starfield-datastore 0.1.3

Pull-through artifact cache with fail-closed validation, an S3 mirror served by presigned redirect, and a credential model that keeps upstream secrets in one place
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

# /etc/starfield-datastore/env — mode 0600, owner starfield.
# Optional secret environment for both systemd units. Runtime settings and
# credential references live in config.toml; this file is unnecessary when
# using instance roles and netrc instead of environment-backed secrets.

# S3 writer credentials: prefer an instance profile and leave these unset.
# AWS_ACCESS_KEY_ID=
# AWS_SECRET_ACCESS_KEY=
# AWS_SESSION_TOKEN=

# Upstream archive credentials, one of:
#   - bearer tokens here, one per host (host uppercased, non-alphanumerics -> _)
# STARFIELD_TOKEN_URS_EARTHDATA_NASA_GOV=
# STARFIELD_TOKEN_ARCHIVE_STSCI_EDU=
# MAST_TOKEN=
#   - or /var/lib/starfield-datastore/.netrc (mode 0600), consulted automatically
#   - or 1Password, when the binary is built with --features onepassword
# STARFIELD_OP_ITEM=op://<vault>/<item>