wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity

fix(agent): grant worker mounted transport access
Some checks failed
CD Pipeline / workflow-shape (push) Successful in 0s
Details
CD Pipeline / cancel-stale-cd (push) Has been skipped
Details
CD Pipeline / tests (push) Successful in 2m39s
Details
CD Pipeline / build-and-deploy (push) Successful in 5m26s
Details
CD Pipeline / post-deploy-checks (push) Has been cancelled
Details

Browse Source
This commit is contained in:
ogt
2026-07-10 17:39:03 +08:00
parent ee3d53fa4a
commit 83e113c236
2 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
apps/api/tests/test_signal_worker_ansible_executor_binding.py
View File

@@ -22,6 +22,7 @@ def test_worker_manifest_mounts_existing_ssh_mcp_transport() -> None:
assert 'command: ["python", "-m", "src.workers.signal_worker"]' in manifest assert 'command: ["python", "-m", "src.workers.signal_worker"]' in manifest
assert "serviceAccountName: awoooi-executor" in manifest assert "serviceAccountName: awoooi-executor" in manifest
assert "fsGroup: 1000" in manifest
assert "ENABLE_AWOOOP_ANSIBLE_CHECK_MODE_WORKER" in manifest assert "ENABLE_AWOOOP_ANSIBLE_CHECK_MODE_WORKER" in manifest
assert "ENABLE_AWOOOP_ANSIBLE_CONTROLLED_APPLY" in manifest assert "ENABLE_AWOOOP_ANSIBLE_CONTROLLED_APPLY" in manifest
assert "AWOOOP_ANSIBLE_CHECK_MODE_STARTUP_SLEEP_SECONDS" in manifest assert "AWOOOP_ANSIBLE_CHECK_MODE_STARTUP_SLEEP_SECONDS" in manifest

2
k8s/awoooi-prod/08-deployment-worker.yaml
View File

@@ -44,6 +44,8 @@ spec:
environment: prod environment: prod
component: signal-processor component: signal-processor
spec: spec:
securityContext:
fsGroup: 1000
# 2026-07-01 Codex: keep hostname spread as a preference, not a hard # 2026-07-01 Codex: keep hostname spread as a preference, not a hard
# scheduler blocker, so reboot recovery and GitOps rollouts do not deadlock. # scheduler blocker, so reboot recovery and GitOps rollouts do not deadlock.
topologySpreadConstraints: topologySpreadConstraints: