Directories
¶
| Path | Synopsis |
|---|---|
|
Package agent supervises member processes and the authenticated node API.
|
Package agent supervises member processes and the authenticated node API. |
|
datamcp
Package datamcp supervises private, authenticated data MCP upstreams.
|
Package datamcp supervises private, authenticated data MCP upstreams. |
|
elastic
Package elastic renders and supervises secured Elastic Stack node processes.
|
Package elastic renders and supervises secured Elastic Stack node processes. |
|
keycloak
Package keycloak supervises the native Keycloak distribution.
|
Package keycloak supervises the native Keycloak distribution. |
|
mysql
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
neo4j
Package neo4j supervises a single native Neo4j Community server JVM.
|
Package neo4j supervises a single native Neo4j Community server JVM. |
|
openbao
The member configuration is cached in plaintext by the shared agent.
|
The member configuration is cached in plaintext by the shared agent. |
|
postgres
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
rabbitmq
Package rabbitmq renders and supervises a RabbitMQ member using the shared agent.Engine protocol.
|
Package rabbitmq renders and supervises a RabbitMQ member using the shared agent.Engine protocol. |
|
supabase
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
supabase/gateway
Package gateway renders a self-contained Envoy 1.39 bootstrap.
|
Package gateway renders a self-contained Envoy 1.39 bootstrap. |
|
supabase/initsql
Package initsql owns the curated Supabase prerequisites on PostgreSQL 17.
|
Package initsql owns the curated Supabase prerequisites on PostgreSQL 17. |
|
supabase/logship
Package logship pushes bounded batches of supervised process logs to a private Vector HTTP source.
|
Package logship pushes bounded batches of supervised process logs to a private Vector HTTP source. |
|
temporal
Package temporal supervises native Temporal server roles and the Web UI.
|
Package temporal supervises native Temporal server roles and the Web UI. |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
Package agentrollout schedules opt-in provider-managed agent upgrades.
|
Package agentrollout schedules opt-in provider-managed agent upgrades. |
|
Package api provides primitives to interact with the openapi HTTP API.
|
Package api provides primitives to interact with the openapi HTTP API. |
|
Package apispec parses the embedded public OpenAPI document once for request validation, response-conformance tests and serving it to clients.
|
Package apispec parses the embedded public OpenAPI document once for request validation, response-conformance tests and serving it to clients. |
|
Package auth manages local and OIDC accounts, sealed Ed25519 signing keys, five-minute access cookies, thirty-day rotating refresh families and CSRF.
|
Package auth manages local and OIDC accounts, sealed Ed25519 signing keys, five-minute access cookies, thirty-day rotating refresh families and CSRF. |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
Package certificates provides secret-free expiry inventory and durable daily warnings.
|
Package certificates provides secret-free expiry inventory and durable daily warnings. |
|
Package cli implements karactl, the Karakoram REST API command-line client.
|
Package cli implements karactl, the Karakoram REST API command-line client. |
|
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0 |
|
Package cronutil defines the scheduling grammar shared by control-plane policies.
|
Package cronutil defines the scheduling grammar shared by control-plane policies. |
|
Package datamcp implements the per-cluster data MCP gateway served at /mcp/clusters/{namespace}/{cluster}.
|
Package datamcp implements the per-cluster data MCP gateway served at /mcp/clusters/{namespace}/{cluster}. |
|
companion
Package companion manages the stateless data MCP member independently of provider state.
|
Package companion manages the stateless data MCP member independently of provider state. |
|
companionspec
Package companionspec is the control-plane to agent payload of the data MCP companion (agentapi.MemberConfig.EngineSpec when Engine is "datamcp").
|
Package companionspec is the control-plane to agent payload of the data MCP companion (agentapi.MemberConfig.EngineSpec when Engine is "datamcp"). |
|
nativees
Package nativees implements the versioned, scope-restricted Elasticsearch data tools.
|
Package nativees implements the versioned, scope-restricted Elasticsearch data tools. |
|
nativermq
Package nativermq exposes scoped RabbitMQ data tools through the Management API.
|
Package nativermq exposes scoped RabbitMQ data tools through the Management API. |
|
Package drills verifies backups using isolated, server-managed restore targets.
|
Package drills verifies backups using isolated, server-managed restore targets. |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
elastic
Package elastic reconciles Elasticsearch nodes and their Kibana, Logstash and APM component services.
