mirror of
https://scm.tikali.ai/tikali/applications/monky/monky-deployd.git
synced 2026-09-18 05:36:15 +00:00
mdella
c966450d8e
Inside the estate gitea.cbs.tikali.net resolves to jump1's RED EIP (10.10.0.175), which has no HTTP ingress, so backend boxes could not download the install artefacts from the Gitea mirror (cbs/iac#102). scm.tikali.ai is reachable from those boxes and the project is now public, so the GitLab generic package registry becomes the PRIMARY source: - packaging/install.sh: default source = scm.tikali.ai generic package registry (projects/69/packages/generic/monky-deployd/<ver>/...); `--source gitea` / MONKY_DEPLOYD_SOURCE=gitea keeps the Gitea release as the off-estate alternative; --base-url / MONKY_DEPLOYD_BASE_URL still override the base. - ansible role defaults: monky_deployd_base_url/_deb_url point at the registry, Gitea layout kept as a commented alternative. - README / docs/OPERATIONS.md / CLAUDE.md / CI comments + release description: both locations keep being published (release + release:gitea). - Version 0.1.1 (the tag gate refuses v* tags whose version != __version__); tests compare against __version__ instead of a literal. No agent change. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01KLB7jieMNRkTsJ2epr4Ds1
41 lines
2.2 KiB
YAML
41 lines
2.2 KiB
YAML
---
|
|
# monky_deployd — install and configure the Monky backend pull agent (MONKY-ADR-0028 §D).
|
|
# Copy this role into osg1-07 (roles/monky_deployd) and roll to env-dev-06..09 after the pilot.
|
|
monky_deployd_version: "0.1.1"
|
|
monky_deployd_deb: "monky-deployd_{{ monky_deployd_version }}_amd64.deb"
|
|
# PRIMARY download = the public GitLab project's generic package registry on scm.tikali.ai. Inside the
|
|
# estate gitea.cbs.tikali.net is split-horizon to jump1's RED EIP (10.10.0.175, no HTTP ingress), so
|
|
# backend boxes cannot fetch from the Gitea mirror (cbs/iac#102). Off-estate alternative (Gitea release):
|
|
# monky_deployd_base_url: "https://gitea.cbs.tikali.net/mdella/monky-deployd"
|
|
# monky_deployd_deb_url: "{{ monky_deployd_base_url }}/releases/download/v{{ monky_deployd_version }}/{{ monky_deployd_deb }}"
|
|
monky_deployd_base_url: "https://scm.tikali.ai/api/v4/projects/69/packages/generic/monky-deployd"
|
|
monky_deployd_deb_url: "{{ monky_deployd_base_url }}/{{ monky_deployd_version }}/{{ monky_deployd_deb }}"
|
|
monky_deployd_deb_sha256_url: "{{ monky_deployd_deb_url }}.sha256"
|
|
|
|
# per host (inventory / host_vars)
|
|
monky_deployd_env_id: "{{ inventory_hostname }}" # env-dev-06 ...
|
|
monky_deployd_site: cbs
|
|
monky_deployd_transport: sdk # sdk | proxy | system
|
|
monky_deployd_identity: "/opt/openziti/etc/identities/monky-host.{{ monky_deployd_env_id }}.json"
|
|
monky_deployd_laptop_mode: false
|
|
monky_deployd_volumes_on_absent: keep
|
|
monky_deployd_interval_s: 60
|
|
monky_deployd_healthy_timeout_s: 300
|
|
monky_deployd_disk_factor: 1.5
|
|
monky_deployd_disk_headroom_bytes: 2147483648
|
|
|
|
monky_deployd_tenancy_service: monky.tenancy.deploy
|
|
monky_deployd_tenancy_port: 8081
|
|
monky_deployd_bao_addr: "https://bao.cbs.tikali.net:8200"
|
|
monky_deployd_bao_auth_mount: jwt-tenancy
|
|
monky_deployd_bao_role: see-env
|
|
monky_deployd_bao_kv_mount: monky
|
|
# the openbao-ca certificate (PEM text) — from the vault (ansible-vault / OpenBao lookup)
|
|
monky_deployd_bao_ca_pem: ""
|
|
|
|
# ONE-TIME bootstrap deploy grant, minted by tenancy at playbook time (1 h): the role stages it
|
|
# and runs the first tick inside the hour. Leave empty to keep an existing bao.token.
|
|
monky_deployd_bootstrap_grant: ""
|
|
monky_deployd_run_first_tick: true
|
|
monky_deployd_timer_enabled: true
|