Repository navigation
refactor: remove customer-specific naming from CloudFile docker assets - #44
Merged
Merged
Conversation
…ooling CloudFile deployment assets must stay customer-neutral. Genericise the enterprise SSO example, documentation, tests and script comments; rename the example file to .env.enterprise-sso.example; move the customer database health script to the consumer project; use a product label namespace. Consumers keep their own namespace by setting CF_ACL_PROVIDER (default 'external') and CF_DIRECTORY_AUDIENCE (default 'cloudfile-directory').
This was referenced Oct 25, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
背景
Etech 是基于 CloudFile 的客户项目;客户名称/域名/客户专属运维工具不应出现在 CloudFile 仓库内容中。本 PR 对 docker 仓做通用化清理(纯命名/归属,不改变启动逻辑)。
变更
.env.etech-sso.example→.env.enterprise-sso.example,内容改为通用企业 Directory 示例:CF_ACL_PROVIDER=external(默认命名空间,消费方可设自己的值并保持稳定)、CF_DIRECTORY_AUDIENCE=cloudfile-directory;CF_PROVIDER_ADMIN_EXPECTED_ACCOUNT默认留空(operator 自行填写,仅作健康断言)。tools/ops/dir_health.py移到消费方仓(eap-cloudfiletools/customer/dir_health.py,commitd300375),docker 仓不再包含客户库表知识。tools/ops/automatic-local-storage/Dockerfilelabel 命名空间com.sec.etech.*→com.sec.cloudfile.*。验证
python3 -m unittest discover -s tests -p test_admin_startup_hook.py -qOKtests/test_v2_authorization_contract.pyOK;test_build_receipt.py、test_current_build_policy.pyOKbuild/)已无etech大小写变体残留。消费方配置注意
Etech 等既有部署升级时:镜像构建/部署配置需在消费方环境显式设置
CF_ACL_PROVIDER(保持既有cf_sso_group_map/ACL 命名空间值)与CF_DIRECTORY_AUDIENCE;示例文件仅提供通用默认值。