Benjamin Admin
414496c31a
Register-Flow für compliance-scanner-agent (anderes Team, Rust): deren MCP-Client (McpServerConfig) erwartet Streamable HTTP + Bearer — unser MCP war stdio/ohne Auth. - server.py auf FastMCP umgestellt: Tools cra_assess_findings + cra_list_requirements, Dual-Transport (stdio default; Streamable HTTP wenn MCP_PORT gesetzt), Bearer-Gate via CRA_MCP_TOKEN. - ScannerFinding.from_dict tolerant für ihr Finding-Schema (_id/fingerprint, scan_type→category, cvss_score→cvss, file_path→location, severity info→low). - Eigenständiger docker-compose-Dienst bp-compliance-mcp (Port 8099, pure/kein DB, isoliert von der Haupt-API) + Hetzner-amd64-Override. - Tests: test_cra_scanner_adapter, test_mcp_server (Bearer-Gate + Tool-Registry). Pull-Flow (wir holen ihre Findings über ihren MCP) + öffentliches nginx-Routing folgen separat (brauchen ihren Endpoint/Token). Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
69 lines
1.9 KiB
YAML
69 lines
1.9 KiB
YAML
# =========================================================
|
|
# BreakPilot Compliance — Orca Production Override
|
|
# =========================================================
|
|
# Verwendung: docker compose -f docker-compose.yml -f docker-compose.hetzner.yml up -d
|
|
#
|
|
# Aenderungen gegenueber docker-compose.yml:
|
|
# - Platform: arm64 → amd64 (Orca = x86_64)
|
|
# - Network: external → auto-create (kein breakpilot-core auf Orca)
|
|
# - depends_on: core-health-check entfernt (kein Core auf Orca)
|
|
# - API URLs: auf Orca-interne Adressen angepasst
|
|
# =========================================================
|
|
|
|
# Auf Orca laeuft kein breakpilot-core, daher Network selbst erstellen
|
|
networks:
|
|
breakpilot-network:
|
|
external: false
|
|
name: breakpilot-network
|
|
|
|
services:
|
|
|
|
# Core-Health-Check deaktivieren (Core laeuft nicht auf Orca)
|
|
core-health-check:
|
|
entrypoint: ["sh", "-c", "echo 'Core health check skipped on Orca' && exit 0"]
|
|
restart: "no"
|
|
|
|
admin-compliance:
|
|
platform: linux/amd64
|
|
depends_on:
|
|
core-health-check:
|
|
condition: service_completed_successfully
|
|
backend-compliance:
|
|
condition: service_started
|
|
|
|
developer-portal:
|
|
platform: linux/amd64
|
|
|
|
backend-compliance:
|
|
platform: linux/amd64
|
|
depends_on:
|
|
core-health-check:
|
|
condition: service_completed_successfully
|
|
|
|
mcp-compliance:
|
|
platform: linux/amd64
|
|
|
|
ai-compliance-sdk:
|
|
platform: linux/amd64
|
|
depends_on:
|
|
core-health-check:
|
|
condition: service_completed_successfully
|
|
|
|
compliance-tts-service:
|
|
platform: linux/amd64
|
|
|
|
document-crawler:
|
|
platform: linux/amd64
|
|
|
|
dsms-node:
|
|
platform: linux/amd64
|
|
|
|
docs:
|
|
platform: linux/amd64
|
|
|
|
# consent-tester native amd64 auf Orca (x86_64) statt arm64-Emulation —
|
|
# Voraussetzung fuer die echten Brave/Chrome/Edge-Browser der Matrix
|
|
# (amd64-only, siehe consent-tester/Dockerfile, TARGETARCH-Gate).
|
|
consent-tester:
|
|
platform: linux/amd64
|