gongzhiyongandOmX
d9eb7dcd74
Manager needs a platform-owned secret handoff path so resource bindings can keep only vault references while OpenBao stores tenant-scoped credential payloads. Tested: go test ./controller ./model ./router && go vet ./controller ./model ./router Co-authored-by: OmX <omx@oh-my-codex.dev>
24 lines
854 B
YAML
24 lines
854 B
YAML
# Override file: build heicode from local source so the HeiCode OAuth bridge
|
|
# (controller/heicode_oauth.go + router/heicode-router.go) is included.
|
|
#
|
|
# Usage:
|
|
# docker compose up -d --build heicode
|
|
#
|
|
# Remove this file (or rename it) to fall back to the upstream
|
|
# calciumion/heicode:latest image declared in docker-compose.yml.
|
|
|
|
services:
|
|
heicode:
|
|
env_file:
|
|
- ${ENV_FILE:-.env}
|
|
environment:
|
|
OPENBAO_ADDR: ${OPENBAO_ADDR:-http://heicode-openbao:8200}
|
|
OPENBAO_KV_MOUNT: ${OPENBAO_KV_MOUNT:-secret}
|
|
OPENBAO_TOKEN_FILE: ${OPENBAO_TOKEN_FILE:-/run/secrets/openbao-manager-token}
|
|
volumes:
|
|
- ${OPENBAO_MANAGER_TOKEN_FILE:-/root/heicode-secrets/openbao-manager-token.txt}:/run/secrets/openbao-manager-token:ro
|
|
image: ${IMAGE_TAG:-heicode-manager:local}
|
|
build:
|
|
context: .
|
|
dockerfile: Dockerfile
|