tegwick
5c73cd32b3
pydantic-settings derives the env var from the field name, so `instance_role` bound INSTANCE_ROLE and silently ignored the chart's STATE_HUB_INSTANCE_ROLE. The value reached the pod and was discarded: central reported "unknown" while its ConfigMap said "primary". That is the same failure this workplan closes — configuration declared but never reaching what it configures — reintroduced while building the guard against it. Rendering the key in `helm template` was mistaken for evidence that it bound. Renames to state_hub_instance_role / state_hub_instance_label, matching the existing state_hub_report_dir precedent, so the env var the chart already sets is the one that binds. tests/test_instance_identity.py asserts the env var *name* binds, which is the check that would have caught this before deploy, plus the unknown default and rejection of invalid roles. Refs CUST-WP-0067-T03 Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Assistant: claude-code Assistant-Model: opus Assistant-Process: 2583210@bnt-lap001 Assistant-Session: f2bff2d5-e9b2-4338-92ca-10282a927006
39 lines
1.7 KiB
Python
39 lines
1.7 KiB
Python
from typing import Literal
|
|
|
|
from pydantic_settings import BaseSettings, SettingsConfigDict
|
|
|
|
|
|
class Settings(BaseSettings):
|
|
model_config = SettingsConfigDict(
|
|
env_file=".env",
|
|
env_file_encoding="utf-8",
|
|
extra="ignore",
|
|
)
|
|
|
|
database_url: str = "postgresql+asyncpg://custodian:changeme@127.0.0.1:5432/custodian"
|
|
api_base: str = "http://127.0.0.1:8000"
|
|
# What this instance claims to be. Deliberately defaults to "unknown":
|
|
# an instance that has not declared itself is not the primary, and callers
|
|
# that need the authoritative hub must be able to tell the difference.
|
|
# Answering on a port is not evidence of authority — that assumption cost
|
|
# seven weeks of onboarding (CUST-WP-0067-T03, ADR-010).
|
|
state_hub_instance_role: Literal["primary", "cache", "unknown"] = "unknown"
|
|
# Env vars are STATE_HUB_INSTANCE_ROLE / STATE_HUB_INSTANCE_LABEL — the
|
|
# field name *is* the binding, so renaming either breaks the deployment
|
|
# silently. Covered by tests/test_instance_identity.py.
|
|
# Free-form label to name *which* instance answered, e.g. "railiance01".
|
|
state_hub_instance_label: str | None = None
|
|
debug: bool = False
|
|
state_hub_report_dir: str = "reports/recently-on-scope"
|
|
state_hub_markitect_cli_path: str | None = None
|
|
activity_core_url: str | None = None
|
|
activity_core_worker_token: str | None = None
|
|
ops_run_projection_ttl_seconds: float = 15.0
|
|
ops_run_sla_hours: float = 1.0
|
|
sbom_nexus_url: str | None = None
|
|
sbom_nexus_read_mode: Literal["legacy", "nexus"] = "legacy"
|
|
sbom_nexus_write_mode: Literal["legacy", "nexus"] = "legacy"
|
|
sbom_nexus_timeout_seconds: float = 5.0
|
|
|
|
|
|
settings = Settings()
|