mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 02:54:26 +00:00
kevinveenbirkenbach
88be326eb5
The module was added while nothing selected it, so neither the Dockerfile COPY nor the build-context staging listed it and nothing noticed. The first provider to declare upstream_transport: sse would have crashed the sidecar at import instead of serving. Two places have to agree, because the context is assembled before it is built: instance.yml puts the file next to the Dockerfile, the COPY takes it into the image, and either one alone is inert. The lint parses server.py, resolves every import that names a sibling module, and requires each in both places, plus the reverse for a module nobody imports.
65 lines
2.9 KiB
YAML
65 lines
2.9 KiB
YAML
---
|
|
# Stage one adapter instance into a provider's own build context.
|
|
#
|
|
# An Ansible role cannot be instantiated twice with different variables, and a
|
|
# single shared adapter would end up holding every provider's credential.
|
|
# Providers therefore include this file and run the adapter as a sidecar inside
|
|
# their own stack, which also gives the network isolation for free: the
|
|
# instance joins only its provider's network.
|
|
#
|
|
# Staging deliberately notifies nothing, which takes an explicit empty list:
|
|
# render_replicated_templates falls back to ['compose up'] for any entry that
|
|
# names no handler. The front-proxy step inside
|
|
# sys-stk-full flushes handlers before the backend has rendered the
|
|
# provider's compose file, so a notification raised here fires a compose up
|
|
# against a project that has no compose.yml yet. rebuild.yml raises it once
|
|
# both the context and the compose file exist.
|
|
#
|
|
# Param: mcp_adapter_instance_dir build context to stage into.
|
|
# Param: mcp_adapter_upstream_key whether the sidecar reads a captured
|
|
# credential from an env file.
|
|
- name: "📁 Create the MCP build context of {{ application_id }}"
|
|
ansible.builtin.file:
|
|
path: "{{ mcp_adapter_instance_dir }}"
|
|
state: directory
|
|
mode: "0755"
|
|
delegate_to: "{{ STACK_HOST }}"
|
|
become: true
|
|
when: mcp_adapter_upstream_key | default(false) | bool
|
|
|
|
- name: "📄 Create the upstream credential file of {{ application_id }}"
|
|
ansible.builtin.copy:
|
|
content: ""
|
|
dest: "{{ [mcp_adapter_instance_dir, 'upstream.env'] | path_join }}"
|
|
mode: "0600"
|
|
force: false
|
|
delegate_to: "{{ STACK_HOST }}"
|
|
become: true
|
|
when: mcp_adapter_upstream_key | default(false) | bool
|
|
|
|
- name: "📦 Stage the MCP adapter build context for {{ application_id }}"
|
|
ansible.builtin.include_tasks:
|
|
file: "{{ lookup('path_absolute', 'roles/sys-svc-compose/tasks/utils/render_replicated_templates.yml') }}"
|
|
vars:
|
|
role_templates:
|
|
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/Dockerfile') }}"
|
|
dest: "{{ [mcp_adapter_instance_dir, 'Dockerfile'] | path_join }}"
|
|
mode: "0644"
|
|
notify: []
|
|
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/policy.py') }}"
|
|
dest: "{{ [mcp_adapter_instance_dir, 'policy.py'] | path_join }}"
|
|
mode: "0644"
|
|
notify: []
|
|
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/passthrough.py') }}"
|
|
dest: "{{ [mcp_adapter_instance_dir, 'passthrough.py'] | path_join }}"
|
|
mode: "0644"
|
|
notify: []
|
|
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/server.py') }}"
|
|
dest: "{{ [mcp_adapter_instance_dir, 'server.py'] | path_join }}"
|
|
mode: "0644"
|
|
notify: []
|
|
- src: "{{ lookup('path_absolute', 'roles/svc-ai-mcp-adapter/files/python/sse.py') }}"
|
|
dest: "{{ [mcp_adapter_instance_dir, 'sse.py'] | path_join }}"
|
|
mode: "0644"
|
|
notify: []
|