fix(deploy): render maintenance smoke profile

This commit is contained in:
2026-08-18 07:24:18 +02:00
parent fe190e7046
commit 4d230b87af
+5 -2
View File
@@ -988,10 +988,10 @@ task13_core_id() {
task13_assert_maintenance_auth_isolation() {
local rendered
rendered="$TASK13_TMP/maintenance-auth-isolation.json"
if ! task13_compose config --format json >"$rendered" 2>>"$TASK13_LOG"; then
if ! task13_compose --profile workspace-maintenance config --format json >"$rendered" 2>>"$TASK13_LOG"; then
task13_log_failure "render workspace maintenance mount isolation"
fi
node - "$rendered" <<'NODE'
if ! node - "$rendered" <<'NODE'
const config = JSON.parse(require("node:fs").readFileSync(process.argv[2], "utf8"));
const maintenance = config.services?.["workspace-maintenance"];
if (!maintenance || !Array.isArray(maintenance.volumes)) process.exit(1);
@@ -999,6 +999,9 @@ if (maintenance.volumes.some((mount) => mount?.target === "/run/thothii-auth" ||
process.exit(1);
}
NODE
then
task13_log_failure "workspace maintenance authentication mount isolation"
fi
task13_compose_logged "seed core authentication isolation sentinel" exec -T core sh -ceu \
': > /data/auth/task13-maintenance-isolation-sentinel'
task13_compose_logged "workspace maintenance auth isolation" \