read the cache facts on the hive and let hives read the closure bucket
hive-c0re reads its cache facts from the store every five minutes and writes /run/hyperhive/attic/{netrc,substituter,public-key}, each 0600. it accepts only an https url, so the pull token never travels in clear. hives get a read grant on the agent-closures bucket, and swarm-queue-client a reader for it. part 2 of 3: nothing uses the files or the reader until the probe lands.
This commit is contained in:
parent
1e5070796d
commit
a55d55e494
1 changed files with 425 additions and 3 deletions
|
|
@ -61,6 +61,7 @@ swarm-queue-client = { workspace = true, features = [
|
|||
"agent-limits",
|
||||
"agent-permissions",
|
||||
"agent-archetype",
|
||||
"agent-closures",
|
||||
] }
|
||||
swarm-matrix-client.workspace = true
|
||||
swarm-secret-client = { workspace = true, features = ["otel"] }
|
||||
|
|
|
|||
Loading…
Reference in a new issue