@@ -112,7 +112,7 @@ render_caddyfile() {
|
||||
gsub(/{{TLS_OPTIONS}}/, tls_options)
|
||||
print
|
||||
}
|
||||
' "$ROOT/deploy/caddy/Caddyfile.template" > "$output"
|
||||
' "$ROOT/deploy/vpd-backoffice/caddy/Caddyfile.template" > "$output"
|
||||
}
|
||||
|
||||
build_ssh_args() {
|
||||
@@ -264,7 +264,7 @@ INSPECT
|
||||
|
||||
log "Caddy candidate 업로드"
|
||||
ssh "${SSH_ARGS[@]}" "$HOST" "mkdir -p \"$remote_stage\""
|
||||
cp "$ROOT/deploy/caddy/install-caddy-config.sh" "$tmp_dir/install-caddy-config.sh"
|
||||
cp "$ROOT/deploy/vpd-backoffice/caddy/install-caddy-config.sh" "$tmp_dir/install-caddy-config.sh"
|
||||
tar -C "$tmp_dir" -czf - Caddyfile install-caddy-config.sh \
|
||||
| ssh "${SSH_ARGS[@]}" "$HOST" "tar -C \"$remote_stage\" -xzf - && chmod 700 \"$remote_stage/install-caddy-config.sh\""
|
||||
|
||||
|
||||
@@ -32,7 +32,7 @@ Production transport defaults are always applied on the VM:
|
||||
HTTPS required, Secure/HttpOnly/SameSite session cookie.
|
||||
|
||||
The script uploads:
|
||||
- target/*.jar as app.jar
|
||||
- vpd-backoffice/target/*.jar as app.jar
|
||||
- .env rewritten for the VM wallet path
|
||||
- TNS_ADMIN wallet directory
|
||||
- start.sh / stop.sh / status.sh
|
||||
@@ -127,11 +127,11 @@ ssh "${SSH_ARGS[@]}" "$HOST" 'printf "connected %s %s\n" "$(hostname)" "$(whoami
|
||||
|
||||
if [[ "$SKIP_BUILD" != "Y" ]]; then
|
||||
log "jar 빌드"
|
||||
mvn -DskipTests package
|
||||
mvn -f "$ROOT/vpd-backoffice/pom.xml" -DskipTests package
|
||||
fi
|
||||
|
||||
JAR_PATH="$(find "$ROOT/target" -maxdepth 1 -type f -name '*.jar' ! -name '*sources.jar' ! -name '*javadoc.jar' | sort | tail -n 1)"
|
||||
[[ -n "$JAR_PATH" && -f "$JAR_PATH" ]] || die "target jar를 찾을 수 없습니다. mvn package를 먼저 실행하세요."
|
||||
JAR_PATH="$(find "$ROOT/vpd-backoffice/target" -maxdepth 1 -type f -name '*.jar' ! -name '*sources.jar' ! -name '*javadoc.jar' | sort | tail -n 1)"
|
||||
[[ -n "$JAR_PATH" && -f "$JAR_PATH" ]] || die "vpd-backoffice target jar를 찾을 수 없습니다. 배포 빌드를 먼저 실행하세요."
|
||||
|
||||
TMP_DIR="$(mktemp -d "${TMPDIR:-/tmp}/vpd-backoffice-deploy.XXXXXX")"
|
||||
cleanup() {
|
||||
|
||||
@@ -13,10 +13,10 @@ if [[ -f /home/opc/apps/vpd-backoffice/.env ]]; then
|
||||
fi
|
||||
|
||||
cd "$ROOT"
|
||||
mvn -DskipTests package
|
||||
mvn -f "$ROOT/vpd-backoffice/pom.xml" -DskipTests package
|
||||
mvn install:install-file \
|
||||
-Dfile="$ROOT/target/vpd-permission-backoffice-0.1.0-SNAPSHOT.jar.original" \
|
||||
-DpomFile="$ROOT/pom.xml"
|
||||
-Dfile="$ROOT/vpd-backoffice/target/vpd-permission-backoffice-0.1.0-SNAPSHOT.jar.original" \
|
||||
-DpomFile="$ROOT/vpd-backoffice/pom.xml"
|
||||
|
||||
cd "$ROOT/dds-backoffice"
|
||||
mvn -DskipTests package
|
||||
|
||||
@@ -15,8 +15,8 @@ connect="${DDS_ADMIN_USERNAME}/${DDS_ADMIN_PASSWORD}@${DDS_ADMIN_DB_URL}"
|
||||
sqlplus -s "$connect" <<SQL
|
||||
WHENEVER SQLERROR EXIT SQL.SQLCODE
|
||||
DEFINE DDSUSER_TOKEN_PASSWORD = '${DDS_TOKEN_PASSWORD}'
|
||||
@${root}/sql/adb/34_dds_token_data_grant_common_auth.sql
|
||||
@${root}/sql/adb/42_dds_fga_execution_evidence.sql
|
||||
@${root}/database/adb/34_dds_token_data_grant_common_auth.sql
|
||||
@${root}/database/adb/42_dds_fga_execution_evidence.sql
|
||||
|
||||
PROMPT === DDS token search verification ===
|
||||
SELECT username FROM dba_users WHERE username = 'dds_demo_token';
|
||||
|
||||
@@ -27,8 +27,8 @@ run_admin() {
|
||||
"$SQL_CLIENT" -S -L "${ADB_USER}/${ADB_PASSWORD}@${ADB_TNS}" @"$1"
|
||||
}
|
||||
|
||||
run_admin "$ROOT/sql/adb/44_dds_mcp_local_end_user_setup.sql"
|
||||
run_admin "$ROOT/sql/adb/45_dds_mcp_local_end_user_test.sql"
|
||||
run_admin "$ROOT/database/adb/44_dds_mcp_local_end_user_setup.sql"
|
||||
run_admin "$ROOT/database/adb/45_dds_mcp_local_end_user_test.sql"
|
||||
|
||||
if [[ -z "${DDS_MCP_TEST_BEARER:-}" ]]; then
|
||||
echo '[OK] DDS END USER catalog scenario passed. Set DDS_MCP_TEST_BEARER to run the live MCP tool call.'
