coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Document ACTIVITY-WP-0026-T07 railiance deploy checklist.
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 2s
Details

Browse source 
Add deploy-ops-run-queue-railiance.md (image, migrate 0007, smoke, dual-path
residual), wire OPS_RUN_* into runtime ConfigMap, and cross-link runbook/README.
T07 stays open until prod smoke is executed.
This commit is contained in:
tegwick 2026-08-03 19:30:00 +02:00
parent 32f62ac1ac
commit 6ce77a72bb
8 changed files with 339 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

6
k8s/railiance/20-runtime.yaml
View file

@ -18,6 +18,12 @@ data:
# ACTIVITY-WP-0021: state-hub until issue-core Forgejo PAT (GITEA_BACKEND_TOKEN)
# is rotated; switch back to "rest" after path A smoke returns 201.
ISSUE_SINK_TYPE: "state-hub"
# ACTIVITY-WP-0026 / ACT-ADR-005 — claimable ops_run on emit (not Forgejo)
OPS_RUN_QUEUE_ENABLED: "true"
OPS_RUN_LEASE_SECONDS: "900"
OPS_RUN_MAX_ATTEMPTS: "3"
OPS_RUN_SLA_HOURS: "1"
# ACTIVITY_CORE_WORKER_TOKEN lives in actcore-runtime-secret (optional until REIN-A-0002)
ACTIVITY_DEFINITION_DIRS: /etc/activity-core/external-definitions
CUSTODIAN_REPO_ROOT: /var/custodian
ACTIVITY_CORE_ROOT: /etc/activity-core

9
k8s/railiance/README.md
View file

@ -31,7 +31,14 @@ provisions the Inter-Hub ops-hub key.
`ISSUE_SINK_TYPE` defaults to **`state-hub`** (ACTIVITY-WP-0022; no silent Forgejo
issues). Set `rest` only for intentional issue-core projection when the backend
is healthy. `ISSUE_CORE_API_KEY` and `FORGEJO_TOKEN` are synced from OpenBao into
`actcore-runtime-secret` by ExternalSecrets:
`actcore-runtime-secret` by ExternalSecrets.
**Ops run claim queue (ACTIVITY-WP-0026):** ConfigMap sets
`OPS_RUN_QUEUE_ENABLED=true`. After image + migrate job (alembic **0007**),
workers insert claimable `ops_runs` on emit. Full railiance checklist:
`docs/deploy-ops-run-queue-railiance.md`. Keep host timers until REIN-A-0002.
Optional `ACTIVITY_CORE_WORKER_TOKEN` in `actcore-runtime-secret` for harness
claim auth.
| ExternalSecret | OpenBao path | Secret key |
| --- | --- | --- |

4
k8s/railiance/bootstrap-secrets.sh
View file

@ -42,3 +42,7 @@ fi
# ISSUE_CORE_API_KEY is merged into actcore-runtime-secret by ExternalSecret
# actcore-issue-core-runtime (k8s/railiance/15-externalsecret-issue-core.yaml).
# Apply that manifest after ClusterSecretStore openbao-activity-core is Ready.
#
# Optional (ACTIVITY-WP-0026 / REIN-A-0002): patch ACTIVITY_CORE_WORKER_TOKEN and
# ACTIVITY_CORE_OPERATOR_TOKEN into actcore-runtime-secret — see
# docs/deploy-ops-run-queue-railiance.md. Not auto-generated here.