This commit adds comprehensive Claude Code support for the ORION infrastructure project,
including security-hardened settings, enterprise network configuration, and MCP integration
opportunities.
Changes:
1. .claude/settings.json (NEW):
- Infrastructure-aware permissions for Terraform, Ansible, kubectl
- Security: Block access to credentials (.pem, .key, terraform.tfvars)
- Sandbox mode enabled for secure command execution
- Pre-approved patterns for safe infrastructure operations
- Git status hook to show working tree before each action
- 90-day chat retention for complex infrastructure work
- Custom status line showing project context
2. docs/CLAUDE_CODE_INTEGRATION.md (NEW):
- Complete guide for using Claude Code with ORION
- Network configuration (proxy, SSL, mTLS, firewall)
- Third-party integrations (AWS Bedrock, Google Vertex, Azure Foundry)
- LLM Gateway configuration for centralized management
- MCP integration opportunities:
* Proxmox API for VM management
* NetBox for IPAM integration
* Prometheus for metrics
* GitHub for enhanced workflows
- Security best practices and permission management
- Workflows for AI-assisted infrastructure development
- Troubleshooting guide
3. .gitignore updates:
- Add .claude/settings.local.json (personal overrides)
- Add .claude/.session/ (session data)
- Add .claude/chats/ (chat history)
4. ARCHITECTURE.md updates:
- Add reference to Claude Code Integration documentation
5. README.md updates:
- Add Claude Code Integration to documentation links
Key features:
- Enterprise-ready: Proxy, SSL, mTLS support
- Security-first: Credential protection, sandboxing, permission controls
- Team-friendly: Shared settings in git, personal overrides gitignored
- MCP-ready: Integration paths for Proxmox, NetBox, Prometheus
- Infrastructure-optimized: Pre-configured for Terraform, Ansible, K8s workflows
Impact:
- Developers can safely use AI assistance with infrastructure code
- Credentials are protected from accidental exposure
- Enterprise network requirements supported (proxy, SSL, firewall)
- Team can share consistent Claude Code settings
- Foundation for future MCP integrations with infrastructure services
Claude