[Secrets] CLI appsettings SqlitePath is relative (fails validation); plain IConfigurationRoot reload gap; OtOpcUa starter now redundant #49

Closed
opened 2026-11-09 15:01:05 -05:00 by dohertj2 · 1 comment
Owner

Follow-ups from the Secrets 0.6.6 fixes (#30–#35):

  • The CLI's own src/ZB.MOM.WW.Secrets.Cli/appsettings.json sets "SqlitePath": "secrets.db", which the store-path validator rejects as relative — the headless CLI fails at startup unless an env var overrides it. Ship a valid default (absolute, outside the content root, e.g. under LocalApplicationData) or no default with a clear message. (Secrets-009 covers only the README sample.)
  • A plain IConfigurationRoot that reloads gets only the weaker re-apply-after-reload behaviour from #32 (callback order not guaranteed) — documented, not fully fixed.
  • Once OtOpcUa adopts 0.6.6 it can drop its own SecretReplicationStarter (#33).
Follow-ups from the Secrets 0.6.6 fixes (#30–#35): - The CLI's own `src/ZB.MOM.WW.Secrets.Cli/appsettings.json` sets `"SqlitePath": "secrets.db"`, which the store-path validator rejects as relative — the headless CLI fails at startup unless an env var overrides it. Ship a valid default (absolute, outside the content root, e.g. under LocalApplicationData) or no default with a clear message. (Secrets-009 covers only the README sample.) - A plain `IConfigurationRoot` that reloads gets only the weaker re-apply-after-reload behaviour from #32 (callback order not guaranteed) — documented, not fully fixed. - Once OtOpcUa adopts 0.6.6 it can drop its own `SecretReplicationStarter` (#33).
dohertj2 added the type:followuppriority:p3 labels 2026-11-09 15:01:05 -05:00
Author
Owner

Done on main 8235ee6 / 2619166: the CLI's relative SqlitePath removed — the per-user default applies; the plain-IConfigurationRoot reload gap is documented (fixing it needs .NET configuration internals; no family app is exposed); OtOpcUa's SecretReplicationStarter noted as redundant in clustered-secrets.md.

Done on main 8235ee6 / 2619166: the CLI's relative SqlitePath removed — the per-user default applies; the plain-IConfigurationRoot reload gap is documented (fixing it needs .NET configuration internals; no family app is exposed); OtOpcUa's SecretReplicationStarter noted as redundant in clustered-secrets.md.
Sign in to join this conversation.