coulomb/net-kingdom
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Pin identity-provisioner digest and readiness to directory preflight
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 1s
Details

Browse source 
Promote CI image sha256:3317a2610ef9958b77cb258dce54d69d13dfabbc55ffaad673e018f997a6467c
with /readyz readiness and Recreate rollout. Live /healthz stays process
liveness; /readyz returned directory ready. Native onboarding remains for T05.

Assistant: grok
Assistant-Session: 01a09dc6-3f0e-78f1-a884-c8c703c24ddf
This commit is contained in:
tegwick 2026-09-14 04:57:39 +02:00
parent 84c4225542
commit 8dc5050aa3
5 changed files with 28 additions and 29 deletions
Download patch file Download diff file Expand all files Collapse all files

5
docs/identity-provisioner-bind-repair.md
View file

@ -75,5 +75,6 @@ NK-WP-0036-T05 adds `/readyz` as a contained provisioner-to-directory preflight
`dependency_unavailable` JSON body, and keeps `/healthz` as process liveness.
Auth rejection is not retried during a cooldown so kube probes cannot hammer a
rejected password. Synthetic contract tests run in identity-journeys CI.
Promotion still requires the immutable image digest, switching readiness to
`/readyz`, and a native onboarding journey; see the T05 workplan note.
Image sha256:3317a2610ef9958b77cb258dce54d69d13dfabbc55ffaad673e018f997a6467c
is live with `/readyz` readiness; a native onboarding journey is still required
before T05 is done. See the T05 workplan note.