Update archipelago: API, auth, container, parmanode, performance, security
- API handler, RPC, and server updates - Auth and coding rules - Container data manager, dev orchestrator, health monitor, podman client - Parmanode script runner - Performance resource manager - Security container policies and secrets manager - Add build scripts and documentation
This commit is contained in:
@@ -2,7 +2,6 @@
|
||||
// Creates security profiles for each containerized app
|
||||
|
||||
use anyhow::Result;
|
||||
use std::collections::HashMap;
|
||||
use std::path::PathBuf;
|
||||
use tokio::fs;
|
||||
|
||||
@@ -58,7 +57,7 @@ impl ContainerPolicyGenerator {
|
||||
}
|
||||
|
||||
/// Apply AppArmor profile to a container
|
||||
pub async fn apply_profile(&self, container_name: &str, profile_path: &PathBuf) -> Result<()> {
|
||||
pub async fn apply_profile(&self, _container_name: &str, profile_path: &PathBuf) -> Result<()> {
|
||||
// Load the profile
|
||||
tokio::process::Command::new("apparmor_parser")
|
||||
.arg("-r")
|
||||
|
||||
@@ -2,21 +2,20 @@
|
||||
// Stores secrets securely and injects them at runtime
|
||||
|
||||
use anyhow::{Context, Result};
|
||||
use std::collections::HashMap;
|
||||
use std::path::PathBuf;
|
||||
use tokio::fs;
|
||||
use uuid::Uuid;
|
||||
|
||||
pub struct SecretsManager {
|
||||
secrets_dir: PathBuf,
|
||||
encryption_key: Vec<u8>, // In production, derive from user password
|
||||
_encryption_key: Vec<u8>, // In production, derive from user password
|
||||
}
|
||||
|
||||
impl SecretsManager {
|
||||
pub fn new(secrets_dir: PathBuf, encryption_key: Vec<u8>) -> Self {
|
||||
Self {
|
||||
secrets_dir,
|
||||
encryption_key,
|
||||
_encryption_key: encryption_key,
|
||||
}
|
||||
}
|
||||
|
||||
@@ -24,7 +23,7 @@ impl SecretsManager {
|
||||
pub async fn store_secret(
|
||||
&self,
|
||||
app_id: &str,
|
||||
key: &str,
|
||||
_key: &str,
|
||||
value: &str,
|
||||
) -> Result<String> {
|
||||
let secret_id = Uuid::new_v4().to_string();
|
||||
|
||||
Reference in New Issue
Block a user