joungmin/vpd-permission-poc
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

refs #699: configure HMM demo users and OCI runtime

Browse Source
This commit is contained in:
devmrko
2026-07-22 16:33:11 +09:00
parent 536938895a
commit ee355a9282
9 changed files with 269 additions and 36 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
poc4_active_source_20260714/HMM_BRAND_REFRESH.md
View File

@@ -13,3 +13,15 @@
The PoC4 MCP registry defaults to `hmm_hr_mcp` (`https://hmm-mcp.cloud-handson.com/mcp`).
Its gateway credential is supplied only at runtime as `HMM_MCP_BEARER_TOKEN` in the
deployed `.env`; it is intentionally not committed and is not the selected VPD user's token.
## HMM demo user presets
`config/vpd_token_presets.json` is retained as a legacy deployment filename, but its content is
an HMM HR demo-user list. The Streamlit sidebar uses it to select a manager or team-member
persona and resolves pronouns such as “내” and “우리 팀” in the test question. Each preset uses
`mcp_token_env: HMM_MCP_BEARER_TOKEN`; the bearer value stays in `/opt/hmm-poc4/.env` and is
never rendered, downloaded, or committed. The selector is a test context, not a claim of
row-level authorization enforcement.
The security-operation link in the Streamlit console points to
`https://hmm-backoffice.cloud-handson.com/`, the HMM access-management backoffice.