Skip to content

fix(manager): do not seed the demo catalog into a live store #62

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Bugs5382 merged 1 commit into from
Jul 29, 2026
Merged

fix(manager): do not seed the demo catalog into a live store #62

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
27 changes: 16 additions & 11 deletions cmd/manager/main.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -67,31 +67,37 @@ func main() {
CACert: n.CACertPath,
}
}
profiles, adapters, audit, enrollments := seed.Catalog()

// When an operator-CA node is configured, seed the three operator-<level>
// issuing profiles into the catalog so an admin can push them to that node
// (via ApplyProfileToNode) and S9 issuance can route to them.
// Operator-CA issuing profiles (operator-viewer/operator/admin) are
// functional config, not demo data: seed them when an operator CA node is
// configured so S9 issuance can route to them.
var operatorProfiles []store.Profile
if cfg.OperatorCANode != "" {
opProfiles, err := fleet.OperatorProfiles()
var err error
operatorProfiles, err = fleet.OperatorProfiles()
if err != nil {
log.Fatalf("manager: build operator profiles: %v", err)
}
profiles = append(profiles, opProfiles...)
}

var st store.Store
if cfg.DatabaseURL == "" {
// Dev-only in-memory store: seed the demo catalog so the offline mock UI
// renders against fixtures. The demo catalog never touches a real store.
profiles, adapters, audit, enrollments := seed.Catalog()
profiles = append(profiles, operatorProfiles...)
st = memory.NewWithCatalog(nodes, profiles, adapters, audit, enrollments)
log.Printf("manager: no database_url configured, using in-memory store")
log.Printf("manager: no database_url configured, using in-memory store (demo catalog seeded)")
} else {
ctx := context.Background()
pg, err := postgres.New(ctx, cfg.DatabaseURL)
if err != nil {
log.Fatalf("manager: connect postgres: %v", err)
}
defer pg.Close()
if err := pg.SeedIfEmpty(ctx, nodes, profiles, adapters, audit, enrollments); err != nil {
// A live store starts clean: no demo nodes, profiles, adapters, audit,
// or enrollments. Only configured nodes and the functional operator-CA
// profiles are seeded.
if err := pg.SeedIfEmpty(ctx, nodes, operatorProfiles, nil, nil, nil); err != nil {
log.Fatalf("manager: seed postgres: %v", err)
}
st = pg
Expand Down Expand Up @@ -189,8 +195,7 @@ func main() {
// store.Store interface; see #40.
rootHandler := withRecover(withCORS(cfg.CORSOrigins, authMW(mux)))

log.Printf("manager: %d node(s) configured, catalog seeded (%d profiles, %d adapters, %d audit events, %d enrollments)",
len(nodes), len(profiles), len(adapters), len(audit), len(enrollments))
log.Printf("manager: %d node(s) configured", len(nodes))

server := &http.Server{Addr: cfg.Listen}

Expand Down
Loading