riotpiao-poimen/poimen-workflows
2
0
Fork 0
Code Issues 6 Pull Requests Actions Packages Projects Releases Wiki Activity

[Phase 1.3] Temporal configuration + secrets #11

Merged
rock merged 2 commits from feat/phase-1.3-temporal-config into main 2026-09-09 00:31:55 +00:00
Conversation 2 Commits 2 Files Changed 4
+300 -14
2 Commits
Author SHA1 Message Date
poimen cf6f2deb18 feat(phase-1.3): config validation, env-specific loading, SOPS secrets
CI / CI (pull_request) Successful in 4m38s
Details 
config.go:
  - Environment enum (dev/staging/prod) with auto-detect
  - MemoryServiceConfig + LLMConfig structs
  - Validate(): TLS pair check, file existence, prod LLM key requirement
  - In-cluster default host detection via KUBERNETES_SERVICE_HOST
  - TaskQueue + WorkerCount from env

config_test.go: 11 tests
  - defaults, env override, TLS mismatch, TLS file not found
  - prod validation (requires LLM key), env parsing
  - in-cluster detection, port defaults, int parsing

k8s/secrets.enc.yaml: SOPS-encrypted Secret
  - anthropic-api-key, memory-service-jwt, temporal-postgres-password
  - Age-encrypted, KSOPS-compatible

Build: clean, full test suite passes
 2026-09-08 17:04:29 -07:00
poimen fca5274163 fix: add binary files to .gitignore 2026-09-08 17:04:29 -07:00