adam/orchestrator
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

chore: enable confluence-doc in the nightly checker coordinator #42

Merged
amoussa1229 merged 1 commit from chore/enable-confluence-doc-nightly into main 2026-06-22 23:54:54 +00:00
Conversation 0 Commits 1 Files changed 1 +9 -3
1 changed files with 9 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

12
security-review/systemd/sea-haven-checkers.service
View file

@ -18,8 +18,11 @@
#
# COORDINATOR_SKIP_ROLES excludes roles whose creds are NOT provisioned:
# - aws-posture needs IAM Roles Anywhere / step-ca (not provisioned)
# - confluence-doc needs the confluence-bot Atlassian token (not provisioned)
# Remove a name here once its credential is provisioned to bring that checker online.
# confluence-doc is ONLINE (2026-06-22): authenticates via the OAuth 2.0
# client-credentials service account in ~/secrev.env (CONFLUENCE_BASE_URL +
# CONFLUENCE_OAUTH_CLIENT_ID/_SECRET); PAGE_MAP_FILE points at the IT page-ID map
# generated from the live space. Remove a name from the skip list once its
# credential is provisioned to bring that checker online.
[Unit]
Description=Sea Haven agent-team Plane-1 nightly checker coordinator
@ -33,7 +36,10 @@ WorkingDirectory=/home/adam/orchestrator/security-review
EnvironmentFile=-/home/adam/secrev.env
EnvironmentFile=-/home/adam/orchestrator/.env
Environment=GH_ORG=Sea-Haven-Industries
Environment=COORDINATOR_SKIP_ROLES=aws-posture,confluence-doc
Environment=COORDINATOR_SKIP_ROLES=aws-posture
# IT page-ID map for confluence-doc (generated from the live space; regenerate
# periodically as pages change).
Environment=PAGE_MAP_FILE=/home/adam/confluence-page-map.json
# Tune the shared ceiling without editing the script (uncomment to override):
# Environment=TOTAL_BUDGET_USD=120
# Environment=MAX_CYCLE_NIGHTS=4