|
Package elastic reconciles Elasticsearch nodes and their Kibana, Logstash and APM component services. |
|
elastic/agentspec
Package agentspec defines the Elasticsearch engine payload carried in agentapi.MemberConfig.EngineSpec.
|
Package agentspec defines the Elasticsearch engine payload carried in agentapi.MemberConfig.EngineSpec. |
|
elastic/esapi
Package esapi implements Elasticsearch administration over CA-pinned HTTPS.
|
Package esapi implements Elasticsearch administration over CA-pinned HTTPS. |
|
enginetest
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
keycloak
Package keycloak reconciles an independent PostgreSQL binding consumer.
|
Package keycloak reconciles an independent PostgreSQL binding consumer. |
|
keycloak/kcspec
Package kcspec defines the private Keycloak member configuration.
|
Package kcspec defines the private Keycloak member configuration. |
|
mysql
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
mysql/myspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
nativeartifacts
Package nativeartifacts pins the native programs installed by engine members.
|
Package nativeartifacts pins the native programs installed by engine members. |
|
neo4j
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
neo4j/neo4jspec
Package neo4jspec defines the Neo4j Community member payload carried in agentapi.MemberConfig.EngineSpec and the bounded agent action protocol shared by the control-plane provider (internal/engine/neo4j) and the member runner (internal/agent/neo4j).
|
Package neo4jspec defines the Neo4j Community member payload carried in agentapi.MemberConfig.EngineSpec and the bounded agent action protocol shared by the control-plane provider (internal/engine/neo4j) and the member runner (internal/agent/neo4j). |
|
openbao
Package openbao manages TLS-only OpenBao servers with Raft or opt-in PostgreSQL storage.
|
Package openbao manages TLS-only OpenBao servers with Raft or opt-in PostgreSQL storage. |
|
openbao/baoapi
Package baoapi is a minimal OpenBao HTTP API client shared by the control plane and the member agent.
|
Package baoapi is a minimal OpenBao HTTP API client shared by the control plane and the member agent. |
|
openbao/baospec
Package baospec defines the OpenBao member specification and the bounded control-plane ↔ member-agent protocol.
|
Package baospec defines the OpenBao member specification and the bounded control-plane ↔ member-agent protocol. |
|
postgres
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
postgres/pgprofile
Package pgprofile is the shared availability and curated SQL authority for PostgreSQL profiles.
|
Package pgprofile is the shared availability and curated SQL authority for PostgreSQL profiles. |
|
postgres/pgspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
psmdb
Package psmdb manages Percona Server for MongoDB without Kubernetes.
|
Package psmdb manages Percona Server for MongoDB without Kubernetes. |
|
psmdb/mongoadmin
Package mongoadmin implements authenticated, quorum-aware MongoDB administration.
|
Package mongoadmin implements authenticated, quorum-aware MongoDB administration. |
|
psmdb/pbm
Package pbm orchestrates durable Percona Backup for MongoDB operations through node agents.
|
Package pbm orchestrates durable Percona Backup for MongoDB operations through node agents. |
|
psmdb/users
Package users manages MongoDB application users, custom roles, and the Percona system-user split.
|
Package users manages MongoDB application users, custom roles, and the Percona system-user split. |
|
pxc
Package pxc composes the shared MySQL lifecycle with Galera replication.
|
Package pxc composes the shared MySQL lifecycle with Galera replication. |
|
rabbitmq
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
rabbitmq/mgmt
Package mgmt implements the RabbitMQ Management HTTP API.
|
Package mgmt implements the RabbitMQ Management HTTP API. |
|
rabbitmq/rmqspec
Package rmqspec defines the RabbitMQ member and bounded agent protocol.
|
Package rmqspec defines the RabbitMQ member and bounded agent protocol. |
|
supabase
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
supabase/sbkeys
Package sbkeys generates Supabase credentials without persistence or logging.
|
Package sbkeys generates Supabase credentials without persistence or logging. |
|
supabase/sbspec
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
temporal
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
temporal/tspec
Package tspec defines the secret-bearing Temporal member contract shared by the control plane and the member agent.
|
Package tspec defines the secret-bearing Temporal member contract shared by the control plane and the member agent. |
|
weaviate
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
weaviate/wvapi
Package wvapi implements the Weaviate v1 REST administration API.
|
Package wvapi implements the Weaviate v1 REST administration API. |
|
weaviate/wvspec
Package wvspec defines the encrypted Weaviate member wire contract.
