Files
computer-playbook/roles/web-svc-coturn/meta/variants.yml
kevinveenbirkenbachandClaude Opus 5.5 428b619ceb fix(tor): gate the consumer pins of seaweedfs and coturn in their variants
The tor gate that 312d09e290 put into the services.yml of web-app-seaweedfs
and web-svc-coturn never took effect on a deployed round. Both roles pin
the same flags to a literal true in variant 0, the round writes those pins
into the inventory, and an inventory value wins over the expression in
services.yml.

Measured on a compose round of web-app-matrix variant 0 with tor: the
inventory carried prometheus enabled true for both roles, so both stayed
in the Prometheus target list and the spec failed on the missing
web-app-seaweedfs label and probe.

Variant 0 now carries the gate itself for prometheus on both roles and
for logout and dashboard on seaweedfs, the three flags 312d09e290 names.
The bond-baseline and variants-coverage guards require a literal true in
variant 0 for these blocks, so they carry the same markers the frontend
block of seaweedfs already has, for the same reason.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
2026-10-08 08:57:13 +02:00

29 lines
985 B
YAML

---
# Matrix-deploy variant overrides for web-svc-coturn.
# See docs/contributing/artefact/files/role/variants.md for the file format.
# variant pinning every dynamic services.yml flag to true so the
# matrix exercises the in-group_names branch of web-svc-coturn.
- services:
container_backup:
enabled: true
prometheus:
enabled: "{{ 'svc-net-tor' not in group_names }}"
shared: "{{ 'svc-net-tor' not in group_names }}"
redis:
shared: true
tor:
enabled: false # nocheck: variants-static-override
- services:
container_backup:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
prometheus:
enabled: false
shared: false # nocheck: variants-static-override backup shared stays literally true
redis:
shared: false # nocheck: variants-static-override backup shared stays literally true
tor:
enabled: false # nocheck: variants-static-override