60 lines
1.3 KiB
YAML
60 lines
1.3 KiB
YAML
version: 1
|
|
policy_id: gitops-isolated-worktree-governance-20260714T232948UTC8
|
|
|
|
runtime_identity:
|
|
user: aiman
|
|
group: gitops
|
|
umask: "0002"
|
|
prohibit_root_workspace_writes: true
|
|
|
|
repository:
|
|
source_worktree: /data/aios-gitops/workspace
|
|
bare_repo: /data/aios-gitops/repo.git
|
|
worktree_root: /data/aios-gitops/worktrees
|
|
remote: origin
|
|
|
|
worktrees:
|
|
controller: /data/aios-gitops/worktrees/controller
|
|
task_pattern: /data/aios-gitops/worktrees/{agent}/{task_id}
|
|
allowed_agents:
|
|
- openclaw
|
|
- chatgpt
|
|
- controller
|
|
require_clean_start: true
|
|
remove_after_successful_push: true
|
|
retain_on_failure: true
|
|
|
|
permissions:
|
|
owner: aiman
|
|
group: gitops
|
|
directory_mode: "2775"
|
|
file_mode: "0664"
|
|
default_acl:
|
|
user:aiman: rwx
|
|
group:gitops: rwx
|
|
apply_to:
|
|
- /data/aios-gitops
|
|
- /data/aios-gitops/worktrees
|
|
|
|
preflight:
|
|
required_user: aiman
|
|
required_group: gitops
|
|
required_umask: "0002"
|
|
require_writable_git_dir: true
|
|
require_writable_task_dir: true
|
|
require_writable_result_dir: true
|
|
reject_shared_source_worktree: true
|
|
reject_existing_git_lock: true
|
|
|
|
notifications:
|
|
owner_on_received: required
|
|
owner_on_terminal: required
|
|
preferred_channel: weixin
|
|
redact_secrets: true
|
|
|
|
rollback:
|
|
preserve_source_worktree: true
|
|
remove_created_worktrees: true
|
|
restore_service_dropins: true
|
|
restore_service_state: true
|