vinzenz/hyperhive
vinzenz/hyperhive
Watch
0
0
Fork
You've already forked hyperhive
 0
Code Activity

bring existing agent cert roles to the 1h token ttl on controller start

Browse source
This commit is contained in:
atlas 2026-10-29 13:47:32 +01:00 • committed by mara
commit 76de27fc97
1 changed files with 513 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

4
swarm-controller/src/main.rs
View file

@ -31,6 +31,7 @@ mod agent_limits;
mod agent_login;
mod agent_permissions;
mod agent_renewal;
mod agent_role_ttl;
mod agent_state_stream;
mod agent_status;
mod agents_md;
@ -224,7 +225,8 @@ async fn main() -> Result<()> {
let hive_names: Vec<String> = hives.iter().map(|h| h.name.clone()).collect();
read_policy::ensure_hive_access(hive_names).await;
// The one policy every agent's role attaches, and the entity each agent's
// login is read under, are checked here at every start.
// login is read under, are checked here at every start, and so is the
// token lifetime of the roles that exist.
read_policy::ensure_agent_policies().await;
let state = AppState {