mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
30d8671c39
Thirteen of sixteen MCP sidecar entries carried no enabled at all, so
collect_role_resources fell back to _looks_like_container and billed every
one of them as running. Three roles already gated theirs on mcp.enabled;
the rest now do the same, gitea twice because it is the only role with a
vendor container behind the adapter.
The fifteen adapter roles then read services.<key>.enabled instead of
mcp.enabled, so the compose block and the task gates follow the services
entry rather than running beside it on a second path. The six plugin and
native roles keep reading the topic: they ship no sidecar entry to point at.
The three-level resolution is not new. KEYCLOAK_LOGOUT_PANEL_ENABLED has
the same shape and depth and gates a task the same way, and the same value
reaches JAVASCRIPT_SERVICE_ENABLED, where service-gating.js throws on
anything but "true" or "false" — an unresolved chain would have been
killing keycloak's Playwright run since 575a5a87ac.
This does not change what the resource model counts: _is_enabled reads the
unrendered Jinja and still treats it as on. What it buys is one switch
instead of two, and a declaration that matches it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
62 lines
3.9 KiB
YAML
62 lines
3.9 KiB
YAML
---
|
|
application_id: "web-app-baserow"
|
|
entity_name: "{{ application_id | get_entity_name }}"
|
|
database_password: "{{ lookup('config', application_id, 'secrets.credentials.database_password') }}" # nocheck: lookup-config-path
|
|
|
|
BASEROW_PUBLIC_URL: "{{ lookup('tls', application_id, 'url.base') }}"
|
|
BASEROW_VERSION: "{{ lookup('config', application_id, 'services.baserow.version') }}"
|
|
BASEROW_IMAGE: "{{ lookup('config', application_id, 'services.baserow.image') }}"
|
|
BASEROW_CONTAINER: "{{ lookup('config', application_id, 'services.baserow.name') }}"
|
|
|
|
BASEROW_SSO_PROXY_GATED: "{{ lookup('sso', application_id, 'is_proxy_gated') }}"
|
|
BASEROW_SSO_ADMIN_GROUP: "/{{ lookup('rbac_group_path', application_id=application_id, role='administrator') }}"
|
|
BASEROW_SSO_FALLBACK_EMAIL_DOMAIN: "{{ lookup('domain', application_id) }}"
|
|
|
|
BASEROW_SECRET_KEY: "{{ lookup('config', application_id, 'secrets.credentials.secret_key') }}"
|
|
|
|
BASEROW_DATABASE_USER: "{{ lookup('database', application_id, 'username') }}"
|
|
BASEROW_DATABASE_NAME: "{{ lookup('database', application_id, 'name') }}"
|
|
BASEROW_DATABASE_HOST: "{{ lookup('database', application_id, 'host') }}"
|
|
BASEROW_DATABASE_PORT: "{{ lookup('database', application_id, 'port') }}"
|
|
BASEROW_DATABASE_PASSWORD: "{{ lookup('database', application_id, 'password') }}"
|
|
BASEROW_DATABASE_URL: "postgresql://{{ BASEROW_DATABASE_USER }}:{{ BASEROW_DATABASE_PASSWORD }}@{{ BASEROW_DATABASE_HOST }}:{{ BASEROW_DATABASE_PORT }}/{{ BASEROW_DATABASE_NAME
|
|
}}"
|
|
|
|
BASEROW_REDIS_HOST: "{{ lookup('engine', 'redis', application_id, 'host') }}"
|
|
BASEROW_REDIS_PORT: "{{ lookup('engine', 'redis', application_id, 'port') }}"
|
|
BASEROW_REDIS_URL: "{{ lookup('engine', 'redis', application_id, 'url') }}"
|
|
|
|
BASEROW_DJANGO_SETTINGS_MODULE: "baserow.config.settings.base"
|
|
BASEROW_PYTHON: "/baserow/venv/bin/python"
|
|
BASEROW_MANAGE_PY: "/baserow/backend/src/baserow/manage.py"
|
|
|
|
BASEROW_SERVICE_NAME: "baserow"
|
|
BASEROW_INTERNAL_URL: "http://{{ BASEROW_CONTAINER }}:{{ lookup('config', application_id, 'services.baserow.ports.internal.http') }}"
|
|
|
|
BASEROW_MCP_ENABLED: "{{ lookup('config', application_id, 'services.baserowmcp.enabled') | bool }}"
|
|
BASEROW_MCP_ENDPOINT_KEY: "{{ lookup('config', application_id, 'secrets.credentials.mcp_endpoint_key') }}"
|
|
BASEROW_MCP_UPSTREAM_PATH: "{{ lookup('config', application_id, 'mcp.adapter.upstream_path') }}"
|
|
BASEROW_MCP_ENDPOINT_PATH: "{{ lookup('config', application_id, 'mcp.endpoint.path') }}"
|
|
BASEROW_MCP_ENDPOINT_NAME: "Infinito.Nexus"
|
|
BASEROW_MCP_WORKSPACE_NAME: "Infinito.Nexus MCP"
|
|
BASEROW_MCP_OWNER_EMAIL: "mcp@{{ lookup('domain', application_id) }}"
|
|
BASEROW_MCP_BEARER: "{{ lookup('config', application_id, 'secrets.credentials.mcp_bearer') }}"
|
|
BASEROW_MCP_CONTAINER: "{{ lookup('config', application_id, 'services.baserowmcp.name') }}"
|
|
BASEROW_MCP_PORT: "{{ lookup('config', application_id, 'services.baserowmcp.ports.internal.http') }}"
|
|
BASEROW_MCP_INSTANCE_DIR: "{{ [lookup('container', application_id, 'directories.instance'), 'mcp'] | path_join }}"
|
|
BASEROW_MCP_UPSTREAM_URL: "{{ BASEROW_INTERNAL_URL }}{{ BASEROW_MCP_UPSTREAM_PATH }}"
|
|
BASEROW_MCP_CONTRACT:
|
|
upstream_kind: mcp
|
|
upstream_transport: "{{ lookup('config', application_id, 'mcp.adapter.upstream_transport') }}"
|
|
provider: "{{ application_id }}"
|
|
upstream_url: "{{ BASEROW_MCP_UPSTREAM_URL }}"
|
|
auth_subject: "{{ lookup('config', application_id, 'mcp.auth_subject') }}"
|
|
mutating_tools_enabled: "{{ lookup('config', application_id, 'mcp.tools.mutating_tools_enabled') | bool }}"
|
|
tools: "{{ lookup('file', 'mcp/tools.json') | from_json }}"
|
|
limits: "{{ lookup('config', application_id, 'mcp.limits') }}"
|
|
schema_sha256: "{{ lookup('config', application_id, 'mcp.tools.schema_sha256') }}"
|
|
|
|
BASEROW_BOOTSTRAP_ADMIN_USERNAME: "{{ lookup('users', 'administrator').username }}"
|
|
BASEROW_BOOTSTRAP_ADMIN_EMAIL: "{{ lookup('users', 'administrator').email }}"
|
|
BASEROW_BOOTSTRAP_ADMIN_PASSWORD: "{{ lookup('users', 'administrator').password }}"
|