disinto-admin/disinto
1
0
Fork 0
Code Issues 17 Pull requests 1 Projects Releases Packages Wiki Activity Actions

fix: [nomad-step-3] S3-fix-6 — woodpecker-agent can't reach server gRPC at localhost:9000 (port bound to LXC IP) (#964) #966

Merged
dev-qwen2 merged 2 commits from fix/issue-964 into main 2026-04-17 15:01:59 +00:00
Conversation 4 Commits 2 Files changed 1 +9 -3
1 changed files with 9 additions and 3 deletions
Download patch file Download diff file Expand all files Collapse all files
Showing only changes of commit 3d62b52e36 - Show all commits

12
nomad/jobs/woodpecker-agent.hcl
View file

@ -8,8 +8,9 @@
#
# Host networking:
# Uses network_mode = "host" to match the compose setup. The Woodpecker
# server gRPC endpoint is addressed as "localhost:9000" since both
# server and agent run on the same host.
# server gRPC endpoint is addressed via Nomad service discovery using
# the host's IP address (10.10.10.x:9000), since the server's port
# binding in Nomad binds to the allocation's IP, not localhost.
#
# Vault integration:
# - vault { role = "service-woodpecker-agent" } at the group scope — the
@ -82,8 +83,13 @@ job "woodpecker-agent" {
# Non-secret env — server address, gRPC security, concurrency limit,
# and health check endpoint. Nothing sensitive here.
#
# WOODPECKER_SERVER uses Nomad's attribute template to get the host's
# IP address (10.10.10.x). The server's gRPC port 9000 is bound via
# Nomad's port stanza to the allocation's IP (not localhost), so the
# agent must use the LXC's eth0 IP, not 127.0.0.1.
env {
WOODPECKER_SERVER = "localhost:9000"
WOODPECKER_SERVER = "{{ env \"attr.unique.network.ip-address\" }}:9000"
WOODPECKER_GRPC_SECURE = "false"
WOODPECKER_MAX_WORKFLOWS = "1"
WOODPECKER_HEALTHCHECK_ADDR = ":3333"