coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Declare the live release units for this owner.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows.

Assistant: grok
Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397
This commit is contained in:
tegwick 2026-10-23 15:49:39 +02:00
parent f529c71eb0
commit b2ddb4b3eb
10 changed files with 374 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

2
WORK-RECORDS.md
View file

@ -47,7 +47,7 @@
| workplan | FLEX-WP-0035 | finished | — | workplans/FLEX-WP-0035-per-identity-application-readback.md |
| workplan | FLEX-WP-0036 | active | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md |
| workplan | FLEX-WP-0037 | finished | — | workplans/FLEX-WP-0037-ops-warden-agt-custodian-actor.md |
| workplan | FLEX-WP-0038 | ready | — | workplans/FLEX-WP-0038-wave2-resource-right-sizing.md |
| workplan | FLEX-WP-0038 | active | — | workplans/FLEX-WP-0038-wave2-resource-right-sizing.md |
| task | FLEX-WP-ADHOC-2026-10-03-T01 | done | — | workplans/ADHOC-2026-10-03.md |
| task | FLEX-WP-ADHOC-2026-10-03-T02 | wait | — | workplans/ADHOC-2026-10-03.md |
| task | FLEX-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md |

47
registry/release-units/flex-auth-application-readback.yaml Normal file
View file

@ -0,0 +1,47 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-application-readback
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-application-readback workloads as one release
unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-application-readback
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-application-readback
pins:
component:
name: ocm.railiance.dev/flex-auth-application-readback
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

47
registry/release-units/flex-auth-informed-decision-lifecycle.yaml Normal file
View file

@ -0,0 +1,47 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-informed-decision-lifecycle
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-informed-decision-lifecycle workloads as one
release unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-informed-decision-lifecycle
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-informed-decision-lifecycle
pins:
component:
name: ocm.railiance.dev/flex-auth-informed-decision-lifecycle
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

47
registry/release-units/flex-auth-informed-decision-sitting.yaml Normal file
View file

@ -0,0 +1,47 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-informed-decision-sitting
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-informed-decision-sitting workloads as one release
unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-informed-decision-sitting
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-informed-decision-sitting
pins:
component:
name: ocm.railiance.dev/flex-auth-informed-decision-sitting
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:6c6dc263f4a7f6461e109e133c004c080e8e373acfead8611856c5fb3e44168e
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

47
registry/release-units/flex-auth-informed-decision-t03.yaml Normal file
View file

@ -0,0 +1,47 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-informed-decision-t03
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-informed-decision-t03 workloads as one release
unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-informed-decision-t03
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-informed-decision-t03
pins:
component:
name: ocm.railiance.dev/flex-auth-informed-decision-t03
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:6600c7a62c36dfb4fbb42590722613827d07ff49875b1f0f4b5de63d8351658d
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

46
registry/release-units/flex-auth-ops-warden-fetch.yaml Normal file
View file

@ -0,0 +1,46 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-ops-warden-fetch
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-ops-warden-fetch workloads as one release unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-ops-warden-fetch
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-ops-warden-fetch
pins:
component:
name: ocm.railiance.dev/flex-auth-ops-warden-fetch
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:419bc37420d0d0a5304a8587448f1fdbf87117fb041fb43081b0449b4a7bb13b
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

46
registry/release-units/flex-auth-ops-warden.yaml Normal file
View file

@ -0,0 +1,46 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-ops-warden
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-ops-warden workloads as one release unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-ops-warden
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-ops-warden
pins:
component:
name: ocm.railiance.dev/flex-auth-ops-warden
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:f7c04991a54ebc5fd2a55939e2f68efc7400a51f8773fb6703487833c65b3893
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

46
registry/release-units/flex-auth-tenant-engine.yaml Normal file
View file

@ -0,0 +1,46 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-tenant-engine
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-tenant-engine workloads as one release unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-tenant-engine
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-tenant-engine
pins:
component:
name: ocm.railiance.dev/flex-auth-tenant-engine
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

46
registry/release-units/flex-auth-user-engine.yaml Normal file
View file

@ -0,0 +1,46 @@
# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml.
kind: release-unit
unit_id: flex-auth-user-engine
owner: access-engine
contract_version: 1.0.0
data_classification: restricted
criticality: high
composition:
purpose: Covers the live flex-auth-user-engine workloads as one release unit.
member_repos:
- repo: access-engine
role: rollout owner
deployables:
- flex-auth-user-engine
rollout_contract:
default_mode: helm-upgrade-install
smoke_contract:
required:
- workload-ready
rollback_contract:
order:
- owner-rollback
workloads:
- kind: Deployment
namespace: flex-auth
name: flex-auth-user-engine
pins:
component:
name: ocm.railiance.dev/flex-auth-user-engine
version: live
resources:
- name: flex-auth
type: ociImage
version: live
digest:
hashAlgorithm: SHA-256
normalisationAlgorithm: ociArtifactDigest/v1
value: sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b
sources:
- name: access-engine
type: git
version: live
digest:
hashAlgorithm: SHA-1
normalisationAlgorithm: gitCommit/v1
value: f529c71eb063dd8b263524663f0ca7cee15c5ee6

2
workplans/FLEX-WP-0038-wave2-resource-right-sizing.md
View file

@ -4,7 +4,7 @@ type: workplan
title: "Wave-2 resource right-sizing for the flex-auth runtime"
domain: infotech
repo: access-engine
status: ready
status: active
flavor: implementation
owner: access-engine
created: "2026-10-21"