| File | Purpose |
|---|
devenv.nix | Packages, services, processes, tasks, shell configuration |
devenv.yaml | Nix inputs configuration |
.envrc | direnv integration |
.env | Runtime environment variables (dotenv) |
scripts/kdc-init.sh | Idempotent KDC initialization |
pyproject.toml | Python project config (dependencies, dev tools) |
Tiltfile | Tilt dev iteration config (image builds, port forwards) |
| File | Purpose |
|---|
infra/aws/tofu/variables.tf | OpenTofu variable definitions |
infra/aws/tofu/terraform.tfvars | Shared deployment defaults |
infra/aws/ansible/group_vars/all.yml | Ansible shared variables |
zarf/zarf.yaml | Air-gap package definition |
policy/tofu/*.rego | OPA policies for OpenTofu plans |
policy/k8s/*.rego | OPA policies for Kubernetes |
| Variable | Default | Purpose |
|---|
KRB5_REALM | DEV.VISTA.ZNDX.ORG | Kerberos realm {ENV}.{LOCATION}.ZNDX.ORG (non-secret) |
SIGNALS_KRB_ENV | dev | Env segment → DEV in realm |
SIGNALS_KRB_LOCATION | vista | Location segment → VISTA in realm |
SIGNALS_KRB_HOST | tinybox.dev.vista.zndx.org | Kerberos SPN host FQDN |
SIGNALS_KRB_USER_KEYTAB | (optional) | SecretSpec: path to signals@… keytab |
POSTGRES_KRB_KEYTAB | (optional) | SecretSpec: path to postgres SPN keytab |
See Secrets and secretspec.toml for the full declared set.
| KRB5_KDC_PORT | 8848 | KDC listener port |
| KRB5_CONFIG | .devenv/kdc/krb5.conf | krb5 client config (set by shell) |
| KRB5_KDC_PROFILE | .devenv/kdc/kdc.conf | KDC server config (set by shell) |
| KRB5CCNAME | .devenv/kdc/krb5cc | Credential cache (set by shell) |
| Variable | Purpose |
|---|
AWS_REGION | AWS region for provisioning |
CLOUDFLARE_TUNNEL_TOKEN | Tunnel credentials (from tofu output) |
CLOUDFLARE_TUNNEL_ID | Tunnel identifier (from tofu output) |
signals-360/
├── components/ # ASF submodules (atlas, ranger, kudu, ...)
├── docs/
│ ├── current/ # mdbook documentation
│ └── scratch/ # Work notes
├── features/ # BDD feature specifications
│ ├── agent/ # S01-S03 scenarios
│ ├── analytics/ # S04-S06 scenarios
│ └── platform/ # Infrastructure scenarios
├── infra/ # Deployment infrastructure
│ └── aws/ # OpenTofu + Ansible
├── policy/ # OPA Rego policies
├── scripts/ # Shell scripts (kdc-init)
├── tilt/ # Tilt dev overlays
├── zarf/ # Air-gap packaging
├── devenv.nix # Development environment
├── pyproject.toml # Python project config
└── Tiltfile # Tilt configuration