feat(deploy): extend canon for managed EDP and Engine grants

2026-07-17 18:09:39 +03:00
parent a0a4d36fa2
commit 2dd6e33a54
19 changed files with 5336 additions and 106 deletions
@@ -97,9 +97,20 @@ EXTERNAL_DATA_PLANE_WRITER_BINDING_MAX_TTL_DAYS=90
 EXTERNAL_DATA_PLANE_MAX_FUTURE_SKEW_SECONDS=300
 EXTERNAL_DATA_PLANE_RETENTION_SWEEP_MS=3600000
 EXTERNAL_DATA_PLANE_LEGACY_INTAKE_ENABLED=false
-# The writer-provisioner secret is a root-owned file under
-# /volume1/docker/nodedc-platform/secrets/external-data-plane-provisioner/,
-# never a shared .env value.
+# Internal control-plane writer/reader binding issuance; keep false until the
+# atomic NDC L2 ensure-grant operation is deployed. Legacy path returns a
+# plaintext capability and must never be exposed to users.
+EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED=false
+# Digest-only managed writer-binding ensure. It accepts only signed Engine
+# service requests; the legacy provisioner bearer is deliberately invalid here.
+# Keep false until the matching Engine private key is provisioned. The trust
+# directory is mounted read-only into EDP and contains only `public-key.pem`.
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONING_ENABLED=false
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_SERVICE_ID=nodedc-engine
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_KEY_ID=engine-edp-managed-provisioner-v1
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_AUDIENCE=nodedc-external-data-plane.managed-provisioning.v1
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_MAX_SKEW_SECONDS=60
+EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_REPLAY_CACHE_MAX_ENTRIES=10000

 NOTIFICATION_PG_DB=nodedc_notifications
 NOTIFICATION_PG_USER=nodedc_notifications
@@ -132,8 +143,9 @@ AI_WORKSPACE_ONTOLOGY_MCP_ENABLED=true
 AI_WORKSPACE_ONTOLOGY_MCP_PUBLIC_URL=
 ONTOLOGY_CORE_HOST_BIND=127.0.0.1:18104

-# Gelios Gateway — storage/read service. Provider credentials stay in the
-# protected Engine Collector. Intake remains disabled until scope is approved.
+# Gelios Gateway — frozen legacy storage/read compatibility service. Provider
+# credentials stay in the protected Engine Collector. Do not extend this
+# provider-specific contour for new providers.
 GELIOS_TIMESCALE_IMAGE=timescale/timescaledb-ha:pg16.14-ts2.28.2-all
 GELIOS_PG_DB=nodedc_gelios
 GELIOS_PG_USER=nodedc_gelios
@@ -141,8 +153,6 @@ GELIOS_PG_PASS=replace-with-random-synology-secret
 # URL-encode reserved characters in GELIOS_PG_PASS when forming this URL.
 GELIOS_DATABASE_URL=postgresql://nodedc_gelios:replace-with-url-encoded-synology-secret@gelios-postgres:5432/nodedc_gelios
 GELIOS_GATEWAY_HOST_BIND=127.0.0.1:18105
-# Explicit tenant and connection identifiers are deployment configuration;
-# do not encode a customer or pilot name in source defaults.
 GELIOS_TENANT_ID=replace-with-tenant-id
 GELIOS_CONNECTION_ID=gelios-connection-id
 # `all` accepts every unit returned by this approved tenant + connection.
@@ -38,7 +38,7 @@ echo "== ontology core image build =="
 cd "${PLATFORM_DIR}/ontology-core"
 "${DOCKER_BIN}" build --no-cache -t nodedc/ontology-core:local .

-echo "== gelios gateway image build =="
+echo "== frozen legacy gelios gateway image build =="
 cd "${PLATFORM_DIR}/gelios-gateway"
 "${DOCKER_BIN}" build --no-cache -t nodedc/gelios-gateway:local .

