keycape identity-facts --config PATH and make identity-facts print client registry, directory bind and admin-surface facts without credential values or secret reference names. Fixture and committed-config tests. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 308701@bnt-lap001 Assistant-Session: 5548e447-444c-4dcc-bed1-05c16eebfe56
53 lines
1.6 KiB
Makefile
53 lines
1.6 KiB
Makefile
IMAGE_REGISTRY ?= 92.205.130.254:32166
|
|
IMAGE_REPO ?= coulomb/key-cape
|
|
IMAGE_TAG ?= latest
|
|
IMAGE := $(IMAGE_REGISTRY)/$(IMAGE_REPO):$(IMAGE_TAG)
|
|
|
|
.PHONY: dev seed build test lint contract-test image push image-tag tokenstatus-export tokenstatus-check identity-facts
|
|
|
|
PLAYBOOK_VALIDATOR ?= ../net-kingdom/tools/playbook-capability-contract/playbook_contract_validator.py
|
|
|
|
dev:
|
|
docker compose -f docker-compose.dev.yml up
|
|
|
|
seed:
|
|
docker compose -f docker-compose.dev.yml exec lldap /scripts/seed.sh
|
|
|
|
build:
|
|
cd src && go build ./...
|
|
|
|
test: tokenstatus-check
|
|
cd src && go test ./...
|
|
|
|
tokenstatus-export:
|
|
python3 tools/export_tokenstatus_client.py
|
|
|
|
tokenstatus-check:
|
|
python3 tools/export_tokenstatus_client.py --check
|
|
|
|
# KEY-WP-0045: value-safe identity facts for NetKingdom's service-identity check.
|
|
IDENTITY_CONFIG ?= config/service-clients.example.yaml
|
|
identity-facts:
|
|
@cd src && go run ./cmd/keycape identity-facts --config $(abspath $(IDENTITY_CONFIG))
|
|
|
|
lint:
|
|
cd src && go vet ./...
|
|
|
|
contract-test:
|
|
python3 $(PLAYBOOK_VALIDATOR) capabilities/playbooks/*.yaml
|
|
|
|
image:
|
|
docker build -t $(IMAGE) .
|
|
|
|
push: image
|
|
docker push $(IMAGE)
|
|
|
|
image-tag:
|
|
docker tag $(IMAGE) $(IMAGE_REGISTRY)/$(IMAGE_REPO):$(IMAGE_TAG)
|
|
|
|
# CUST-WP-0079-T05: staged-source generation; hook uses the isolated recipe.
|
|
.PHONY: generated-work-records generated-work-records-check
|
|
generated-work-records:
|
|
$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records
|
|
generated-work-records-check:
|
|
$(MAKE) --no-print-directory -f .generated-work-records.mk generated-work-records-check
|