jochen
da8a46cfe8
The mesh-mongodb container goes with its Dockerfile, build bases and bus credential. Its client shelled out to mongosh, which no machine's system carries, so it now speaks to the server through the official mongodb driver its package.json names, inlined into the bundle by the builder (ADR 0198 §4); the tools answer exactly as before (relaxed Extended JSON). The server is reached on loopback at the port the machine published (${port:27017}). The root secret was owned by the mongo image's user (secrets-owner 999:999), which the runtime's account cannot read; the module's own copy is now the runtime's, and the server is given its own 999-owned copy rendered from the same secret.
26 lines
1.1 KiB
TypeScript
26 lines
1.1 KiB
TypeScript
// mongodb's events entrypoint, launched by the node's runtime beside its tools and provisioner
|
|
// (novox/hq ADR 0198). The database lifecycle events are EMITTED from the provisioner, where
|
|
// the lifecycle actually happens (novox/hq ADR 0041/0042):
|
|
// module.mongodb.database.provisioned — a consumer's database + owning user was created
|
|
// module.mongodb.database.deprovisioned — that database was removed
|
|
// Here in the runtime we react to them, keeping a lightweight audit trail of who was granted a
|
|
// database and who lost one — observability the provider itself is best placed to log.
|
|
|
|
import { on } from "@novox/mesh-sdk/events";
|
|
|
|
interface DatabaseEvent {
|
|
consumer: string;
|
|
database: string;
|
|
user?: string;
|
|
}
|
|
|
|
await on<DatabaseEvent>("database.provisioned", async (e) => {
|
|
console.log(`[mongodb] database provisioned for ${e.body.consumer} (db ${e.body.database})`);
|
|
});
|
|
|
|
await on<DatabaseEvent>("database.deprovisioned", async (e) => {
|
|
console.log(`[mongodb] database deprovisioned for ${e.body.consumer} (db ${e.body.database})`);
|
|
});
|
|
|
|
console.log("[mongodb] auditing database lifecycle events");
|