fix(deploy): render maintenance smoke profile
This commit is contained in:
@@ -988,10 +988,10 @@ task13_core_id() {
|
|||||||
task13_assert_maintenance_auth_isolation() {
|
task13_assert_maintenance_auth_isolation() {
|
||||||
local rendered
|
local rendered
|
||||||
rendered="$TASK13_TMP/maintenance-auth-isolation.json"
|
rendered="$TASK13_TMP/maintenance-auth-isolation.json"
|
||||||
if ! task13_compose config --format json >"$rendered" 2>>"$TASK13_LOG"; then
|
if ! task13_compose --profile workspace-maintenance config --format json >"$rendered" 2>>"$TASK13_LOG"; then
|
||||||
task13_log_failure "render workspace maintenance mount isolation"
|
task13_log_failure "render workspace maintenance mount isolation"
|
||||||
fi
|
fi
|
||||||
node - "$rendered" <<'NODE'
|
if ! node - "$rendered" <<'NODE'
|
||||||
const config = JSON.parse(require("node:fs").readFileSync(process.argv[2], "utf8"));
|
const config = JSON.parse(require("node:fs").readFileSync(process.argv[2], "utf8"));
|
||||||
const maintenance = config.services?.["workspace-maintenance"];
|
const maintenance = config.services?.["workspace-maintenance"];
|
||||||
if (!maintenance || !Array.isArray(maintenance.volumes)) process.exit(1);
|
if (!maintenance || !Array.isArray(maintenance.volumes)) process.exit(1);
|
||||||
@@ -999,6 +999,9 @@ if (maintenance.volumes.some((mount) => mount?.target === "/run/thothii-auth" ||
|
|||||||
process.exit(1);
|
process.exit(1);
|
||||||
}
|
}
|
||||||
NODE
|
NODE
|
||||||
|
then
|
||||||
|
task13_log_failure "workspace maintenance authentication mount isolation"
|
||||||
|
fi
|
||||||
task13_compose_logged "seed core authentication isolation sentinel" exec -T core sh -ceu \
|
task13_compose_logged "seed core authentication isolation sentinel" exec -T core sh -ceu \
|
||||||
': > /data/auth/task13-maintenance-isolation-sentinel'
|
': > /data/auth/task13-maintenance-isolation-sentinel'
|
||||||
task13_compose_logged "workspace maintenance auth isolation" \
|
task13_compose_logged "workspace maintenance auth isolation" \
|
||||||
|
|||||||
Reference in New Issue
Block a user