mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2026-11-06 10:59:59 +00:00
kevinveenbirkenbachandClaude Opus 5
30d8671c39
Thirteen of sixteen MCP sidecar entries carried no enabled at all, so
collect_role_resources fell back to _looks_like_container and billed every
one of them as running. Three roles already gated theirs on mcp.enabled;
the rest now do the same, gitea twice because it is the only role with a
vendor container behind the adapter.
The fifteen adapter roles then read services.<key>.enabled instead of
mcp.enabled, so the compose block and the task gates follow the services
entry rather than running beside it on a second path. The six plugin and
native roles keep reading the topic: they ship no sidecar entry to point at.
The three-level resolution is not new. KEYCLOAK_LOGOUT_PANEL_ENABLED has
the same shape and depth and gates a task the same way, and the same value
reaches JAVASCRIPT_SERVICE_ENABLED, where service-gating.js throws on
anything but "true" or "false" — an unresolved chain would have been
killing keycloak's Playwright run since 575a5a87ac.
This does not change what the resource model counts: _is_enabled reads the
unrendered Jinja and still treats it as on. What it buys is one switch
instead of two, and a declaration that matches it.
Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
41 lines
2.5 KiB
YAML
41 lines
2.5 KiB
YAML
---
|
|
application_id: "web-app-checkmk"
|
|
container_port: "{{ lookup('config', application_id, 'services.checkmk.ports.internal.http') }}"
|
|
|
|
CHECKMK_NAME: "{{ lookup('config', application_id, 'services.checkmk.name') }}"
|
|
CHECKMK_SITE: "{{ lookup('config', application_id, 'services.checkmk.site') }}"
|
|
|
|
CHECKMK_ADMIN_PASSWORD: "{{ lookup('config', application_id, 'secrets.credentials.cmk_password') }}"
|
|
|
|
CHECKMK_SSO_ENABLED: "{{ lookup('config', application_id, 'services.sso.enabled') }}"
|
|
CHECKMK_LDAP_ENABLED: "{{ lookup('config', application_id, 'services.ldap.enabled') }}"
|
|
|
|
CHECKMK_LDAP_SERVER: "{{ LDAP.SERVER.DOMAIN }}"
|
|
CHECKMK_LDAP_PORT: "{{ LDAP.SERVER.PORT }}"
|
|
CHECKMK_LDAP_BIND_DN: "{{ LDAP.DN.ADMINISTRATOR.DATA }}"
|
|
CHECKMK_LDAP_BIND_PASSWORD: "{{ LDAP.BIND_CREDENTIAL }}"
|
|
CHECKMK_LDAP_USER_DN: "{{ LDAP.DN.OU.USERS }}"
|
|
CHECKMK_LDAP_GROUP_DN: "{{ LDAP.DN.OU.GROUPS }}"
|
|
CHECKMK_LDAP_USER_ID_ATTR: "{{ LDAP.USER.ATTRIBUTES.ID }}"
|
|
CHECKMK_MCP_ENABLED: "{{ lookup('config', application_id, 'services.checkmkmcp.enabled') | bool }}"
|
|
CHECKMK_MCP_SERVICE_KEY: "checkmkmcp"
|
|
CHECKMK_MCP_CONTAINER: "{{ lookup('config', application_id, 'services.checkmkmcp.name') }}"
|
|
CHECKMK_MCP_PORT: "{{ lookup('config', application_id, 'services.checkmkmcp.ports.internal.http') }}"
|
|
CHECKMK_MCP_BEARER: "{{ lookup('config', application_id, 'secrets.credentials.mcp_bearer') }}"
|
|
CHECKMK_MCP_INSTANCE_DIR: "{{ [lookup('container', application_id, 'directories.instance'), 'mcp'] | path_join }}"
|
|
CHECKMK_MCP_UPSTREAM_HOST: "{{ lookup('config', application_id, 'services.checkmk.name') }}"
|
|
CHECKMK_MCP_UPSTREAM_PORT: "{{ lookup('config', application_id, 'services.checkmk.ports.internal.http') }}"
|
|
CHECKMK_MCP_UPSTREAM_URL: "http://{{ CHECKMK_MCP_UPSTREAM_HOST }}:{{ CHECKMK_MCP_UPSTREAM_PORT }}/{{ CHECKMK_SITE }}/check_mk/api/1.0"
|
|
CHECKMK_MCP_CONTRACT:
|
|
provider: "{{ application_id }}"
|
|
upstream_url: "{{ CHECKMK_MCP_UPSTREAM_URL }}"
|
|
auth_subject: "{{ lookup('config', application_id, 'mcp.auth_subject') }}"
|
|
mutating_tools_enabled: "{{ lookup('config', application_id, 'mcp.tools.mutating_tools_enabled') | bool }}"
|
|
tools: "{{ lookup('file', 'mcp/tools.json') | from_json }}"
|
|
limits: "{{ lookup('config', application_id, 'mcp.limits') }}"
|
|
schema_sha256: "{{ lookup('config', application_id, 'mcp.tools.schema_sha256') }}"
|
|
CHECKMK_MCP_UPSTREAM_KEY: "{{ lookup('config', application_id, 'secrets.credentials.mcp_upstream_token') }}"
|
|
CHECKMK_MCP_UPSTREAM_USER: "mcpreader"
|
|
CHECKMK_MCP_UPSTREAM_AUTH_HEADER: "Authorization"
|
|
CHECKMK_MCP_UPSTREAM_AUTH_FORMAT: "Bearer {{ CHECKMK_MCP_UPSTREAM_USER }} {key}"
|