AI Engineering Platform
Infrastructure and tooling for AI Engineering bootcamps, providing secure, isolated development environments and automated participant onboarding.
Overview
This platform consists of the following components:
- Coder Deployment - Containerized development environments supported by Coder
- Participant Onboarding System - Secure, automated participant onboarding
1. Coder Deployment for GCP
The coder folder contains all resources needed to deploy a Coder instance on Google Cloud Platform (GCP), along with reusable workspace templates and Docker images for the workspace environment.
Structure
- deploy/ - Terraform scripts and startup automation for provisioning the Coder server on a GCP VM
- docker/ - Dockerfiles and guides for building custom images used by Coder workspace templates
- templates/ - Coder workspace templates for reproducible, containerized development environments on GCP
Usage
- Provision Coder on GCP - Follow the steps in
coder/deploy/README.md - Build and Push Docker Images - See
coder/docker/README.md - Push Workspace Templates - See
coder/templates/README.md
2. Participant Onboarding System
Automated API key distribution for bootcamp participants using GCP Secret Manager and workload identity.
- Secrets never written to disk — exported into the shell via
eval "$(onboard ...)" - Workspace VMs authenticate directly to Secret Manager via workload identity (no Firebase, no token service)
- Per-participant JSON secrets named
{bootcamp-name}-env-{github-handle} - Firestore tracks participant records and onboarded status
Architecture
Admin Phase
1. Setup participants/teams in Firestore
2. Generate API keys (Gemini, Langfuse, etc.)
3. onboard admin setup-secrets → creates per-participant Secret Manager secrets
4. Grant workspace SA roles/secretmanager.secretAccessor
5. Add users to GitHub org
Participant Phase
1. eval "$(onboard --bootcamp-name <name>)" in Coder workspace
2. Fetches env vars from Secret Manager via workload identity
3. Runs integration tests (env vars injected, nothing written to disk)
4. Marks participant as onboarded in Firestore
1 maintainer
Download files
Download the file for your platform. If you're not sure which to choose, learn more about installing packages.
Source Distribution
Built Distribution
Filter files by name, interpreter, ABI, and platform.
If you're not sure about the file name format, learn more about wheel file names.
Copy a direct link to the current filters
File details
Details for the file aieng_platform_onboard-0.7.3.tar.gz.
File metadata
- Download URL: aieng_platform_onboard-0.7.3.tar.gz
- Upload date:
- Size: 38.0 kB
- Tags: Source
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
bc32c00713b2c6f594633a637998e9d4bba0d55764bc22f0c62a7712425aab0c
|
|
| MD5 |
6214aa764a91ae054ceaac3078228902
|
|
| BLAKE2b-256 |
1b0d9743540cf3ede9c9f6c851d14ad3698499968ec10be2826acb2864346119
|
Provenance
The following attestation bundles were made for aieng_platform_onboard-0.7.3.tar.gz:
Publisher:
publish.yml on VectorInstitute/aieng-platform
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
aieng_platform_onboard-0.7.3.tar.gz -
Subject digest:
bc32c00713b2c6f594633a637998e9d4bba0d55764bc22f0c62a7712425aab0c - Sigstore transparency entry: 2026017186
- Sigstore integration time:
-
Permalink:
VectorInstitute/aieng-platform@b8f9adfd2e87d52aa53f88e7fac8892221335b24 -
Branch / Tag:
refs/tags/v0.7.3 - Owner: https://github.com/VectorInstitute
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@b8f9adfd2e87d52aa53f88e7fac8892221335b24 -
Trigger Event:
push
-
Statement type:
File details
Details for the file aieng_platform_onboard-0.7.3-py3-none-any.whl.
File metadata
- Download URL: aieng_platform_onboard-0.7.3-py3-none-any.whl
- Upload date:
- Size: 47.9 kB
- Tags: Python 3
- Uploaded using Trusted Publishing? Yes
- Uploaded via:
twine/6.1.0 CPython/3.13.12
File hashes
| Algorithm | Hash digest | |
|---|---|---|
| SHA256 |
a9c1abc12e09f1b0b7d67d37debc69f54557cfc8363e218ee32c34ffd428c342
|
|
| MD5 |
3e9f2fb108bf8cde75e6e414757c6877
|
|
| BLAKE2b-256 |
8d927357c71b2c37debfaf168812a7ff84ba4a672277674b32592bb208284eba
|
Provenance
The following attestation bundles were made for aieng_platform_onboard-0.7.3-py3-none-any.whl:
Publisher:
publish.yml on VectorInstitute/aieng-platform
-
Statement:
-
Statement type:
https://in-toto.io/Statement/v1 -
Predicate type:
https://docs.pypi.org/attestations/publish/v1 -
Subject name:
aieng_platform_onboard-0.7.3-py3-none-any.whl -
Subject digest:
a9c1abc12e09f1b0b7d67d37debc69f54557cfc8363e218ee32c34ffd428c342 - Sigstore transparency entry: 2026017279
- Sigstore integration time:
-
Permalink:
VectorInstitute/aieng-platform@b8f9adfd2e87d52aa53f88e7fac8892221335b24 -
Branch / Tag:
refs/tags/v0.7.3 - Owner: https://github.com/VectorInstitute
-
Access:
private
-
Token Issuer:
https://token.actions.githubusercontent.com -
Runner Environment:
github-hosted -
Publication workflow:
publish.yml@b8f9adfd2e87d52aa53f88e7fac8892221335b24 -
Trigger Event:
push
-
Statement type:
