Secure edge gateway service credentials

This commit is contained in:
Jeppe B
2026-06-01 23:42:34 +02:00
parent e3b38519fb
commit f8ced3b8f2
3 changed files with 61 additions and 8 deletions
@@ -62,6 +62,9 @@ it('builds the installer around the compose stack artifacts and management polli
expect($launcherSource)->toContain('container_is_healthy truckwash-auto-updater');
expect($launcherSource)->toContain('compose_project_name="$(config_value composeProjectName \'truckwash-edge-gateway\')"');
expect($launcherSource)->toContain('COMPOSE_PROJECT_NAME="$compose_project_name"');
expect($launcherSource)->toContain('ensure_stack_env');
expect($launcherSource)->toContain('REDIS_PASSWORD');
expect($launcherSource)->toContain('chmod 0600 "$ENV_FILE"');
expect($launcherSource)->toContain('AUTO_UPDATER_BASE_IMAGE="$auto_updater_base_image"');
expect($launcherSource)->toContain('compose_cmd -f "$COMPOSE_FILE" logs --tail=80 || true');
expect($launcherSource)->toContain('log "Compose rollout failed during build/startup"');
@@ -83,6 +86,16 @@ it('builds the installer around the compose stack artifacts and management polli
expect($composeSource)->toContain('$$path=\"/opt/truckwash-edge-agent/runtime/auto-updater-heartbeat.json\"');
expect($composeSource)->not->toContain("curl\", \"-fsS\", \"http://127.0.0.1:9000/minio/health/live");
expect($composeSource)->not->toContain('mysqladmin ping -h 127.0.0.1 -uroot -ptruckwash_edge_root --silent');
expect($composeSource)->toContain('--requirepass');
expect($composeSource)->toContain('${REDIS_PASSWORD:?set REDIS_PASSWORD}');
expect($composeSource)->toContain('${MARIADB_PASSWORD:?set MARIADB_PASSWORD}');
expect($composeSource)->toContain('${MARIADB_ROOT_PASSWORD:?set MARIADB_ROOT_PASSWORD}');
expect($composeSource)->toContain('${MINIO_ROOT_USER:?set MINIO_ROOT_USER}');
expect($composeSource)->toContain('${MINIO_ROOT_PASSWORD:?set MINIO_ROOT_PASSWORD}');
expect($composeSource)->not->toContain('MARIADB_PASSWORD: truckwash_edge');
expect($composeSource)->not->toContain('MARIADB_ROOT_PASSWORD: truckwash_edge_root');
expect($composeSource)->not->toContain('MINIO_ROOT_USER: truckwashminio');
expect($composeSource)->not->toContain('MINIO_ROOT_PASSWORD: truckwash_edge_storage');
expect($composeSource)->toContain('container_name: truckwash-redis');
expect($composeSource)->toContain('container_name: truckwash-mariadb');
expect($composeSource)->toContain('container_name: truckwash-minio');