bsodfather/crank
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: switch openbao loading to approle
CI / Rust Checks (push) Has been cancelled
Details
CI / UI Checks (push) Has been cancelled
Details
CI / Frontend E2E (push) Has been cancelled
Details
CI / Deployment Manifests (push) Has been cancelled
Details
Deploy / build-images (apps/admin-api/Dockerfile, git.itexp.me/bsodfather/crank-community-admin-api, admin-api) (push) Has been cancelled
Details
Deploy / build-images (apps/mcp-server/Dockerfile, git.itexp.me/bsodfather/crank-community-mcp-server, mcp-server) (push) Has been cancelled
Details
Deploy / build-images (apps/ui/Dockerfile, git.itexp.me/bsodfather/crank-community-ui, ui) (push) Has been cancelled
Details
Deploy / deploy (push) Has been cancelled
Details

Browse Source
This commit is contained in:
github-ops
2026-06-16 17:50:18 +00:00
parent 1b528106b7
commit 7ab04aab2d
7 changed files with 108 additions and 43 deletions
Download Patch File Download Diff File Expand all files Collapse all files
docs/runtime-config.md
+3 -3
View File
@@ -235,9 +235,9 @@ Demo/deployment:
В deployment workflow больше не используется монолитный `DEPLOY_ENV_FILE`.
`.env` на сервере собирается из OpenBao. В Gitea Actions хранятся только bootstrap credentials
`BAO_ADDR`, `BAO_TOKEN` и `BAO_SECRET_PATH`, а внутри OpenBao ключи совпадают с именами
runtime env-переменных. Это значит, что:
`.env` на сервере собирается из OpenBao. В Gitea Actions хранятся только AppRole credentials
`BAO_ADDR`, `BAO_ROLE_ID` и `BAO_SECRET_ID`, а внутри OpenBao ключи проекта
`projects/crank/runtime` совпадают с именами runtime env-переменных. Это значит, что:
- `CRANK_MASTER_KEY` хранится в OpenBao как ключ `CRANK_MASTER_KEY`;
- `CRANK_DEMO_SEED` хранится в OpenBao как ключ `CRANK_DEMO_SEED`;