fix(secrets): honor env-supplied LDAP bind password in live LDAP integration suite; clarify pre-host migration

2026-07-16 11:24:23 -04:00
parent 2e7245dd55
commit e088dfabf7
3 changed files with 33 additions and 1 deletions
@@ -82,6 +82,9 @@ public static class GatewayApplication
            .BuildServiceProvider())
 #pragma warning restore ASP0000
        {
+            // Intentionally unconditional: the pre-host expander below needs the secrets
+            // store schema to exist before the first ${secret:} resolve. Secrets:RunMigrationsOnStartup
+            // governs only the runtime SecretsMigrationHostedService, not this bootstrap path.
            secretsProvider.GetRequiredService<SqliteSecretsStoreMigrator>()
                .MigrateAsync(default).GetAwaiter().GetResult();
            var resolver = secretsProvider.GetRequiredService<ISecretResolver>();