vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

module-eval: the always-on hive collector put a scrape target and an identity demand on hives that assumed none

Browse source
This commit is contained in:
atlas 2026-10-18 23:44:32 +02:00 • committed by mara
commit 249aab6642
2 changed files with 15 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nix/module-eval/nats-tls.nix
View file

@ -67,7 +67,12 @@ let
deploy.swarm-controller.baoClientKeyFile = "/var/lib/swarm-controller/bao-client-key.pem";
};
remote = hiveWithController (
lib.recursiveUpdate remoteSecrets { deploy.swarm-controller.enable = true; }
lib.recursiveUpdate remoteSecrets {
deploy.swarm-controller.enable = true;
# The hive collector every hive runs demands an identity to present to
# the swarm; a hive with no store leaf names the secret file by hand.
otel.clientSecretFile = "/var/lib/hive-otel-oidc/client.secret";
}
);
# The same hive given its own store leaf by hand, which is what turns