Jon Chery
f31bed2dc3
- Fast-forward merge of phase/08-mtls into milestone/v0.2-networking-observability-security
- Annotated tag v0.2.1 created at this commit
- Gitea release v0.2.1 published with orca-v0.2.1-linux-amd64.tar.gz
- P01 ships internal-CA mTLS, orca cert {ca-init,gen,show,renew,fingerprint},
orca doctor, orca node join --ca-fingerprint, file mode enforcement
(0600/0644), rotation alarm at 30d, cert show redaction, AEAD-only
TLS 1.3 cipher allowlist, structured mTLS handshake log fields.
- REQ coverage: REQ-011, REQ-023, REQ-025, REQ-026, REQ-032,
REQ-033, REQ-034, REQ-035, REQ-036, REQ-038.
---ci---
project: orca
phase: 8
milestone: v0.2
plan: 01
status: ship
version: v0.2.1
requirements:
covered: [REQ-011, REQ-023, REQ-025, REQ-026, REQ-032, REQ-033, REQ-034, REQ-035, REQ-036, REQ-038]
partial: []
---/ci---
Orca
Offline/CLI-first orchestration engine inspired by HashiCorp Nomad, far simpler than Kubernetes.
Status
v0.1: Foundation — see .ciagent/ROADMAP.md for the 6-phase plan.
Pillars
- Simplicity — single binary, minimal dependencies
- AI-first — CLI designed for both humans and AI agents
- Offline-first — no cloud dependencies
- CLI-first — primary interface is the command line
- Security before features — NFRs ship before new functionality
- Bug fixes before features — stability is paramount
- NFRs before features — observability and auditability first
Quickstart
# Build
make build
# Run
./bin/orca version
./bin/orca --help
# Initialize local state
./bin/orca init
Subcommands
| Command | Description | Status |
|---|---|---|
orca version |
Print version info | ✅ Phase 1 |
orca init |
Initialize local orca state | ✅ Phase 1 (stub) |
orca status |
Show orca daemon status | ✅ Phase 1 (stub) |
orca node |
Node management (join, leave, list) |
Phase 2 |
orca job |
Job management (run, list, stop, logs) |
Phase 3 |
Development
make build # Build binary to ./bin/orca
make test # Run tests with race detection
make lint # Run golangci-lint
make fmt # Format code
make release # Build + create Gitea release (Phase 6)
Architecture
See .ciagent/ARCHITECTURE.md for full architecture details.
License
MIT — see LICENSE.