Update release with new fabrica-based services; remove old services - #50

Open

travisbcotton wants to merge 78 commits into

mainfrom

trcotton/tokensmith-container

Commits on Jun 23, 2026

added tokensmith basic config file; update env file

travisbcotton
authored and
synackd
committed
78faa66
added tokensmith bootstrap token script

travisbcotton
authored and
synackd
committed
9521654
removed old services; added new ones

travisbcotton
authored and
synackd
committed
639f1dc
updating some container files

travisbcotton
authored and
synackd
committed
df2ed75
renamed .service files to .container

travisbcotton
authored and
synackd
committed
c1020f3
actually remove the .service files

travisbcotton
authored and
synackd
committed
6f3eb1c
update boot-service description

travisbcotton
authored and
synackd
committed
2c05c17
remove hydra dependency

travisbcotton
authored and
synackd
committed
4988684
update SMD env vars

travisbcotton
authored and
synackd
committed
f16b084
update where tokesmith config file is mounted from

travisbcotton
authored and
synackd
committed
b5591a4
updated spec file to include tokensmith bootstrap script

travisbcotton
authored and
synackd
committed
794f992
update spec again and renamed script to remove .sh ending

travisbcotton
authored and
synackd
committed
29d3177
update spec to hopefully fix rpm not building

travisbcotton
authored and
synackd
committed
d45e3a0
update spec yet again to add tokensmith_bootstrap_token to the config list

travisbcotton
authored and
synackd
committed
0a4adaf
update ExecStartPre to use renamed tokensmith bootstrap script

travisbcotton
authored and
synackd
committed
91b1c46
added boostrap secret to metadata-service

travisbcotton
authored and
synackd
committed
d030f20
updated openchami.target with new services; removed old ones

travisbcotton
authored and
synackd
committed
00eb5cd
updated tokensmith_bootstrap_token script to match updated tokensmith flags

travisbcotton
authored and
synackd
committed
39d4005
use v0.4.0 for tokensmith

travisbcotton
authored and
synackd
committed
3b7d272
update tokensmith container

travisbcotton
authored and
synackd
committed
a0d59ee
update bootstrap_token to read the container env for token directory

travisbcotton
authored and
synackd
committed
1789faa
make boot-service require tokensmith

travisbcotton
authored and
synackd
committed
3813f90
add persistent volume for tokensmith data

travisbcotton
authored and
synackd
committed
2fbbbb8
updated tokensmith Exec, boot-service exec, some dependencies

travisbcotton
authored and
synackd
committed
e13035e
remove opaal stuff from bootstrap_openchami.sh

travisbcotton
authored and
synackd
committed
4745776
update tokensmith container to mount the correct config file path

travisbcotton
authored and
synackd
committed
2eb8996
update tokensmith container to mount the correct config file path for real this time

travisbcotton
authored and
synackd
committed
88c10b0
ok now set the correct path for mounting inside the tokensmith container 😔

travisbcotton
authored and
synackd
committed
13e4e48
try to fix volume mount BS

travisbcotton
authored and
synackd
committed
b905e51
use correct path for tokensmith bootstrap script in boot-service and metadata-service

travisbcotton
authored and
synackd
committed
289849f
use pr-7 for metadata

travisbcotton
authored and
synackd
committed
6a7e1a4
update haproxy config

travisbcotton
authored and
synackd
committed
408e67a
haproxy.cfg needs a newline at the end of the file? removed commented out lines too

travisbcotton
authored and
synackd
committed
242773b
work on making bootstrap token scrit better

travisbcotton
authored and
synackd
committed
920d1d5
minor updates to container files

travisbcotton
authored and
synackd
committed
7c54ae3
update haproxy.cfg

travisbcotton
authored and
synackd
committed
b21c9f9
update openchami.target

travisbcotton
authored and
synackd
committed
d9d2e7f
updated haproxy.cfg, removed more references to opaal

travisbcotton
authored and
synackd
committed
6f4ce02
update some quadlet dependencies

travisbcotton
authored and
synackd
committed
8f937f3
change target service from hsm to smd

travisbcotton
authored and
synackd
committed
d01b948
update boot-service container to use v0.1.5

travisbcotton
authored and
synackd
committed
22776a1
remove hydra stuff from bootstrap+openchami.sh

travisbcotton
authored and
synackd
committed
03eeec3
remove cloud-init vars, revisit when metadata-service is in a better state

travisbcotton
authored and
synackd
committed
d784192
set metadata-service to use port 8080 in haproxy since it's the default

travisbcotton
authored and
synackd
committed
a763e13
remove the tokensmith flag for now, use pr-8 for the image

travisbcotton
authored and
synackd
committed
0c8e315
rename cloud-init-data volume to metadata-data, set metadata-service.container to use it

travisbcotton
authored and
synackd
committed
4b7c780
fix volume name for metadata

travisbcotton
authored and
synackd
committed
9633ca9
bump tokensmith version and update Exec in container file

travisbcotton
authored and
synackd
committed
3022616
added SMD_URL=http://smd:27779 back since metadata-service seems to use it

travisbcotton
authored and
synackd
committed
9309ecf
bump smd container version to v2.20.0

travisbcotton
authored and
synackd
committed
16ef006
removed opaal refernce from openchami-certificate-update

travisbcotton
authored and
synackd
committed
6ec4562
added comment about OIDC provider in openchami.env file

travisbcotton
authored and
synackd
committed
eda3d55
added usage to tokensmith_bootstrap_token, will print when missing client arg

travisbcotton
authored and
synackd
committed
93f4bf3
set metadata-service container image version to v0.1.0

travisbcotton
authored and
synackd
committed
6767e88
update coredhcp.yaml to match CoreSMD rules in v0.6.*
synackd
committed
b663e65
bump coresmd to v0.6.1
synackd
committed
36956de
use xname for bmc hostname pattern
synackd
committed
30ff0b5
bump smd to v2.20.3
synackd
committed
2e239c6
remove unused secrets
synackd
committed
f4e572e
remove extra newline in coredhcp.yaml
synackd
committed
4bbf325
bump coresmd to v0.6.3
synackd
committed
95ef228
bump boot-service to v0.1.6 for client debug messages
synackd
committed
6442d3e
bump metadata-service to v0.1.1
synackd
committed
9a99f8c
add --tokensmith-url back to metadata-service
synackd
committed
76177ff
gen_access_token: use tokensmith user-token
synackd
committed
4f94aef

Commits on Jul 14, 2026

fix: added changes related to acme/haproxy dependency failures
davidallendj
committed
3000390
refactor: removed opaal.yaml config
davidallendj
committed
2b5363f
metadata-service: add CAP_NET_ADMIN and TUN device for WireGuard tunnels
synackd
committed
dbb4f9d
bump boot-service to v0.1.7
synackd
committed
3a469b0
bump metadata-service to v0.1.2
synackd
committed
1e15565

Commits on Jul 16, 2026

fix TOKENSMITH_ISSUER to match SMD_JWKS_URL
synackd
committed
31b32c4
bump boot-service to v0.2.0
synackd
committed
995217f

Commits on Jul 17, 2026

bump coresmd to v0.7.0 and update config
synackd
committed
918e7a5

Commits on Jul 22, 2026

Commits on Aug 4, 2026

bump fabrica services
synackd
committed
24398db
mount metadata-service config at /etc/metadata-service/config.yaml
synackd
committed
090e121
fix tokensmith issuer for SMD
synackd
committed
3fddec2