novox/mesh-lab
3
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Three beds deliver the secrets they copy from the catalogue as files (issue 073)

Browse Source
This commit is contained in:
jschoubben
2026-09-21 12:32:00 +02:00
parent 599d41eb42
commit 97d71503ee
3 changed files with 13 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
test/integration/assigned-model-usage.test.ts
+6 -4
View File
@@ -249,10 +249,12 @@ test("usage events are upserted into model-usage's store — latest-per-key, bot
resources: [
{ id: "mesh-state", type: "directory", path: "/var/lib/mesh/model-usage", mode: "0700" },
{ id: "state", type: "directory", path: "/var/lib/model-usage", mode: "0700" },
// The connection string carries the password, so it reaches the runtime as a file the mesh
// templates (novox/hq ADR 0086), the shape the catalogue's manifest has.
{
id: "db-env", type: "file", path: "/var/lib/model-usage/db.env", mode: "0600",
id: "database-url", type: "file", path: "/var/lib/model-usage/database.url", mode: "0600",
content:
"DATABASE_URL=postgresql://${bound:postgres-database:as}:${secret:postgres-database}@" +
"postgresql://${bound:postgres-database:as}:${secret:postgres-database}@" +
"${bound:postgres-database:at}:${bound:postgres-database:port}/${bound:postgres-database:as}\n",
},
{
@@ -261,9 +263,9 @@ test("usage events are upserted into model-usage's store — latest-per-key, bot
volumes: [
"/var/lib/mesh/model-usage/broker:/run/secrets/broker:ro",
"/var/lib/model-usage:/run/state",
"/var/lib/model-usage/database.url:/run/secrets/database-url:ro",
],
env: { MESH_BROKER_FILE: "/run/secrets/broker" },
"env-file": ["/var/lib/model-usage/db.env"],
env: { MESH_BROKER_FILE: "/run/secrets/broker", DATABASE_URL_FILE: "/run/secrets/database-url" },
},
],
});