Eric Wagoner
88a71a026f
- Point ANTHROPIC_MODEL at Opus 5; add Opus/Sonnet/Haiku family pins - Switch to Mantle (CLAUDE_CODE_USE_MANTLE) on us-east-1 - Raise CLAUDE_CODE_MAX_OUTPUT_TOKENS to 128k; note 1h prompt-cache opt-in - Move Jellyfish OTEL endpoint + bearer token into zshrc-natera.private (keeps the live credential out of git); document it in the .example
58 lines
2.0 KiB
Plaintext
58 lines
2.0 KiB
Plaintext
# Natera-sensitive configuration (do not commit the real file)
|
|
# Copy this file to zshrc-natera.private and fill in the placeholders.
|
|
# zshrc-natera.private is gitignored.
|
|
|
|
# AWS profile (contains account ID)
|
|
export AWS_PROFILE="YOUR_AWS_PROFILE_NAME"
|
|
|
|
# OpenTelemetry endpoint (internal)
|
|
export OTEL_EXPORTER_OTLP_ENDPOINT="http://YOUR_OTEL_ENDPOINT:4318"
|
|
|
|
# Jellyfish AI reporting (contains a live bearer token — keep out of git).
|
|
# Sourced after zshrc-natera, so these override the protocol/endpoint set there.
|
|
export OTEL_EXPORTER_OTLP_PROTOCOL=http/json
|
|
export OTEL_EXPORTER_OTLP_METRICS_ENDPOINT="https://app.jellyfish.co/ingest-webhooks/YOUR_JELLYFISH_PATH"
|
|
export OTEL_EXPORTER_OTLP_HEADERS="Authorization=Bearer YOUR_JELLYFISH_TOKEN"
|
|
|
|
# Netskope TLS cert bundle path (Natera corp)
|
|
export AWS_CA_BUNDLE=~/.aws/nskp_config/netskope-cert-bundle.pem
|
|
export REQUESTS_CA_BUNDLE=~/.aws/nskp_config/netskope-cert-bundle.pem
|
|
export SSL_CERT_FILE=~/.aws/nskp_config/netskope-cert-bundle.pem
|
|
export NODE_EXTRA_CA_CERTS=~/.aws/nskp_config/netskope-cert-bundle.pem
|
|
|
|
# Refresh: close tunnel if open, then SSO login + jumpbox + boring open (replace placeholders)
|
|
refresh() {
|
|
boring close YOUR_BORING_TARGET 2>/dev/null
|
|
aws sso login && ssh -i ~/work/pems/YOUR_JUMPBOX_PEM ec2-user@JUMPBOX_IP exit && boring open YOUR_BORING_TARGET
|
|
}
|
|
|
|
# Database password retrieval function (replace ARNs and profile names with your actual values)
|
|
function dbpass {
|
|
local env="${1:-dev}"
|
|
local secret_id profile
|
|
|
|
case "$env" in
|
|
dev)
|
|
secret_id='arn:aws:secretsmanager:REGION:ACCOUNT_ID:secret:YOUR_DEV_SECRET_ARN'
|
|
profile='YOUR_DEV_AWS_PROFILE'
|
|
;;
|
|
uat)
|
|
secret_id='arn:aws:secretsmanager:REGION:ACCOUNT_ID:secret:YOUR_UAT_SECRET_ARN'
|
|
profile='YOUR_UAT_AWS_PROFILE'
|
|
;;
|
|
*)
|
|
echo "Usage: dbpass [dev|uat]"
|
|
return 1
|
|
;;
|
|
esac
|
|
|
|
aws secretsmanager get-secret-value \
|
|
--secret-id "$secret_id" \
|
|
--region us-west-2 \
|
|
--profile "$profile" \
|
|
--query 'SecretString' \
|
|
--output text \
|
|
| jq -r '.password' \
|
|
| pbcopy
|
|
}
|