|
Package wvspec defines the encrypted Weaviate member wire contract. |
|
Package infra defines the backend-neutral infrastructure contract that engine providers, namespaces and the control plane use.
|
Package infra defines the backend-neutral infrastructure contract that engine providers, namespaces and the control plane use. |
|
contracttest
Package contracttest provides the portable infrastructure backend conformance suite.
|
Package contracttest provides the portable infrastructure backend conformance suite. |
|
fake
Package fake implements a deterministic, thread-safe in-memory infrastructure backend for engine tests and backend contract tests.
|
Package fake implements a deterministic, thread-safe in-memory infrastructure backend for engine tests and backend contract tests. |
|
nomad
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
zerops
Package zerops implements Karakoram's Zerops REST infrastructure backend.
|
Package zerops implements Karakoram's Zerops REST infrastructure backend. |
|
Package maintenance evaluates permission to start new member disruptions.
|
Package maintenance evaluates permission to start new member disruptions. |
|
Package mcp embeds the agent interface without adding an authorization path: all operations execute through the cached REST handler with caller credentials.
|
Package mcp embeds the agent interface without adding an authorization path: all operations execute through the cached REST handler with caller credentials. |
|
Package monitoring scrapes member exporters and serves retained metric series.
|
Package monitoring scrapes member exporters and serves retained metric series. |
|
Package namespaces manages project credentials and enrolled project relays.
|
Package namespaces manages project credentials and enrolled project relays. |
|
Package netguard implements DNS-rebinding-safe outbound connection policy.
|
Package netguard implements DNS-rebinding-safe outbound connection policy. |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
Package orphanvolumes retries deletion of explicitly recorded, ID-fenced volumes.
|
Package orphanvolumes retries deletion of explicitly recorded, ID-fenced volumes. |
|
Package pgbinding defines how a consumer service binds to an existing Karakoram PostgreSQL cluster: the control plane creates the consumer's databases and one least-privilege owning login role on the source, seals the role password, and blocks source deletion while the binding exists.
|
Package pgbinding defines how a consumer service binds to an existing Karakoram PostgreSQL cluster: the control plane creates the consumer's databases and one least-privilege owning login role on the source, seals the role password, and blocks source deletion while the binding exists. |
|
Package pki issues cluster and agent certificates from a cluster-scoped CA.
|
Package pki issues cluster and agent certificates from a cluster-scoped CA. |
|
Package rbac provides persisted, deny-overrides authorization.
|
Package rbac provides persisted, deny-overrides authorization. |
|
Package redact removes credential material from native process diagnostics.
|
Package redact removes credential material from native process diagnostics. |
|
Package relay provides authenticated, namespace-scoped TCP tunnels and relay credentials.
|
Package relay provides authenticated, namespace-scoped TCP tunnels and relay credentials. |
|
Package s3endpoint defines the storage registration endpoint contract shared by admission, the Go object client and native-engine configuration renderers.
|
Package s3endpoint defines the storage registration endpoint contract shared by admission, the Go object client and native-engine configuration renderers. |
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors
|
SPDX-License-Identifier: Apache-2.0 Copyright 2026 The Karakoram Authors |
|
Package statejson preserves foreign workflow keys while replacing owned state.
|
Package statejson preserves foreign workflow keys while replacing owned state. |
|
SPDX-License-Identifier: Apache-2.0
|
SPDX-License-Identifier: Apache-2.0 |
|
tools
|
|
|
agentgen
command
Command agentgen validates operation safety metadata and generates its lookup.
|
Command agentgen validates operation safety metadata and generates its lookup. |
|
rbacgen
command
Command rbacgen validates operation authorization metadata and generates the operation-ID lookup consumed by the API authorization middleware.
|
Command rbacgen validates operation authorization metadata and generates the operation-ID lookup consumed by the API authorization middleware. |
|
specnoalias
command
Command specnoalias expands YAML aliases for consumers with safe default alias-expansion limits.
|
Command specnoalias expands YAML aliases for consumers with safe default alias-expansion limits. |
|
Package ui serves the Karakoram single-page web application.
|
Package ui serves the Karakoram single-page web application. |
|
Package version exposes build metadata shared by the server and CLI.
|
Package version exposes build metadata shared by the server and CLI. |
Click to show internal directories.
Click to hide internal directories.