@@ -53,7 +53,7 @@ echo "== ontology core health check =="
 "${DOCKER_BIN}" exec nodedc-platform-ontology-core-1 sh -lc \
  'node -e '"'"'fetch("http://127.0.0.1:18104/healthz").then(async (response) => { console.log(await response.text()); process.exit(response.ok ? 0 : 1); }).catch((error) => { console.error(error); process.exit(1); })'"'"''

-echo "== gelios gateway health check =="
+echo "== frozen legacy gelios gateway health check =="
 "${DOCKER_BIN}" exec nodedc-platform-gelios-gateway-1 sh -lc \
  'node -e '"'"'fetch("http://127.0.0.1:18105/healthz").then(async (response) => { console.log(await response.text()); process.exit(response.ok ? 0 : 1); }).catch((error) => { console.error(error); process.exit(1); })'"'"''

@@ -51,12 +51,23 @@ services:
      # Migration-only shared-token routes stay closed in a canonical install.
      EXTERNAL_DATA_PLANE_LEGACY_INTAKE_ENABLED: ${EXTERNAL_DATA_PLANE_LEGACY_INTAKE_ENABLED:-false}
      NODEDC_INTERNAL_ACCESS_TOKEN: ${NODEDC_INTERNAL_ACCESS_TOKEN:-}
-      # Runner-owned secret file. This credential must never live in the
-      # shared .env.synology that is inherited by unrelated services.
+      # Legacy manual one-time issuance uses this EDP-only bearer. Managed
+      # Engine ensure/revoke never accepts it and uses the Ed25519 boundary
+      # below. Neither credential is exposed to a graph, MCP client or provider.
      EXTERNAL_DATA_PLANE_PROVISIONER_TOKEN_FILE: /run/nodedc-secrets/external-data-plane-provisioner-token
-      # This stays false until the dedicated Engine provisioner is deployed and
-      # receives the same read-only secret mount.
-      EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: "false"
+      # Disabled until the atomic native NDC L2 ensure-grant control-plane
+      # operation is present. This legacy API returns plaintext capabilities;
+      # a root/UI transfer is emergency diagnostics only.
+      EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED: ${EXTERNAL_DATA_PLANE_PROVISIONING_ENABLED:-false}
+      # Digest-only, idempotent writer-binding ensure path. Enable only after
+      # Engine owns the matching private key and the public trust file exists.
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONING_ENABLED: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONING_ENABLED:-false}
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_PUBLIC_KEY_FILE: /run/nodedc-trust/engine-managed-provisioner/public-key.pem
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_SERVICE_ID: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_SERVICE_ID:-nodedc-engine}
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_KEY_ID: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_KEY_ID:-engine-edp-managed-provisioner-v1}
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_AUDIENCE: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_AUDIENCE:-nodedc-external-data-plane.managed-provisioning.v1}
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_MAX_SKEW_SECONDS: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_MAX_SKEW_SECONDS:-60}
+      EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_REPLAY_CACHE_MAX_ENTRIES: ${EXTERNAL_DATA_PLANE_MANAGED_PROVISIONER_REPLAY_CACHE_MAX_ENTRIES:-10000}
    volumes:
      - type: bind
        source: /volume1/docker/nodedc-platform/secrets/external-data-plane-provisioner/token
@@ -64,6 +75,12 @@ services:
        read_only: true
        bind:
          create_host_path: false
+      - type: bind
+        source: /volume1/docker/nodedc-platform/trust/engine-managed-provisioner
+        target: /run/nodedc-trust/engine-managed-provisioner
+        read_only: true
+        bind:
+          create_host_path: false
    expose:
      - "18106"
    ports:
@@ -184,8 +184,8 @@ services:
    networks:
      - engine

-  # The provider database is private. Gateway is the only component that can
-  # reach it; the host bind is loopback-only for audited operator diagnostics.
+  # Frozen legacy Gelios compatibility contour. Keep it reproducible and
+  # isolated; new provider integrations use the provider-neutral data plane.
  gelios-postgres:
    image: ${GELIOS_TIMESCALE_IMAGE:-timescale/timescaledb-ha:pg16.14-ts2.28.2-all}
    restart: unless-stopped
@@ -67,7 +67,7 @@ echo "== ontology core health check =="
 "${DOCKER_BIN}" exec nodedc-platform-ontology-core-1 sh -lc \
  'node -e '"'"'fetch("http://127.0.0.1:18104/healthz").then(async (response) => { console.log(await response.text()); process.exit(response.ok ? 0 : 1); }).catch((error) => { console.error(error); process.exit(1); })'"'"''

-echo "== gelios gateway health check =="
+echo "== frozen legacy gelios gateway health check =="
 "${DOCKER_BIN}" exec nodedc-platform-gelios-gateway-1 sh -lc \
  'node -e '"'"'fetch("http://127.0.0.1:18105/healthz").then(async (response) => { console.log(await response.text()); process.exit(response.ok ? 0 : 1); }).catch((error) => { console.error(error); process.exit(1); })'"'"''