Sign inSign up

usabilitydynamics/udx-worker

By usabilitydynamics

•Updated 5 days ago

UDX Worker environments are ephemeral and adhere to zero-trust principles and methodology.

Image
Security
Developer tools
Web servers
6

9.6K

usabilitydynamics/udx-worker repository overview

⁠UDX Worker

A runtime foundation for automation workloads with predictable configuration, provider secret references, and supervised processes.

⁠Quick reference

Use latest to evaluate the image. Pin a semantic version tag such as 0.50.0 in CI/CD and production.

⁠Run the image

Verify the image is available:

docker run --rm usabilitydynamics/udx-worker:0.50.0 worker health status

The image runs as the non-root udx user and includes the worker CLI, Supervisor, AWS/Azure/Google Cloud CLIs, Bash, Python, jq, and yq.

⁠Configure a workload

Worker reads runtime files from /home/udx/.config/worker/:

  • worker.yaml defines non-secret environment values and provider secret references.
  • services.yaml defines the processes Supervisor manages.

For example:

# .config/worker/worker.yaml
kind: workerConfig
version: udx.io/worker-v1/config
config:
  env:
    APP_MODE: production
  secrets:
    DB_PASSWORD: aws/database-password/us-west-2
    API_KEY: gcp/my-project/api-key

Run a project with its configuration mounted read-only:

docker run --rm --name my-worker -v "$PWD:/home/udx" -v "$PWD/.config/worker:/home/udx/.config/worker:ro" usabilitydynamics/udx-worker:0.50.0

Configuration⁠ and service⁠ documentation cover the complete file format.

⁠Use provider secrets

After the deployment has authenticated to the provider, Worker resolves these references:

  • aws/<secret-name>/<region>
  • azure/<key-vault-name>/<secret-name>
  • gcp/<project-id>/<secret-name>

The host platform supplies credentials, identity, mounts, and deployment policy. Prefer workload identity, federation, or short-lived credentials; do not bake credentials or plaintext secrets into an image or worker.yaml.

See the secrets guide⁠ and provider authentication reference⁠.

⁠Extend the image

Build a child image when the workload needs application files or additional tools:

FROM usabilitydynamics/udx-worker:0.50.0

COPY .config/worker/services.yaml /home/udx/.config/worker/services.yaml
COPY bin/ /home/udx/bin/

RUN chmod +x /home/udx/bin/*

Keep credentials, mounts, ports, and rollout policy outside the child image. See Develop Child Images⁠.

⁠Learn more

Tag summary

Content type

Image

Digest

sha256:e0d31fc99…

Size

345.3 MB

Last updated

5 days ago

docker pull usabilitydynamics/udx-worker