg => ../../oasf-sdk/pkg
 )
 
 require (

kagenti-env/README.md

@@ -0,0 +1,61 @@
+# Kagenti Operator - Task Automation
+
+Automate installation and management using [Task](https://taskfile.dev/).
+
+## Prerequisites
+
+```bash
+# macOS
+brew install go-task kind kubectl helm
+```
+
+## Install
+
+```bash
+# Create kind cluster + install everything (cert-manager, tekton, operator)
+task install:all
+
+# Or install on existing cluster
+task install CLUSTER_NAME=my-cluster
+
+# Install a specific chart version
+task install CLUSTER_NAME=my-cluster CHART_VERSION=0.2.0-alpha.18
+```
+
+## Delete
+
+```bash
+# Uninstall operator only
+task uninstall CLUSTER_NAME=my-cluster
+
+# Uninstall everything (operator + tekton + cert-manager)
+task uninstall:all CLUSTER_NAME=my-cluster
+
+# Delete the entire kind cluster
+task kind:delete CLUSTER_NAME=my-cluster
+```
+
+## Useful Commands
+
+```bash
+# Show all available tasks
+task --list
+
+# Check status
+task status CLUSTER_NAME=my-cluster
+
+# View operator logs
+task logs CLUSTER_NAME=my-cluster
+
+# Install from local chart (development)
+task install:operator:local CLUSTER_NAME=my-cluster
+```
+
+## Variables
+
+| Variable | Default | Description |
+|----------|---------|-------------|
+| `CLUSTER_NAME` | `kagenti` | Kind cluster name |
+| `NAMESPACE` | `kagenti-system` | Operator namespace |
+| `CHART_VERSION` | `0.2.0-alpha.18` | Helm chart version |
+| `CHART_REPO` | `oci://ghcr.io/kagenti/kagenti-operator` | OCI Helm chart repository |