vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

feat(#1930): forward otel headers credential into agent containers via nspawn --load-credential

Browse source
This commit is contained in:
damocles 2026-06-23 21:12:39 +02:00 • committed by mara
commit 21ec7dc23d
6 changed files with 140 additions and 20 deletions
Download patch file Download diff file Expand all files Collapse all files

8
nix/templates/harness-base.nix
View file

@ -1786,7 +1786,13 @@ in
Group = userName;
}
// lib.optionalAttrs (otel.enable && otel.headersCredential != null) {
LoadCredential = [ "otel-headers:${otel.headersCredential}" ];
# Inherit form (no `:path`): hive-c0re forwards the host file at
# `headersCredential` into this container's credential store via
# nspawn `--load-credential=otel-headers:<host path>` (see
# lifecycle.rs::hive_load_credentials). The path isn't reachable
# from inside the container, so we inherit the already-loaded
# credential by name rather than re-reading the host path here.
LoadCredential = [ "otel-headers" ];
};
};