jochen
eb42806379
mesh/merge-gate head eb4280637906 merged into trunk 53e51864969f — pass: builds baserow, gitea, grafana, home-assistant, icecast, influxdb, letta, mailu, n…
mesh/repo-check head eb4280637906 merged into trunk 53e51864969f — pass: THE CHANGE ALTERS ITS OWN CHECK (merge-check.sh): main's version judged it; the ch…
mesh/delivery delivered
mesh/delivery-group group fix/342-a-secret-is-never-a-setting delivered: every member is delivered
grafana's client logged in with a token setting ahead of the vault's admin password, and its runtime config let a layer set token. The token setting is now ignored and said, token is protected, and the vault's password comes first. checks/secrets/known could gain a line hiding a newly unprotected key. merge-check.sh now judges it against the trunk's copy at the merge base, and refuses an added line.
5 lines
360 B
Plaintext
5 lines
360 B
Plaintext
# Secrets nested below a key a mergeable file takes for its other values, which the controller cannot
|
|
# protect alone yet (it protects top-level keys): "<module> <resource> <dotted key>". This list only shrinks:
|
|
# a line that no longer names a finding is refused, and so is one the trunk's copy does not hold (hq issue 342).
|
|
searxng settings server.secret_key
|