mirror of
https://scm.tikali.ai/tikali/applications/monky/monky-deployd.git
synced 2026-09-18 03:36:16 +00:00
mdella
6336012b74
The GitLab project is private (its parent groups are private, so it cannot be made public): the v0.1.1 one-liner answered 401 anonymously. install.sh gains --token / MONKY_DEPLOYD_TOKEN and sends `DEPLOY-TOKEN: <token>` (a GitLab deploy token, scope read_package_registry only, revocable) on every registry download, the script itself included; the token goes through a 0600 curl -K file (never the command line, the log or an xtrace). The grant is taken via --bootstrap-file when the script is piped (stdin IS the script). Ansible: monky_deployd_download_token (vaulted) -> DEPLOY-TOKEN header, no_log. Docs explain why, the token's scope and the --source gitea alternative (split-horizon Gitea, cbs/iac#102). Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KLB7jieMNRkTsJ2epr4Ds1
8 lines
363 B
Python
8 lines
363 B
Python
"""monky-deployd — the on-box pull agent for Monky backends (MONKY-ADR-0028).
|
|
|
|
Dials monky-tenancy over the mesh with the box's host identity, fetches the rendered bundle,
|
|
leases a deploy grant, logs in to OpenBao, reads its own secrets, runs `docker compose`,
|
|
reports. Stdlib only; the optional `openziti` SDK is the `sdk` transport."""
|
|
|
|
__version__ = "0.1.2"
|