Repository navigation
Add sinedge stack with secure credential loading - #7
Merged
Merged
Conversation
Full edge stack: Docker images (base, edge-site, CDN, mock DGC), Java interface layer (io.sindoc.collibra.edge), Claude API agent, and K8s installer scripts. CDN additions: IRIB3 and PersianGulf HLS proxy vhosts with caching, multi-channel player, and runtime envsubst templating. Credential handling: entrypoint.sh loads secrets from 1Password CLI (op), then ~/.collibra/creds, then environment variables. Stream tokens are stripped from committed files (mms-channels.json) and injected at container startup via ONETV_TOKEN env var. No secrets, tokens, or credentials are committed. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
edge/: Docker images (CentOS 7 base, edge-site JDK 11 server, nginx CDN, mock DGC), Java interface layer (io.sindoc.collibra.edge), Claude API agent, K8s installer, and three compose modes (dev/cloud/production)mms-channels.jsonentrypoint.shsources secrets from 1Password CLI (op) →~/.collibra/creds→ env vars. Stream tokens (ONETV_TOKEN) injected at container startup so the repo stays token-free.env, certs, JARs, build artifacts, Claude settings, and installer bundles excludedCredential flow
op item get "CDN Streams" --fields ONETV_TOKEN~/.collibra/credsdocker compose --env-fileWhat is NOT committed
.env(gitignored,.env.exampleprovided).class,.jar)Test plan
docker compose -f edge/docker-compose.cloud.yml --env-file edge/.env up -dcurl -sk https://localhost/healthzreturns 200ONETV_TOKENset, container logs show token injection🤖 Generated with Claude Code