@klok-integration/cli 0.7.281 → 0.7.285
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
|
@@ -69,3 +69,7 @@ operator command for the person to run, not a way in.
|
|
|
69
69
|
|
|
70
70
|
`0` ok, `1` error, `2` a task waits for input, `3` denied by policy, `4` not authenticated, `5` outdated (instructions,
|
|
71
71
|
or a deployed service). With `--json`, the document says what happened; messages go to stderr.
|
|
72
|
+
|
|
73
|
+
When a klok command fails or answers something unexpected, run it again with `--verbose` (or `KLOK_VERBOSE=1`) before
|
|
74
|
+
guessing. Every HTTP request and process it makes is then one line on stderr, with its result and time and with
|
|
75
|
+
credentials masked, so the lines that matter can be quoted in the report.
|
|
@@ -16,6 +16,7 @@ Local proxy to the Klok Integration Agent. Interactive terminal UI when run in a
|
|
|
16
16
|
| `--tenant <slug>` | Tenant to act in (overrides config and KLOK_TENANT) |
|
|
17
17
|
| `--domain <slug>` | Default domain scope for tasks |
|
|
18
18
|
| `--agent-url <url>` | Agent service URL (overrides config and KLOK_AGENT_URL) |
|
|
19
|
+
| `--verbose` | Log every outbound HTTP request and every process the command starts to stderr (also KLOK_VERBOSE=1) |
|
|
19
20
|
|
|
20
21
|
```
|
|
21
22
|
Exit codes:
|
|
@@ -52,6 +52,12 @@ domains read should still travel as class B or C (transform at the edge).
|
|
|
52
52
|
Vault needs nothing per project: the tenant CI role `<tenant>-ci` accepts every project under the tenant's
|
|
53
53
|
root group. If `publish_java_projects` fails at `auth/jwt/login`, the tenant itself is not set up; see the
|
|
54
54
|
`klok-release` skill.
|
|
55
|
+
|
|
56
|
+
GitLab does need one setting per project: the tenant's root group on the project's CI job token allowlist
|
|
57
|
+
(*Settings → CI/CD → Job token permissions*, or `POST /projects/<numeric id>/job_token_scope/groups_allowlist`
|
|
58
|
+
with `target_group_id=<root group id>`; the POST refuses a path). A new private project allows only itself, so
|
|
59
|
+
every consumer's pipeline gets 403 on the model's package although a build with a personal token resolves it.
|
|
60
|
+
Hand it to a person as a step, with the read (`GET …/groups_allowlist`) first.
|
|
55
61
|
2. Write the XSD under `schema-definition-xsd/`: single `xs:` prefix, `targetNamespace` with `xmlns:tns`,
|
|
56
62
|
`elementFormDefault="qualified"`, one root element `<Name>_vN` that references every complex type. Enumerations
|
|
57
63
|
as `xs:enumeration`. `klok datamodel validate` checks it with the pipeline's rules before you push.
|