DAppNodePackage-package-harness/setup-wizard.yml at master · dappnode/DAppNodePackage-package-harness · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
version: "2"
fields:
  - id: allow-destructive-tests
    target:
      type: environment
      name: ALLOW_DESTRUCTIVE_PACKAGE_TESTS
      service: package-harness
    title: Allow destructive package tests
    description: >-
      This dedicated disposable node will install, upgrade, and remove packages
      and may delete their volumes. Enter true to acknowledge and enable testing.
      Startup remains blocked until this acknowledgement is provided.
    pattern: "^true$"
    patternErrorMessage: Enter true to acknowledge destructive testing on this disposable node
    required: true

  - id: tropibot-url
    target:
      type: environment
      name: TROPIBOT_URL
      service: package-harness
    title: Tropibot URL
    description: >-
      HTTPS base URL for the trusted Tropibot coordinator. The harness polls it
      outbound, so it does not need a publicly reachable job-submission API.
    pattern: "^https://.+$"
    patternErrorMessage: Must be an HTTPS URL
    required: true

  - id: worker-id
    target:
      type: environment
      name: PACKAGE_HARNESS_WORKER_ID
      service: package-harness
    title: Worker ID
    description: >-
      Stable identifier for this dedicated disposable Dappnode worker, for
      example worker-01.
    pattern: "^[A-Za-z0-9._-]{1,128}$"
    required: true

  - id: worker-token
    target:
      type: environment
      name: PACKAGE_HARNESS_WORKER_TOKEN
      service: package-harness
    title: Tropibot worker token
    description: >-
      Shared bearer token for the small trusted v1 worker protocol. It can be
      replaced by per-worker credentials in a future protocol revision.
    secret: true
    required: true

  - id: dappmanager-mcp-url
    target:
      type: environment
      name: DAPPMANAGER_MCP_URL
      service: package-harness
    title: Dappmanager MCP URL
    description: >-
      The stateless Streamable HTTP MCP endpoint of this dedicated test Dappnode.
    required: true

  - id: dappmanager-mcp-token
    target:
      type: environment
      name: DAPPMANAGER_MCP_TOKEN
      service: package-harness
    title: Dappmanager MCP bearer token
    description: >-
      Bearer token authorized to use the required external read and mutation tools.
      Enable external MCP mutating tools in Dappmanager System > Advanced.
    secret: true
    required: true

  - id: poll-seconds
    target:
      type: environment
      name: PACKAGE_HARNESS_POLL_SECONDS
      service: package-harness
    title: Poll interval in seconds
    description: Time to wait after Tropibot reports no work. Default is 10 seconds.
    required: false

  - id: heartbeat-seconds
    target:
      type: environment
      name: PACKAGE_HARNESS_HEARTBEAT_SECONDS
      service: package-harness
    title: Heartbeat interval in seconds
    description: Frequency of progress and cancellation checks while a job is active. Default is 20 seconds.
    required: false

  - id: nexus-api-key
    target:
      type: environment
      name: NEXUS_API_KEY
      service: package-harness
    title: Nexus API key (optional)
    description: >-
      Enables bounded advisory baseline-versus-candidate log analysis across all
      collected container logs, plus optional startup-evidence classification.
      Deterministic container results never depend on Nexus.
    secret: true
    required: false

  - id: readiness-profiles
    target:
      type: environment
      name: READINESS_PROFILES
      service: package-harness
    title: Application readiness profiles (optional JSON)
    description: >-
      Per-package HTTP, TCP, or read-only JSON-RPC checks for test and restoration
      readiness. Leave empty to use container observations. Probe headers may
      contain credentials, so this setting is kept secret.
    secret: true
    required: false

  - id: nexus-model
    target:
      type: environment
      name: NEXUS_MODEL
      service: package-harness
    title: Nexus model
    description: Optional Nexus model identifier. The default is nexus/auto.
    required: false

  - id: nexus-classifier-model
    target:
      type: environment
      name: NEXUS_CLASSIFIER_MODEL
      service: package-harness
    title: Nexus collection classifier
    description: Optional System One model for requesting extra startup log samples. Default is jev; clear the value to disable it.
    required: false