monky-deployd/packaging/systemd/monky-deployd-identity-acl.path at 037782e1ffbcb984003cfc1878808af3a4e8767b - monky-deployd - Gitea — vpc-29283b8d

mdella/monky-deployd

mirror of https://scm.tikali.ai/tikali/applications/monky/monky-deployd.git synced 2026-09-18 03:36:16 +00:00

Files

T

mdella 037782e1ff fix: accept sites fmt|cbs|pdx|roam (tenancy 0.7.x) and keep the identity read grant alive across tunneller rewrites — 0.1.10

deployd#3 (DD-0620): every kit for a backend registered since 2026-09-08 died at `--site`.
env-dev-08 (2026-09-11..13): two days of "identity is not readable" ticks — ziti-edge-tunnel
re-creates the file with mode 0600, the ACL mask goes to ---, group membership stops helping.
identity-acl.sh + monky-deployd-identity-acl.path re-apply the grant on every directory change.

Doc-Drift: DD-0620 fixed
Closes #3

Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01ASnneBmT7rfaJLE8NGNw7S

2026-09-13 00:17:35 +00:00

12 lines

326 B

SYSTEMD

Raw Blame History

 [Unit]
 Description=Re-grant monky-deployd read access when the ziti identity directory changes
 Documentation=file:/usr/share/doc/monky-deployd/OPERATIONS.md
 [Path]
 PathChanged=/opt/openziti/etc/identities
 PathModified=/opt/openziti/etc/identities
 Unit=monky-deployd-identity-acl.service
 [Install]
 WantedBy=multi-user.target