Tavee Khunbida taveek

Autonomous Multi-Agent Workflow for OpenCode

A fire-and-forget workflow that takes a Linear issue ID and autonomously plans, tests, implements, and opens a draft PR — with TDD baked in. You walk away; it notifies you when done.

Built for OpenCode using custom agents and slash commands.

Important: The /workflow command must run with agent: build (OpenCode's default agent with full tool access). The orchestrator needs unrestricted access to do git operations, dispatch subagents, and create PRs. If you're in a restricted mode, switch to build first.

Why this exists:

Fire and forget. Kick off a task and walk away. You get notified when it's done or needs attention.

Rancher v2.X KeyCloak Authentication Backend Configuration

Ranchers official documentation about how to configure the Rancher <> KeyCloak setup is fine but definitely not sufficient to successfully configure it (https://rancher.com/docs/rancher/v2.x/en/admin-settings/authentication/keycloak/). That's the reason why here every single required step is documented down here.

KeyCloak Configuration

I simply use the default master realm for the Rancher client. Nevertheless, it would sometimes absolutely make sense to use a custom KeyCloak realm.

Login as admin on https://keycloak.example.com/. Important: It's crucial that in KeyCloak the same username exists as you use as admin user on Rancher. Since I just use the admin account in this guide, this prerequisite is already achieved.
Create a new client under https://keycloak.example.com/auth/admin/master/console/#/realms/master/clients
- Client ID: https://rancher.example.com/v1-saml/keycloak/saml/metadata

tmux cheatsheet

As configured in my dotfiles.

start new:

tmux

start new with session name:

K8s RBAC user creation

CertificateSigningRequest

generate key - certificate signing request

export USER_NAME=user1
openssl genrsa -out $USER_NAME.key 2048
openssl req -new -key $USER_NAME.key -out $USER_NAME.csr

	# -- coding: utf-8 --

	# requires python-ldap (usually pip install python-ldap)
	# But this package requires OpenLDAP libraries, so it is a pain to install it on Windows.
	# So, if you're on Windows, I recomment to use pre-compiled binaries with this command (virtualenv supported):
	# pip install https://download.lfd.uci.edu/pythonlibs/h2ufg7oq/python_ldap-3.1.0-cp37-cp37m-win_amd64.whl

	import ldap
	from ldap.controls import SimplePagedResultsControl

	package example

	import scala.concurrent.duration.Duration
	import scala.concurrent.{ Future, Await }
	//import scala.concurrent.ExecutionContext.Implicits.global

	object Hello extends Greeting with App {
	Prog.debug("Starting Main")
	val futureA = Prog.taskA()
	val futureB = Prog.taskB()

	<html>
	<head>
	<link rel="stylesheet" href="https://cdnjs.cloudflare.com/ajax/libs/jasmine/2.8.0/jasmine.css">
	<script src="https://cdnjs.cloudflare.com/ajax/libs/jasmine/2.8.0/jasmine.js"></script>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/jasmine/2.8.0/jasmine-html.js"></script>
	<script src="https://cdnjs.cloudflare.com/ajax/libs/jasmine/2.8.0/boot.js"></script>
	<script type="text/javascript">

	</script>
	</head>

	<!DOCTYPE web-app PUBLIC
	"-//Sun Microsystems, Inc.//DTD Web Application 2.3//EN"
	"http://java.sun.com/dtd/web-app_2_3.dtd" >

	<web-app>
	<display-name>TooDoo Web Application</display-name>
	</web-app>

	#!/bin/bash
	JBOSS_HOME=/usr/local/share/jboss
	$JBOSS_HOME/bin/jboss-cli.sh -c --controller=localhost:9999 --command="cd deployment,cd myapp.war, read-attribute status" --user=app1 --password=password