Bind a worker's name and labels into its token; list and revoke tokens by jti

2026-10-07 08:42:14 +02:00
parent 9ef7f90dd8
commit 953a983919
16 changed files with 470 additions and 38 deletions
@@ -16,7 +16,8 @@ fluksio-worker \

 `--python` is the interpreter node code runs on, which is how this machine keeps
 its own wheels without the engine ever installing them. Mint a token from the
-engine with `POST /api/v1/workers/tokens`.
+engine with `POST /api/v1/workers/tokens`; it carries this worker's name and
+labels, and `--labels` may repeat those but not change them.

 A plain `ws://` address is refused unless the engine is on this machine, since
 the token and node secrets would cross the network in clear; `--insecure`