mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
feat(jenkins): admit Open WebUI as an MCP consumer
83c1c729de translated jenkins' hand-kept allowed_consumers verbatim, and
that list had never carried web-app-openwebui: git log -S over the role
finds no commit removing it. Its own message names that shape as the
problem — twenty lists of which fourteen were identical — and jenkins was
one of the six that diverged.
Nothing in the role justifies the divergence. Against gitlab, which admits
Open WebUI, jenkins matches on auth, transport, exposure, implementation,
read_only_default and mutating_tools_enabled, and bearer_token is in
BEARER_PRESENTABLE_AUTHS, so tool_server_connections registers it with a
credential it can present. The reason that carries wordpress's refusal,
basic_auth, does not exist here.
The entry takes the shape hermes and openclaw already have and the variants
mirror them, so the pairing is planned into the same round as the other two
clients rather than a new one.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>This commit is contained in:
kevinveenbirkenbachandClaude Opus 5 committed
1 parent
cf3406b1c4
commit
32dd66099a
5 files changed
+18
-8
No files matched your search
@@ -105,7 +105,7 @@ Every invokable role in the tested lifecycle envelope, with its upstream homepag
|
||||
| [Imprint](roles/web-svc-legal/) | beta | NGINX-served static page rendering a legal imprint (Impressum) from a Jinja2 template | [🛠️](roles/web-svc-legal/README.md#quick-setup) | [HTML Server](roles/web-svc-html/), [Prometheus](roles/web-app-prometheus/), [Tor Onion Service](roles/svc-net-tor/) |
|
||||
| [Intel Driver](roles/drv-intel/) | alpha | Intel VA-API media driver for hardware-accelerated video decode and encode across Linux distributions | [🌐](https://github.com/intel/media-driver) [🛠️](roles/drv-intel/README.md#quick-setup) | |
|
||||
| [Jellyfin](roles/web-app-jellyfin/) | beta | Self-hosted media server for streaming and organizing movies, TV, music, and photos, with OIDC and LDAP login | [🌐](https://jellyfin.org/) [🎬](https://www.youtube.com/watch?v=0t3lSJL3B_Q) [🛠️](roles/web-app-jellyfin/README.md#quick-setup) | [Backup Docker Volumes](roles/svc-bkp-volume-2-local/), [Corporate Design](roles/web-svc-css/), [Dashboard](roles/web-app-dashboard/), [Hermes Agent](roles/web-app-hermes/), [Keycloak](roles/web-app-keycloak/), [Matomo](roles/web-app-matomo/), [Open WebUI](roles/web-app-openwebui/), [OpenClaw](roles/web-app-openclaw/), [OpenLDAP](roles/svc-db-openldap/), [Prometheus](roles/web-app-prometheus/), [Tor Onion Service](roles/svc-net-tor/), [Universal Logout](roles/web-svc-logout/) |
|
||||
| [Jenkins](roles/web-app-jenkins/) | beta | Open-source automation server for CI/CD pipelines, builds, and plugin-driven deployment workflows | [🌐](https://www.jenkins.io/) [🎬](https://www.youtube.com/channel/UC5JBtmoz7ePk-33ZHimGiDQ) [🛠️](roles/web-app-jenkins/README.md#quick-setup) | [Backup Docker Volumes](roles/svc-bkp-volume-2-local/), [Corporate Design](roles/web-svc-css/), [Dashboard](roles/web-app-dashboard/), [Hermes Agent](roles/web-app-hermes/), [Keycloak](roles/web-app-keycloak/), [Matomo](roles/web-app-matomo/), [OpenClaw](roles/web-app-openclaw/), [OpenLDAP](roles/svc-db-openldap/), [Prometheus](roles/web-app-prometheus/), [Tor Onion Service](roles/svc-net-tor/), [Universal Logout](roles/web-svc-logout/) |
