kevinveenbirkenbachandClaude Opus 5 a650801b35 fix(lookups): name file-backed extra secrets by content and hand plain types to PyYAML ...

compose_volumes copied extra_configs and extra_secrets through verbatim.
A file-backed extra without a name therefore reached swarm under a fixed
name, and swarm secrets are immutable: a new content under the same name
is rejected on the next stack deploy. Such extras now get the same
{role}_{key}_{sha8(content)} name that _config_secret_name already gives
meta-declared entries. An explicit name is kept.

container_volumes appended extras as handed over. Ansible passes one
lookup's result to another as proxy containers, and a TaggedInt mode
inside a proxy mapping made PyYAML raise "cannot represent an object".
The private _to_plain of compose_volumes moves to utils/templating as
to_plain, now coercing bool, int and float to the exact builtin types
(bool before int, since bool subclasses int), and container_volumes runs
its extras through it.

Only web-app-matrix passes extra secrets or configs today; the
extra_volumes path that web-app-nextcloud uses is unchanged.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

2026-09-11 11:20:26 +02:00

..

cli

fix(ci): answer a role-only selection by existence, not by variant None

2026-09-10 01:44:59 +02:00

group_vars

fix(litellm): gate consumers on a served model, not on the gateway being deployed

2026-09-04 19:48:32 +02:00

library

…

plugins

fix(lookups): name file-backed extra secrets by content and hand plain types to PyYAML

2026-09-11 11:20:26 +02:00

roles

fix(test-e2e-playwright): scale onion timeouts by the tor flavor instead of a flat five

2026-09-10 15:53:08 +02:00

scripts

fix(diagnostics): let the in-zone probes read the drop-in that holds the zone

2026-09-03 12:50:58 +02:00

utils

perf(healthcheck): let the start window outlast a real boot

2026-09-09 21:54:26 +02:00

__init__.py

…