steven_li
9d6cde2d23
- 将所有环境变量前缀从NANO_改为BEAVER_ - 更新README.md文档内容，包括项目介绍、组件说明和快速开始指南 - 修改.gitignore文件，添加auth-portal运行时路径排除规则 - 更新app-instance镜像标签从nano/app-instance改为beaver/app-instance - 增强技能安全检查器，支持工具前缀白名单功能 - 添加技能草稿重新检查安全性API端点 - 扩展证据选择器，收集工具调用名称用于技能学习 - 改进技能合成器，基于实际调用的工具生成工具提示 - 优化路由超时处理机制，增加重试逻辑 - 更新后端架构文档，添加可视化入口和基础概念说明 - 实现在WebSocket消息中传递工具迭代次数信息
77 lines
2.0 KiB
Bash
Executable File
77 lines
2.0 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
|
|
|
|
IMAGE_NAME="${IMAGE_NAME:-beaver/authz-service:latest}"
|
|
CONTAINER_NAME="${CONTAINER_NAME:-beaver-authz-service}"
|
|
DATA_ROOT="${DATA_ROOT:-${SCRIPT_DIR}/runtime/data}"
|
|
HOST_PORT="${HOST_PORT:-19090}"
|
|
HOST_BIND_IP="${HOST_BIND_IP:-0.0.0.0}"
|
|
AUTHZ_ISSUER="${AUTHZ_ISSUER:-http://127.0.0.1:${HOST_PORT}}"
|
|
AUTHZ_INTERNAL_TOKEN="${AUTHZ_INTERNAL_TOKEN:-dev-internal-token}"
|
|
AUTHZ_ACCESS_TOKEN_TTL_SECONDS="${AUTHZ_ACCESS_TOKEN_TTL_SECONDS:-3600}"
|
|
DEPLOY_API_BASE_URL="${DEPLOY_API_BASE_URL:-http://127.0.0.1:8090}"
|
|
DEPLOY_API_TOKEN="${DEPLOY_API_TOKEN:-}"
|
|
FORCE_BUILD=0
|
|
REPLACE=0
|
|
|
|
usage() {
|
|
cat <<'EOF'
|
|
Usage:
|
|
./start-authz.sh [--build] [--replace]
|
|
EOF
|
|
}
|
|
|
|
while [[ $# -gt 0 ]]; do
|
|
case "$1" in
|
|
--build)
|
|
FORCE_BUILD=1
|
|
shift
|
|
;;
|
|
--replace)
|
|
REPLACE=1
|
|
shift
|
|
;;
|
|
--help|-h)
|
|
usage
|
|
exit 0
|
|
;;
|
|
*)
|
|
printf '[start-authz] unknown argument: %s\n' "$1" >&2
|
|
exit 1
|
|
;;
|
|
esac
|
|
done
|
|
|
|
mkdir -p "${DATA_ROOT}"
|
|
|
|
if [[ "${FORCE_BUILD}" -eq 1 ]] || ! docker image inspect "${IMAGE_NAME}" >/dev/null 2>&1; then
|
|
docker build -t "${IMAGE_NAME}" "${SCRIPT_DIR}"
|
|
fi
|
|
|
|
if docker container inspect "${CONTAINER_NAME}" >/dev/null 2>&1; then
|
|
if [[ "${REPLACE}" -eq 1 ]]; then
|
|
docker rm -f "${CONTAINER_NAME}" >/dev/null
|
|
else
|
|
printf '[start-authz] container already exists: %s\n' "${CONTAINER_NAME}" >&2
|
|
exit 1
|
|
fi
|
|
fi
|
|
|
|
docker run -d \
|
|
--name "${CONTAINER_NAME}" \
|
|
--restart unless-stopped \
|
|
-p "${HOST_BIND_IP}:${HOST_PORT}:19090" \
|
|
-v "${DATA_ROOT}:/var/lib/authz-service/data" \
|
|
-e "AUTHZ_ISSUER=${AUTHZ_ISSUER}" \
|
|
-e "AUTHZ_INTERNAL_TOKEN=${AUTHZ_INTERNAL_TOKEN}" \
|
|
-e "AUTHZ_ACCESS_TOKEN_TTL_SECONDS=${AUTHZ_ACCESS_TOKEN_TTL_SECONDS}" \
|
|
-e "DEPLOY_API_BASE_URL=${DEPLOY_API_BASE_URL}" \
|
|
-e "DEPLOY_API_TOKEN=${DEPLOY_API_TOKEN}" \
|
|
"${IMAGE_NAME}" >/dev/null
|
|
|
|
printf 'container_name=%s\n' "${CONTAINER_NAME}"
|
|
printf 'host_port=%s\n' "${HOST_PORT}"
|
|
printf 'data_root=%s\n' "${DATA_ROOT}"
|