|
||||
| [Jenkins](roles/web-app-jenkins/) | beta | Open-source automation server for CI/CD pipelines, builds, and plugin-driven deployment workflows | [🌐](https://www.jenkins.io/) [🎬](https://www.youtube.com/channel/UC5JBtmoz7ePk-33ZHimGiDQ) [🛠️](roles/web-app-jenkins/README.md#quick-setup) | [Backup Docker Volumes](roles/svc-bkp-volume-2-local/), [Corporate Design](roles/web-svc-css/), [Dashboard](roles/web-app-dashboard/), [Hermes Agent](roles/web-app-hermes/), [Keycloak](roles/web-app-keycloak/), [Matomo](roles/web-app-matomo/), [Open WebUI](roles/web-app-openwebui/), [OpenClaw](roles/web-app-openclaw/), [OpenLDAP](roles/svc-db-openldap/), [Prometheus](roles/web-app-prometheus/), [Tor Onion Service](roles/svc-net-tor/), [Universal Logout](roles/web-svc-logout/) |
|
||||
| [Jitsi Meet](roles/web-app-jitsi/) | beta | Self-hosted WebRTC platform for end-to-end-encryptable video conferencing with federated authentication | [🌐](https://jitsi.org/) [🎬](https://www.youtube.com/channel/UCyXuxN-aNUpRv0juUXLyjbw) [🛠️](roles/web-app-jitsi/README.md#quick-setup) | [Corporate Design](roles/web-svc-css/), [Dashboard](roles/web-app-dashboard/), [Keycloak](roles/web-app-keycloak/), [Mailu](roles/web-app-mailu/), [Matomo](roles/web-app-matomo/), [OpenLDAP](roles/svc-db-openldap/), [Prometheus](roles/web-app-prometheus/), [Universal Logout](roles/web-svc-logout/) |
|
||||
| [Joomla](roles/web-app-joomla/) | beta | Open-source content management system for building websites, intranets, and online applications without writing code | [🌐](https://www.joomla.org/) [🎬](https://www.youtube.com/user/joomla) [🛠️](roles/web-app-joomla/README.md#quick-setup) | [Backup Docker Volumes](roles/svc-bkp-volume-2-local/), [Corporate Design](roles/web-svc-css/), [Dashboard](roles/web-app-dashboard/), [Keycloak](roles/web-app-keycloak/), [Mailu](roles/web-app-mailu/), [MariaDB](roles/svc-db-mariadb/), [Matomo](roles/web-app-matomo/), [Prometheus](roles/web-app-prometheus/), [Tor Onion Service](roles/svc-net-tor/), [Universal Logout](roles/web-svc-logout/) |
|
||||
| [Kata & gVisor](roles/svc-virt-kata/) | beta | Kernel-isolating container runtimes that sandbox untrusted workloads in a microVM or a userspace kernel | [🌐](https://katacontainers.io/) [🛠️](roles/svc-virt-kata/README.md#quick-setup) | |
|
||||
|
||||
@@ -23,6 +23,7 @@ flowchart LR
|
||||
dep_web_app_keycloak["web-app-keycloak 🐳🐝"]
|
||||
dep_web_app_matomo["web-app-matomo 🐳🐝"]
|
||||
dep_web_app_openclaw["web-app-openclaw 🐳🐝"]
|
||||
dep_web_app_openwebui["web-app-openwebui 🐳🐝"]
|
||||
dep_web_app_prometheus["web-app-prometheus 🐳🐝"]
|
||||
dep_web_svc_css["web-svc-css 💻"]
|
||||
dep_web_svc_logout["web-svc-logout 🐳🐝"]
|
||||
@@ -39,7 +40,7 @@ flowchart LR
|
||||
svc_jenkinsmcp["jenkinsmcp"]
|
||||
svc_css["css"]
|
||||
svc_container_backup["container_backup"]
|
||||
svc_openwebui["openwebui ❌"]
|
||||
svc_openwebui["openwebui"]
|
||||
svc_hermes["hermes"]
|
||||
svc_openclaw["openclaw"]
|
||||
svc_flowise["flowise ❌"]
|
||||
@@ -52,6 +53,7 @@ flowchart LR
|
||||
dep_web_app_keycloak -. "0..1" .-> svc_sso
|
||||
dep_web_app_matomo -. "0..1" .-> svc_matomo
|
||||
dep_web_app_openclaw -. "0..1" .-> svc_openclaw
|
||||
dep_web_app_openwebui -. "0..1" .-> svc_openwebui
|
||||
dep_web_app_prometheus -. "0..1" .-> svc_prometheus
|
||||
dep_web_svc_css -. "0..1" .-> svc_css
|
||||
dep_web_svc_logout -. "0..1" .-> svc_logout
|
||||
|
||||
@@ -97,11 +97,10 @@ container_backup: # nocheck: bond-baseline backup host joins outside the variant
|
||||
enabled: "{{ 'svc-bkp-volume-2-local' in group_names }}"
|
||||
shared: true
|
||||
# nocheck: playwright-service-flag MCP pairing is proven by the role's own MCP spec, not by a per-consumer gate
|
||||
# nocheck: dynamic-flag the entry refuses this client, so the link is off on every host and no group_names gate can decide it
|
||||
openwebui:
|
||||
enabled: false
|
||||
shared: false
|
||||
mcp_consumer: false
|
||||
bond: 0.5
|
||||
enabled: "{{ 'web-app-openwebui' in group_names }}"
|
||||
shared: "{{ 'web-app-openwebui' in group_names }}"
|
||||
# nocheck: playwright-service-flag MCP pairing is proven by the role's own MCP spec, not by a per-consumer gate
|
||||
hermes:
|
||||
bond: 0.5
|
||||
|
||||
@@ -32,6 +32,9 @@
|
||||
shared: true
|
||||
tor:
|
||||
enabled: true
|
||||
openwebui:
|
||||
enabled: false
|
||||
shared: false
|
||||
hermes:
|
||||
enabled: false
|
||||
shared: false
|
||||
@@ -65,6 +68,9 @@
|
||||
shared: false # nocheck: variants-static-override backup shared stays literally true
|
||||
tor:
|
||||
enabled: true
|
||||
openwebui:
|
||||
enabled: true
|
||||
shared: true
|
||||
hermes:
|
||||
enabled: true
|
||||
shared: true
|
||||
@@ -98,6 +104,9 @@
|
||||
shared: false # nocheck: variants-static-override backup shared stays literally true
|
||||
tor:
|
||||
enabled: true
|
||||
openwebui:
|
||||
enabled: false
|
||||
shared: false
|
||||
hermes:
|
||||
enabled: false
|
||||
shared: false
|
||||
|
||||
@@ -59,10 +59,10 @@ flowchart LR
|
||||
dpt_web_app_gitlab["web-app-gitlab 🐳🐝"]
|
||||
dpt_web_app_homeassistant["web-app-homeassistant 🐳🐝"]
|
||||
dpt_web_app_jellyfin["web-app-jellyfin 🐳🐝"]
|
||||
dpt_web_app_jenkins["web-app-jenkins 🐳🐝"]
|
||||
dpt_web_app_listmonk["web-app-listmonk 🐳🐝"]
|
||||
dpt_web_app_mattermost["web-app-mattermost 🐳🐝"]
|
||||
dpt_web_app_moodle["web-app-moodle 🐳🐝"]
|
||||
dpt_web_app_n8n["web-app-n8n 🐳🐝"]
|
||||
dpt_more["..."]
|
||||
end
|
||||
dep_svc_ai_litellm -. "0..1" .-> svc_litellm
|
||||
@@ -88,10 +88,10 @@ flowchart LR
|
||||
svc_sso -. "0..1" .-> dpt_web_app_gitlab
|
||||
svc_sso -. "0..1" .-> dpt_web_app_homeassistant
|
||||
svc_sso -. "0..1" .-> dpt_web_app_jellyfin
|
||||
svc_sso -. "0..1" .-> dpt_web_app_jenkins
|
||||
svc_sso -. "0..1" .-> dpt_web_app_listmonk
|
||||
svc_sso -. "0..1" .-> dpt_web_app_mattermost
|
||||
svc_sso -. "0..1" .-> dpt_web_app_moodle
|
||||
svc_sso -. "0..1" .-> dpt_web_app_n8n
|
||||
```
|
||||
|
||||
Solid `1:1` edges are fixed relationships; dashed `0..1` edges are conditional (enabled only in matching deployments); red `0..0` edges are turned off in this role. Node markers show the role's deploy modes (💻 host, 🐳 compose, 🐝 swarm); ❌ marks a service that is explicitly turned off, and ⚙️ an Ansible role dependency declared in `meta/main.yml`.
|
||||
|
||||
Reference in new issue
Block a user