내부 builder 인증과 실행 허용 목록 및 자원 경계를 적용한다

2026-10-09 04:31:44 +09:00
parent 6d05c01a76
commit f78ab77850
13 changed files with 979 additions and 205 deletions
@@ -106,3 +106,6 @@ IMAGE_SYNC_CORE2026_SECRET_FILE=./secrets/image_sync_core2026_secret
 # Initial stopped profile inventory. Each deployment can choose its own branch in the Admin GUI.
 BOOTSTRAP_PROFILES=gateway,che,kwe,pwe,twe,nya,pya,hwe
 TZ=Asia/Seoul
+
+# Dedicated random token file shared only by runtime and builder (mode 0600).
+RELEASE_BUILDER_TOKEN_FILE=./secrets/release_builder_token