feat(auth): surface manifest has_auth/public_key and ensure shared auth running

Parse has_auth/public_key from the service manifest onto Container
(persisted to InstalledMetadata), fetch manifests for running non-db
containers during reconciliation, hide role=auth containers from the
grid, and ensure dcntrlized-auth starts with the shared database.
This commit is contained in:
2026-08-15 00:23:09 +01:00
parent a008245db9
commit d6482f5592
10 changed files with 190 additions and 23 deletions
+7 -4
View File
@@ -55,13 +55,16 @@ func main() {
if err := cache.LoadInstalledContainers(); err != nil {
log.Fatalf("Failed to load installed containers: %v", err)
}
// Ensure the shared database is running before reconciling, so its
// container is picked up by the reconciliation below. Failures to start
// the database are not fatal: Maestro keeps running and the UI surfaces
// the database status for manual action.
// Ensure the shared database and auth service are running before
// reconciling, so their containers are picked up by the reconciliation
// below. Failures are not fatal: Maestro keeps running and the UI
// surfaces infrastructure status for manual action.
if err := libcontainers.EnsureDatabaseRunning(ctx); err != nil {
log.Printf("Warning: failed to ensure shared database: %v", err)
}
if err := libcontainers.EnsureAuthRunning(ctx); err != nil {
log.Printf("Warning: failed to ensure shared auth service: %v", err)
}
cache.ReconcileContainers(ctx, dc)
go cache.WatchContainers(ctx, dc)
}