vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

docs(swarm): drop stale github-token exception in credentials.md

Browse source 
The sentence claiming a per-agent github token sits outside this page
and never passes through the store contradicted the
swarm/agents/<agent>/github-token row already in the table: the token
is minted by swarm-controller and read by hive-agent-github-token
through bao like every other row.

Refs #4347
This commit is contained in:
atlas 2026-10-02 17:56:06 +02:00
commit 7488c337cc
1 changed files with 0 additions and 4 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/swarm/credentials.md
View file

@ -42,10 +42,6 @@ to the store under its own name, pulling what it needs when it needs it. No
process reads a secret on another principal's behalf: the principal that process reads a secret on another principal's behalf: the principal that
needs a value is the principal that authenticates for it. needs a value is the principal that authenticates for it.
One per-agent credential file — the github token — sits outside this page:
it's operator-supplied and never passes through the store, so the table
below doesn't govern it.
**Per secret, the target specifies minter, reader, and renewal strategy.** **Per secret, the target specifies minter, reader, and renewal strategy.**
Those three are the contract, and the reader is a process pulling a store Those three are the contract, and the reader is a process pulling a store
path at runtime — not a path on disk, and not a unit whose job is to turn a path at runtime — not a path on disk, and not a unit whose job is to turn a