feat(site): DeployedSecretsMirror — per-node apply + decrypt-verify of deployed secrets

2026-09-28 18:52:44 -04:00
parent a35ee663c8
commit 25c25ccef9
6 changed files with 764 additions and 0 deletions
@@ -131,5 +131,10 @@ public sealed class SiteRuntimeOptionsValidator : OptionsValidatorBase<SiteRunti
                $"ScadaBridge:SiteRuntime:ScriptFileAccess:AllowedRoots:{i} must be an absolute directory path " +
                $"(was '{root}'); a relative root would resolve against the service's working directory.");
        }
+
+        builder.RequireThat(options.DeployedSecretsMirrorInterval > TimeSpan.Zero,
+            $"ScadaBridge:SiteRuntime:DeployedSecretsMirrorInterval must be a positive duration " +
+            $"(was {options.DeployedSecretsMirrorInterval}); it is the DeployedSecretsMirror " +
+            "reconcile PeriodicTimer period.");
    }
 }