|
| 1 | +# Why every setting, env var, header and command this gateway uses is here. |
| 2 | +# |
| 3 | +# The rule, from the published methodology: a setting may appear only if it is needed to boot the |
| 4 | +# process at all, to point an upstream at the test mock instead of a real provider, to expose an |
| 5 | +# ingress path the matrix exercises, or to bind the port and cores the rig requires. One claim per |
| 6 | +# line: <pattern> <boot|upstream|ingress|bind>. Anything unclaimed is a lint failure, and a claim |
| 7 | +# that matches nothing is a stale claim and also a failure. |
| 8 | +# |
| 9 | +# Migrated from GW_CONFIG_WHY in gateway.sh, which is dead code the lint was still reading. |
| 10 | +listen bind # the port the harness drives |
| 11 | +providers upstream # the provider table |
| 12 | +mock-* upstream # one provider per protocol, each base_url -> the mock |
| 13 | +protocol upstream # which upstream dialect that provider speaks |
| 14 | +base_url upstream # -> the mock |
| 15 | +api_key_env boot # names the env var holding the credential; a provider without one fails load |
| 16 | +error_map boot # REQUIRED per provider in v1.4.1 and still in v1.5.0 - no serde default |
| 17 | +models ingress # the client-facing model table |
| 18 | +gpt-4o-mini* ingress # the model name each matrix column asks for; selects that column's provider |
| 19 | +provider upstream # which provider backs this model |
| 20 | +# max_concurrent REMOVED for v1.5.0. It was a bare `usize` with no serde default in v1.4.1, so that |
| 21 | +# manifest must set it; in v1.5.0 it is `Option<usize>` and the source states |
| 22 | +# "omitted (None) = UNBOUNDED", so the bare minimum to run no longer includes it. |
| 23 | +# Keeping the 8000 from the 1.4.1 config would not have been neutral either: the |
| 24 | +# stream sweep probes past c=8192, so the cap binds inside the measured range. |
| 25 | +BENCH_MOCK_KEY boot # the credential api_key_env names (dummy; the mock ignores it) |
| 26 | +BENCH_BEDROCK_KEY boot # bedrock SigV4 ACCESS:SECRET pair, same |
| 27 | +governance boot |
| 28 | +enabled boot # without it admin_token is inert and the key mint 401s |
| 29 | +db_path boot # the default file cannot be opened on the bench's read-only working dir |
| 30 | +admin_token boot # activates the admin plane the lane mints its virtual key over |
| 31 | +admin_listen bind # the admin plane has its own listener; the mint has to know the port |
0 commit comments