feat(auth): surface manifest has_auth/public_key and ensure shared auth running
Parse has_auth/public_key from the service manifest onto Container (persisted to InstalledMetadata), fetch manifests for running non-db containers during reconciliation, hide role=auth containers from the grid, and ensure dcntrlized-auth starts with the shared database.
This commit is contained in:
+7
-4
@@ -55,13 +55,16 @@ func main() {
|
||||
if err := cache.LoadInstalledContainers(); err != nil {
|
||||
log.Fatalf("Failed to load installed containers: %v", err)
|
||||
}
|
||||
// Ensure the shared database is running before reconciling, so its
|
||||
// container is picked up by the reconciliation below. Failures to start
|
||||
// the database are not fatal: Maestro keeps running and the UI surfaces
|
||||
// the database status for manual action.
|
||||
// Ensure the shared database and auth service are running before
|
||||
// reconciling, so their containers are picked up by the reconciliation
|
||||
// below. Failures are not fatal: Maestro keeps running and the UI
|
||||
// surfaces infrastructure status for manual action.
|
||||
if err := libcontainers.EnsureDatabaseRunning(ctx); err != nil {
|
||||
log.Printf("Warning: failed to ensure shared database: %v", err)
|
||||
}
|
||||
if err := libcontainers.EnsureAuthRunning(ctx); err != nil {
|
||||
log.Printf("Warning: failed to ensure shared auth service: %v", err)
|
||||
}
|
||||
cache.ReconcileContainers(ctx, dc)
|
||||
go cache.WatchContainers(ctx, dc)
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user