From b2ddb4b3ebd54e2cccf0ee2fea858a4d9a7544fe Mon Sep 17 00:00:00 2001 From: tegwick Date: Fri, 23 Oct 2026 15:49:39 +0200 Subject: [PATCH] Declare the live release units for this owner. The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows. Assistant: grok Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397 --- WORK-RECORDS.md | 2 +- .../flex-auth-application-readback.yaml | 47 +++++++++++++++++++ ...flex-auth-informed-decision-lifecycle.yaml | 47 +++++++++++++++++++ .../flex-auth-informed-decision-sitting.yaml | 47 +++++++++++++++++++ .../flex-auth-informed-decision-t03.yaml | 47 +++++++++++++++++++ .../flex-auth-ops-warden-fetch.yaml | 46 ++++++++++++++++++ .../release-units/flex-auth-ops-warden.yaml | 46 ++++++++++++++++++ .../flex-auth-tenant-engine.yaml | 46 ++++++++++++++++++ .../release-units/flex-auth-user-engine.yaml | 46 ++++++++++++++++++ ...LEX-WP-0038-wave2-resource-right-sizing.md | 2 +- 10 files changed, 374 insertions(+), 2 deletions(-) create mode 100644 registry/release-units/flex-auth-application-readback.yaml create mode 100644 registry/release-units/flex-auth-informed-decision-lifecycle.yaml create mode 100644 registry/release-units/flex-auth-informed-decision-sitting.yaml create mode 100644 registry/release-units/flex-auth-informed-decision-t03.yaml create mode 100644 registry/release-units/flex-auth-ops-warden-fetch.yaml create mode 100644 registry/release-units/flex-auth-ops-warden.yaml create mode 100644 registry/release-units/flex-auth-tenant-engine.yaml create mode 100644 registry/release-units/flex-auth-user-engine.yaml diff --git a/WORK-RECORDS.md b/WORK-RECORDS.md index 271f2fe..13d6487 100644 --- a/WORK-RECORDS.md +++ b/WORK-RECORDS.md @@ -47,7 +47,7 @@ | workplan | FLEX-WP-0035 | finished | — | workplans/FLEX-WP-0035-per-identity-application-readback.md | | workplan | FLEX-WP-0036 | active | — | workplans/FLEX-WP-0036-runtime-rename-access-engine.md | | workplan | FLEX-WP-0037 | finished | — | workplans/FLEX-WP-0037-ops-warden-agt-custodian-actor.md | -| workplan | FLEX-WP-0038 | ready | — | workplans/FLEX-WP-0038-wave2-resource-right-sizing.md | +| workplan | FLEX-WP-0038 | active | — | workplans/FLEX-WP-0038-wave2-resource-right-sizing.md | | task | FLEX-WP-ADHOC-2026-10-03-T01 | done | — | workplans/ADHOC-2026-10-03.md | | task | FLEX-WP-ADHOC-2026-10-03-T02 | wait | — | workplans/ADHOC-2026-10-03.md | | task | FLEX-WP-ADHOC-2026-10-11-T01 | done | — | workplans/ADHOC-2026-10-11.md | diff --git a/registry/release-units/flex-auth-application-readback.yaml b/registry/release-units/flex-auth-application-readback.yaml new file mode 100644 index 0000000..51e6a6b --- /dev/null +++ b/registry/release-units/flex-auth-application-readback.yaml @@ -0,0 +1,47 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-application-readback +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-application-readback workloads as one release + unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-application-readback +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-application-readback +pins: + component: + name: ocm.railiance.dev/flex-auth-application-readback + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229 + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-informed-decision-lifecycle.yaml b/registry/release-units/flex-auth-informed-decision-lifecycle.yaml new file mode 100644 index 0000000..d7eb677 --- /dev/null +++ b/registry/release-units/flex-auth-informed-decision-lifecycle.yaml @@ -0,0 +1,47 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-informed-decision-lifecycle +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-informed-decision-lifecycle workloads as one + release unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-informed-decision-lifecycle +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-informed-decision-lifecycle +pins: + component: + name: ocm.railiance.dev/flex-auth-informed-decision-lifecycle + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:e8c57c18a4a9d5583be099146984f7e9cd881446218b65aeefd7619b18aa9229 + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-informed-decision-sitting.yaml b/registry/release-units/flex-auth-informed-decision-sitting.yaml new file mode 100644 index 0000000..c6fd14c --- /dev/null +++ b/registry/release-units/flex-auth-informed-decision-sitting.yaml @@ -0,0 +1,47 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-informed-decision-sitting +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-informed-decision-sitting workloads as one release + unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-informed-decision-sitting +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-informed-decision-sitting +pins: + component: + name: ocm.railiance.dev/flex-auth-informed-decision-sitting + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:6c6dc263f4a7f6461e109e133c004c080e8e373acfead8611856c5fb3e44168e + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-informed-decision-t03.yaml b/registry/release-units/flex-auth-informed-decision-t03.yaml new file mode 100644 index 0000000..e52d853 --- /dev/null +++ b/registry/release-units/flex-auth-informed-decision-t03.yaml @@ -0,0 +1,47 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-informed-decision-t03 +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-informed-decision-t03 workloads as one release + unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-informed-decision-t03 +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-informed-decision-t03 +pins: + component: + name: ocm.railiance.dev/flex-auth-informed-decision-t03 + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:6600c7a62c36dfb4fbb42590722613827d07ff49875b1f0f4b5de63d8351658d + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-ops-warden-fetch.yaml b/registry/release-units/flex-auth-ops-warden-fetch.yaml new file mode 100644 index 0000000..d9bee0c --- /dev/null +++ b/registry/release-units/flex-auth-ops-warden-fetch.yaml @@ -0,0 +1,46 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-ops-warden-fetch +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-ops-warden-fetch workloads as one release unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-ops-warden-fetch +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-ops-warden-fetch +pins: + component: + name: ocm.railiance.dev/flex-auth-ops-warden-fetch + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:419bc37420d0d0a5304a8587448f1fdbf87117fb041fb43081b0449b4a7bb13b + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-ops-warden.yaml b/registry/release-units/flex-auth-ops-warden.yaml new file mode 100644 index 0000000..e7fa70e --- /dev/null +++ b/registry/release-units/flex-auth-ops-warden.yaml @@ -0,0 +1,46 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-ops-warden +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-ops-warden workloads as one release unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-ops-warden +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-ops-warden +pins: + component: + name: ocm.railiance.dev/flex-auth-ops-warden + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:f7c04991a54ebc5fd2a55939e2f68efc7400a51f8773fb6703487833c65b3893 + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-tenant-engine.yaml b/registry/release-units/flex-auth-tenant-engine.yaml new file mode 100644 index 0000000..e8d13d4 --- /dev/null +++ b/registry/release-units/flex-auth-tenant-engine.yaml @@ -0,0 +1,46 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-tenant-engine +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-tenant-engine workloads as one release unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-tenant-engine +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-tenant-engine +pins: + component: + name: ocm.railiance.dev/flex-auth-tenant-engine + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:05a03a8790c2210c48ea92391441c77ddf640d0cd32f5ec09838f5393171fcbd + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/registry/release-units/flex-auth-user-engine.yaml b/registry/release-units/flex-auth-user-engine.yaml new file mode 100644 index 0000000..c2a755a --- /dev/null +++ b/registry/release-units/flex-auth-user-engine.yaml @@ -0,0 +1,46 @@ +# Classification is copied from access-engine/registry/release-units/flex-auth-secrets-engine.yaml. +kind: release-unit +unit_id: flex-auth-user-engine +owner: access-engine +contract_version: 1.0.0 +data_classification: restricted +criticality: high +composition: + purpose: Covers the live flex-auth-user-engine workloads as one release unit. + member_repos: + - repo: access-engine + role: rollout owner + deployables: + - flex-auth-user-engine +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: flex-auth + name: flex-auth-user-engine +pins: + component: + name: ocm.railiance.dev/flex-auth-user-engine + version: live + resources: + - name: flex-auth + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:138aa3471c46bca6e814691fa1e6520aedda3dffd743e6b09141ab433afdb64b + sources: + - name: access-engine + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: f529c71eb063dd8b263524663f0ca7cee15c5ee6 diff --git a/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md b/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md index e8db9f6..948b330 100644 --- a/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md +++ b/workplans/FLEX-WP-0038-wave2-resource-right-sizing.md @@ -4,7 +4,7 @@ type: workplan title: "Wave-2 resource right-sizing for the flex-auth runtime" domain: infotech repo: access-engine -status: ready +status: active flavor: implementation owner: access-engine created: "2026-10-21"