Skip to content

fix(quickstart): mount every cred source and pass every API key#76

Merged
nwadams merged 1 commit into
mainfrom
na--quickstart-creds
Jun 8, 2026
Merged

fix(quickstart): mount every cred source and pass every API key#76
nwadams merged 1 commit into
mainfrom
na--quickstart-creds

Conversation

@nwadams

@nwadams nwadams commented Jun 4, 2026

Copy link
Copy Markdown
Collaborator

Cherry-pick of d1d473c — a standalone quickstart fix, independent of the deepagents work.

Problem

Quickstart only mounted ~/.aws and wrote AWS_REGION/AWS_PROFILE when LLM_PROVIDER=bedrock was detected at start. Switching to Bedrock later via the Settings UI silently failed — the container had no AWS creds visible.

Fix

Regardless of which provider triggered the wizard, quickstart.sh now always:

  • Mounts ~/.aws:/root/.aws and ~/.config/gcloud:/root/.config/gcloud read-only when those dirs exist on the host (boto3 / gcloud find their configs at the standard container paths).
  • Writes ANTHROPIC_API_KEY / OPENAI_API_KEY / GOOGLE_API_KEY to .env.quickstart whenever the host shell has them set.
  • Writes AWS_REGION / AWS_PROFILE whenever ~/.aws/ exists.

LLM_PROVIDER is still seeded from whichever credential the wizard latched onto at start, but the operator can now toggle providers freely in Settings without re-running quickstart.

Touches only quickstart.sh (+33/-18); bash -n syntax-checked.

🤖 Generated with Claude Code

Previously quickstart only mounted ~/.aws and wrote AWS_REGION/
AWS_PROFILE when LLM_PROVIDER=bedrock was picked up at start. That
meant switching to Bedrock via the Settings UI later silently failed
— the container had no AWS creds visible.

Always:
  - Mount ~/.aws:/root/.aws and ~/.config/gcloud:/root/.config/gcloud
    read-only when those dirs exist on the host (boto3 / gcloud find
    their configs at the standard paths inside the container).
  - Write ANTHROPIC_API_KEY / OPENAI_API_KEY / GOOGLE_API_KEY to
    .env.quickstart whenever the host shell has them set, regardless
    of which provider triggered the wizard.
  - Write AWS_REGION / AWS_PROFILE whenever ~/.aws/ exists.

LLM_PROVIDER itself is still seeded from whichever credential the
wizard latched onto at start, but the operator can toggle it freely
in Settings without re-running quickstart.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
(cherry picked from commit d1d473c)
@nwadams nwadams requested review from askumar27 and shirshanka June 4, 2026 23:05
@nwadams nwadams merged commit 2d5ae2b into main Jun 8, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants