Deployment is external to the worker container. Use the host-native tool for the target environment: docker run, Docker Compose, kubectl apply, or the CI/CD platform's deployment step.
Use this when you need to:
- Run the worker locally with Docker.
- Deploy in CI/CD (GitHub Actions, etc.).
- Mount runtime configs into a container runtime or orchestrator.
- Host tooling chooses the image, mounts runtime configs, and defines command/args.
worker.yamlandservices.yamlare runtime configs inside the container.- Provider auth should be established by the host/platform or by the command running inside the container.
- Prefer native identity/env/token injection over custom credential volumes where the platform supports it.
- Docker:
docker run --rm \
-v "$(pwd)/.config/worker:/home/udx/.config/worker:ro" \
-e API_KEY="gcp/my-project/api-key" \
usabilitydynamics/udx-worker:latest- Docker with a child image:
docker run --rm \
-v "$(pwd)/.config/worker:/home/udx/.config/worker:ro" \
my-org/udx-worker-custom:latestFor orchestrators such as Kubernetes, mount worker.yaml and services.yaml through the platform's normal config/secret primitives and keep deployment manifests outside the worker image.
- Editing runtime configs when you meant to change deployment behavior.
- Baking secrets into images instead of using env vars, mounted files, or Kubernetes Secrets.
- Putting runtime process definitions in host deployment config instead of
services.yaml. - Expecting worker deployment logic to create cloud sessions; deployment and auth are external concerns.
docs/config.mddocs/services.mddocs/secrets.mddocs/runtime-output.md