novox/mesh-lab
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Three beds deliver the secrets they copy from the catalogue as files (issue 073)

Browse Source
This commit is contained in:
jschoubben
2026-09-21 12:32:00 +02:00
parent 599d41eb42
commit 97d71503ee
3 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/integration/assigned-catalogue-small.test.ts
+4 -2
View File
@@ -229,14 +229,16 @@ test("the mesh assigns postgres, redis, minio and plex to one node in one push,
{ id: "mesh-state", type: "directory", path: "/var/lib/mesh/minio", mode: "0700" },
{ id: "state", type: "directory", path: "/var/lib/minio", mode: "0700" },
{ id: "grants", type: "directory", path: "/var/lib/minio/grants", mode: "0700" },
{ id: "root-env", type: "file", path: "/var/lib/minio/root.env", mode: "0600", content: "MINIO_ROOT_USER=meshroot\nMINIO_ROOT_PASSWORD=${secret:root}\n" },
// The root password reaches minio as a file (novox/hq ADR 0086), the shape the catalogue's manifest has.
{ id: "root-env", type: "file", path: "/var/lib/minio/root.env", mode: "0600", content: "MINIO_ROOT_USER=meshroot\n" },
{ id: "data", type: "directory", path: "/services/minio/data/data1-1", mode: "0700" },
{ id: "net", type: "network", name: "minio" },
{
id: "server", type: "container", name: "minio", image: pinned("minio/minio"), network: "minio",
args: ["server", "/data", "--console-address", ":9001"],
"env-file": ["/var/lib/minio/root.env"],
volumes: ["/services/minio/data/data1-1:/data"],
env: { MINIO_ROOT_PASSWORD_FILE: "/run/secrets/root" },
volumes: ["/services/minio/data/data1-1:/data", "/var/lib/minio/root.secret:/run/secrets/root:ro"],
},
{
id: "runtime", type: "container", name: "mesh-minio", image: pinned("mesh-runtime-minio"),