9
2
Fork
You've already forked platform
2

Locksmith polishing: Procfile validation #298

Manually merged
anton merged 3 commits from vkobel/caution-platform:feat/locksmith-polishing into main 2026年06月25日 18:56:39 +02:00
  • (削除) Auto-inject .caution/ bundle + secrets into /etc/caution/ for locksmith: true apps; error early if the bundle is missing instead of panicking at boot. (削除ここまで) removed for now/needs more discussion
  • Reject binary: + locksmith: together (binary: strips /etc/caution/).
  • Reject http_port not listed in ports:.
  • secret new: report which cert lacks which subkey, with a fix, instead of an opaque error.
  • Add unit tests for all of the above.
- ~Auto-inject `.caution/` bundle + secrets into `/etc/caution/` for `locksmith: true` apps; error early if the bundle is missing instead of panicking at boot.~ removed for now/needs more discussion - Reject `binary:` + `locksmith:` together (`binary:` strips `/etc/caution/`). - Reject `http_port` not listed in `ports:`. - `secret new`: report which cert lacks which subkey, with a fix, instead of an opaque error. - Add unit tests for all of the above.
- Reject `binary:`+`locksmith:` and enforce `http_port` ∈ `ports:` at build/create (A2/A5).
- Per-cert subkey diagnostics in `secret new` instead of opaque "no eligible certs" (A3).
- Auto-inject `.caution/` bundle+secrets into `/etc/caution/` for locksmith apps,
 with an up-front bundle guard; falls back to the app image when absent (A1).
- Unit tests for all of the above.
vkobel force-pushed feat/locksmith-polishing from e9a284f9ff to c4cf730f65 2026年06月22日 11:16:13 +02:00 Compare
Author
Owner
Copy link

I dropped auto-injecting .caution/ bundle + secrets into /etc/caution/ for locksmith so we can discuss the best course of action

Rebased and fixed some unit tests

I dropped auto-injecting .caution/ bundle + secrets into /etc/caution/ for locksmith so we can discuss the best course of action Rebased and fixed some unit tests
vkobel changed title from (削除) Locksmith polishing: Procfile validation + bundle auto-injection (削除ここまで) to Locksmith polishing: Procfile validation 2026年06月25日 16:19:54 +02:00
vkobel force-pushed feat/locksmith-polishing from c4cf730f65 to a8c987a1df 2026年06月25日 16:34:32 +02:00 Compare
anton manually merged commit 4f58b97b2d into main 2026年06月25日 18:56:39 +02:00
Sign in to join this conversation.
No reviewers
Labels
Clear labels
Compat/Breaking
Breaking change that won't be backward compatible
Component/Enclave-Builder
This issue affects Enclave Builder (git-push and CLI)
Component/Infrastructure
This issue affects generic Caution hosted infra components
Deploy/BYOC
Relates to Caution Bring-your-own-compute
Deploy/Full-managed
Relates to Caution fully managed cloud
Deploy/Self-hosted
Relates to Caution deployed on self-hosted infra
Interface/API
This issue affects the API
Interface/CLI
This issue affects the command line interface
Interface/Git
This issue affects the Git `push` interface
Interface/Web
This issue affects the web dashboard
Kind/Bug
Something is not working
Kind/Documentation
Documentation changes
Kind/Enhancement
Improve existing functionality
Kind/Feature
New functionality
Kind/Security
This is security issue
Kind/Testing
Issue or pull request related to testing
Priority
Critical
 The priority is critical
Priority
High
 The priority is high
Priority
Low
 The priority is low
Priority
Medium
 The priority is medium
Reviewed
Confirmed
 Issue has been confirmed
Reviewed
Duplicate
 This issue or pull request already exists
Reviewed
Invalid
 Invalid issue
Reviewed
Won't Fix
 This issue won't be fixed
Status
Abandoned
 Somebody has started to work on this but abandoned work
Status
Blocked
 Something is blocking this issue or pull request
Status
Need More Info
 Feedback is required to reproduce issue or to continue work
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
caution/platform!298
Reference in a new issue
caution/platform
No description provided.
Delete branch "vkobel/caution-platform:feat/locksmith-polishing"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?