coulomb/access-engine
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions 1

Wave-2 right-sizing applied 2026-10-22 (CUST-WP-0071)
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

Assistant: claude-code
Assistant-Model: opus
Assistant-Process: 276069@bnt-lap001
Assistant-Session: 2e192b3d-b3e8-4403-94d4-d55a2c8b476c
This commit is contained in:
tegwick 2026-10-22 01:01:49 +02:00
parent 6ac089bbcb
commit f529c71eb0
1 changed files with 5 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

6
workplans/FLEX-WP-0038-wave2-resource-right-sizing.md
View file

@ -24,9 +24,9 @@ The founder placed this task in access-engine, beside `charts/flex-auth`, on
```task
id: FLEX-WP-0038-T01
status: wait
blocking_reason: "8 of 9 flex-auth releases wait for owner review of --caller-audience and the sitting image change; ops-warden applied."
priority: low
needs_human: true
blocking_reason: "Wave-2 cluster write needs founder approval (2026-10-21 interview)."
state_hub_task_id: "0ed6cd93-972e-56de-b6c8-0528249c90ae"
```
@ -52,3 +52,7 @@ Status stays `wait` / `needs_human`. Local commit only: not pushed, not applied.
- Change: access-engine `36465de`: chart default request 25m/32Mi -> 5m/20Mi. Overrides: application-readback 24Mi, informed-decision-lifecycle 24Mi, informed-decision-sitting 40Mi (up, because p95 is 35Mi), informed-decision-t03 16Mi. CPU is 5m for every release. Total 45m/204Mi, compared with 176Mi proposed; the difference comes from per-pod rounding.
- Diff: NOT resource-only. In 8 of 9 releases, the chart at HEAD adds `--caller-audience` to the container args (`flex-auth` or `access-engine`, depending on the release). informed-decision-sitting also changes image. Only `flex-auth-ops-warden` diffs resource-only. This drift goes to the founder before any helm upgrade.
- Apply (per release, after founder OK): `helm upgrade --install flex-auth-<release> charts/flex-auth --namespace flex-auth -f values/<release>.yaml --wait --timeout 2m`.
## Applied — 2026-10-22 (FLEX-WP-0038-T01)
Partial: only `flex-auth-ops-warden` was applied (Helm revision 4, resources only). The other 8 releases wait, because chart HEAD adds `--caller-audience` and sitting would change image. Those need access-engine owner review before any resource-only rollout. Evidence: the-custodian docs/evidence/2026-10-22-wave2-apply.md.