Prepare the AWS candidate with default enrollment policies - #14
Merged
Merged
Conversation
adit-chandra
added a commit
that referenced
this pull request
Sep 21, 2026
The merged analyzer reports schema revision 3, but the 0.3.0 requirements target schema 2 and reject that image during publication. Target revision 3 from starting revisions 0, 1, and 2, retaining replay and configuration rotation at revision 3. Keep exact capability validation, stop/migrate/start, and the AWS-first clean-install acceptance gate. Recovery requires a schema-3-compatible image or forward repair; preserving application data does not permit restarting an older analyzer. Regression coverage verifies publication rejects incompatible schema revisions and that supervised workloads use hosted repository selection without customer repository credentials. Validation on the merged branch: **179 tests passed, 4 Kubernetes integration tests skipped locally**; Ruff, formatting, package builds, and generated-schema consistency passed. GitHub CI is rerunning for the updated head, including both disposable-kind Kubernetes versions. The branch includes current main's manual-chart catalog mode, writable mirror storage, and CRD upgrade procedure. After source review and merge, build the supervisor candidate from the resulting main SHA, then refresh the immutable catalog/inventory in #14. Its existing schema-2 candidate is obsolete and must not be used for the current customer installation. Candidate inputs: - Analyzer source: `965d75670048ffede7b5e99f29accdbfe429c1f3`; its [image publication workflow](https://github.com/Promptless/promptless/actions/runs/35657158543) passed. - Analyzer: `ghcr.io/promptless/pig-trace-analyzer@sha256:9bff062f8702c6efa6d72ced4ddb5aafc18861ee913ec0f18ff638f7cafa55a3`. Anonymous manifest/config downloads and exact SHA-tag binding verified. - Requirements canonical digest: `a78be06deb18a7135751745d363feca6b6f5eb4e0d39fcf302ee48c964a83eb0`. - Analyzer, supervisor, and chart version: `0.3.0`. The supervisor digest awaits the merged-source build; real image capability execution and AWS acceptance must bind the complete candidate.
adit-chandra
changed the title
adit-chandra
changed the title
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Prepare the 0.3.0 AWS installation candidate with automatic default host-enrollment policies, schema 3, and credential-derived installation identity. The selected candidate is
catalog/candidates/0.3.0-be34aaa7-1a54acb3/; older directories remain intact for their immutable references.Artifact bindings:
be34aaa7cecfa0bd5c424c8866589bab92f9558e.1a54acb3abe0dc3914ea065cb679b040d640ed9e; imageghcr.io/promptless/pig-trace-analyzer@sha256:a77da69932735ff83b655be001cc5e1e9dfca36dfeb1f38d71959f6cf13c0e61.ghcr.io/promptless/pig-supervisor@sha256:1c7b7c90818354e4a8edcd3fe7fbeeb28cdaedf11512c5c6968012b0433f872e.a78be06deb18a7135751745d363feca6b6f5eb4e0d39fcf302ee48c964a83eb0.06810cad38ad42ee3b8e59e152b2b7cee8d916f48a637ef1da547a3342472802.Both immutable images downloaded and executed anonymously in EKS with
imagePullPolicy: Alwaysand no image-pull Secrets. The supervisor reports 0.3.0, and the analyzer's executed capabilities match the reviewed requirements. Anonymous catalog → manifest → source CRD checksum verification and typed contract validation passed. CI is running on this update.The live acceptance installation still uses the earlier candidate and is blocked on the changed hosted policy contract. This replacement needs a clean installation: an active 0.3.0 transition pins its original manifest digest. Canonical acceptance remains incomplete, and this PR does not publish a stable release or claim a tested recovery path.
Merge with a merge commit. Preserve manifest commit
fb3ea49fe6483aca28f556fc6ad2514607551be2, catalog commit8f8752a01e04974c334b7b135bccc45fe0668c6f, and the historical candidate commits. Do not squash or rebase them away while installations or reports reference their URLs.