@colony2/c2j 0.0.102 → 0.0.103
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +15 -0
- package/package.json +1 -1
package/README.md
CHANGED
|
@@ -626,6 +626,21 @@ support it (JobDB `20269bd` / `v0.0.46` or later, with a compatible backend).
|
|
|
626
626
|
Unsupported backends return an error; c2j never falls back to listing and deleting
|
|
627
627
|
jobs individually.
|
|
628
628
|
|
|
629
|
+
### Secret inputs and delegated permissions
|
|
630
|
+
|
|
631
|
+
Secret references authored in the root recipe's repository can be resolved into
|
|
632
|
+
inputs without a `perms` grant. Defaults from ops in that repository are trusted
|
|
633
|
+
too. Foreign recipes and foreign op defaults require authorization.
|
|
634
|
+
|
|
635
|
+
Input resolution never adds a secret to the delegated lease. For example, a node
|
|
636
|
+
can receive `foo` through `${{ context.secrets.foo }}` while its `perms.jobdb`
|
|
637
|
+
grant allows only runtime retrieval of `bar`. On include nodes, `perms.jobdb`
|
|
638
|
+
authorizes the included recipe's input references and bounds its possible grants;
|
|
639
|
+
it does not give every descendant the corresponding lease capabilities.
|
|
640
|
+
|
|
641
|
+
See [recipe node permissions](GUIDE-Node-Permissions.md) for examples of explicit
|
|
642
|
+
inputs, foreign op defaults, include grants, and forwarding secret inputs.
|
|
643
|
+
|
|
629
644
|
### Recipe timeouts and recovery
|
|
630
645
|
|
|
631
646
|
c2j does not set default job or built-in op timeouts. Set `timeout` on a recipe
|