|
||||
|
||||
@@ -34,20 +34,20 @@ run_as() {
|
||||
sqlplus -S -L "${user}/${password}@${ADB_TNS}" @"$sql_file"
|
||||
}
|
||||
|
||||
run_admin "$ROOT/sql/adb/16_agent_ords_security_local_cleanup.sql"
|
||||
run_admin "$ROOT/sql/adb/17_agent_ords_security_local_vpd_setup.sql"
|
||||
run_admin "$ROOT/sql/adb/19_agent_ords_security_local_dds_setup.sql"
|
||||
run_admin "$ROOT/sql/adb/21_agent_ords_security_ords_enable_schema.sql"
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/sql/adb/22_agent_ords_security_ords_handler_setup.sql"
|
||||
run_admin "$ROOT/sql/adb/24_agent_ords_security_inventory.sql"
|
||||
run_admin "$ROOT/database/adb/16_agent_ords_security_local_cleanup.sql"
|
||||
run_admin "$ROOT/database/adb/17_agent_ords_security_local_vpd_setup.sql"
|
||||
run_admin "$ROOT/database/adb/19_agent_ords_security_local_dds_setup.sql"
|
||||
run_admin "$ROOT/database/adb/21_agent_ords_security_ords_enable_schema.sql"
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/database/adb/22_agent_ords_security_ords_handler_setup.sql"
|
||||
run_admin "$ROOT/database/adb/24_agent_ords_security_inventory.sql"
|
||||
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/sql/adb/18_agent_ords_security_local_vpd_test.sql"
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/sql/adb/23_agent_ords_security_ords_handler_test.sql"
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/database/adb/18_agent_ords_security_local_vpd_test.sql"
|
||||
run_as "cb_ords" "CbOrdS#2026Local1" "$ROOT/database/adb/23_agent_ords_security_ords_handler_test.sql"
|
||||
|
||||
run_as '"cb_dds_hr"' "CbDds#Hr2026Local1" "$ROOT/sql/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_fin"' "CbDds#Fin2026Local1" "$ROOT/sql/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_all"' "CbDds#All2026Local1" "$ROOT/sql/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_none"' "CbDds#None2026Local1" "$ROOT/sql/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_hr"' "CbDds#Hr2026Local1" "$ROOT/database/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_fin"' "CbDds#Fin2026Local1" "$ROOT/database/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_all"' "CbDds#All2026Local1" "$ROOT/database/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
run_as '"cb_dds_none"' "CbDds#None2026Local1" "$ROOT/database/adb/20_agent_ords_security_local_dds_test.sql"
|
||||
|
||||
echo
|
||||
echo "[OK] Agent ORDS security ADB local-only VPD + DDS executable example complete"
|
||||
|
||||
@@ -13,5 +13,5 @@ fi
|
||||
: "${ADB_PASSWORD:?ADB_PASSWORD is required}"
|
||||
: "${ADB_TNS:?ADB_TNS is required}"
|
||||
|
||||
sqlplus -S -L "${ADB_USER}/${ADB_PASSWORD}@${ADB_TNS}" "@${ROOT}/sql/adb/40_dds_protection_evidence.sql"
|
||||
sqlplus -S -L "${ADB_USER}/${ADB_PASSWORD}@${ADB_TNS}" "@${ROOT}/database/adb/40_dds_protection_evidence.sql"
|
||||
echo "DDS protection evidence schema and fixture manifest applied"
|
||||
|
||||
@@ -19,7 +19,7 @@ sqlplus -S -L "${ADB_USER}/${ADB_PASSWORD}@${ADB_TNS}" <<SQL
|
||||
WHENEVER SQLERROR EXIT SQL.SQLCODE
|
||||
SET DEFINE ON
|
||||
DEFINE DDSUSER_TOKEN_PASSWORD = "${DDSUSER_TOKEN_PASSWORD}"
|
||||
@${ROOT}/sql/adb/34_dds_token_data_grant_common_auth.sql
|
||||
@${ROOT}/database/adb/34_dds_token_data_grant_common_auth.sql
|
||||
SQL
|
||||
|
||||
echo "DDS token DATA GRANT setup complete (technical user: dds_demo_token)"
|
||||
|
||||
Reference in New Issue
Block a user