Skip to content

refactor: remove customer-specific naming from CloudFile docker assets - #44

Merged
opendev9 merged 1 commit into
devfrom
refactor/remove-customer-names-20261025
Oct 25, 2026
Merged

opendev9 merged 1 commit into
devfrom
refactor/remove-customer-names-20261025

Conversation

@opendev9

Copy link
Copy Markdown

背景

Etech 是基于 CloudFile 的客户项目;客户名称/域名/客户专属运维工具不应出现在 CloudFile 仓库内容中。本 PR 对 docker 仓做通用化清理(纯命名/归属,不改变启动逻辑)。

变更

  • .env.etech-sso.example → .env.enterprise-sso.example,内容改为通用企业 Directory 示例:
    • 新增/明确 CF_ACL_PROVIDER=external(默认命名空间,消费方可设自己的值并保持稳定)、CF_DIRECTORY_AUDIENCE=cloudfile-directory;
    • 移除客户管理员账号硬编码,CF_PROVIDER_ADMIN_EXPECTED_ACCOUNT 默认留空(operator 自行填写,仅作健康断言)。
  • 客户数据库巡检脚本 tools/ops/dir_health.py 移到消费方仓(eap-cloudfile tools/customer/dir_health.py,commit d300375),docker 仓不再包含客户库表知识。
  • tools/ops/automatic-local-storage/Dockerfile label 命名空间 com.sec.etech.* → com.sec.cloudfile.*。
  • 文档/测试/脚本注释中的客户名称与示例 URL 通用化;测试断言同步更新(示例不再硬编码客户管理员)。
  • 无启动逻辑、无迁移、无新表。

验证

  • python3 -m unittest discover -s tests -p test_admin_startup_hook.py -q OK
  • tests/test_v2_authorization_contract.py OK;test_build_receipt.py、test_current_build_policy.py OK
  • 仓库内(排除本机构建产物 build/)已无 etech 大小写变体残留。

消费方配置注意

Etech 等既有部署升级时:镜像构建/部署配置需在消费方环境显式设置 CF_ACL_PROVIDER(保持既有 cf_sso_group_map/ACL 命名空间值)与 CF_DIRECTORY_AUDIENCE;示例文件仅提供通用默认值。

…ooling

CloudFile deployment assets must stay customer-neutral. Genericise the
enterprise SSO example, documentation, tests and script comments; rename the
example file to .env.enterprise-sso.example; move the customer database
health script to the consumer project; use a product label namespace.

Consumers keep their own namespace by setting CF_ACL_PROVIDER (default
'external') and CF_DIRECTORY_AUDIENCE (default 'cloudfile-directory').
@opendev9
opendev9 merged commit 14bbc51 into dev Oct 25, 2026
1 check passed
@opendev9
opendev9 deleted the refactor/remove-customer-names-20261025 branch October 25, 2026 00:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant