From baf044f1391809053161b1780c8968ea027ae79f Mon Sep 17 00:00:00 2001 From: codex Date: Fri, 23 Oct 2026 15:50:00 +0200 Subject: [PATCH] Declare the live release units for this owner. The claims name the workloads covered by RELREG-WP-0004. Each pin is a digest the live object already shows. Assistant: grok Assistant-Session: 01a16880-25e0-7031-b553-a1e0321ff397 --- registry/release-units/argocd.yaml | 51 +++++++++++++++ registry/release-units/cert-manager.yaml | 47 ++++++++++++++ registry/release-units/cloudnative-pg.yaml | 39 ++++++++++++ registry/release-units/external-secrets.yaml | 58 +++++++++++++++++ registry/release-units/k3s.yaml | 67 ++++++++++++++++++++ 5 files changed, 262 insertions(+) create mode 100644 registry/release-units/argocd.yaml create mode 100644 registry/release-units/cert-manager.yaml create mode 100644 registry/release-units/cloudnative-pg.yaml create mode 100644 registry/release-units/external-secrets.yaml create mode 100644 registry/release-units/k3s.yaml diff --git a/registry/release-units/argocd.yaml b/registry/release-units/argocd.yaml new file mode 100644 index 0000000..db65221 --- /dev/null +++ b/registry/release-units/argocd.yaml @@ -0,0 +1,51 @@ +# No owner classification file. Recorded internal/high for this wave. +kind: release-unit +unit_id: argocd +owner: railiance-cluster +contract_version: 1.0.0 +data_classification: internal +criticality: high +composition: + purpose: Covers the live argocd workloads as one release unit. + member_repos: + - repo: railiance-cluster + role: rollout owner + deployables: + - argocd-application-controller + - argocd-applicationset-controller + - argocd-redis + - argocd-repo-server +rollout_contract: + default_mode: owner-deploy +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: StatefulSet + namespace: argocd + name: argocd-application-controller +- kind: Deployment + namespace: argocd + name: argocd-applicationset-controller +- kind: Deployment + namespace: argocd + name: argocd-redis +- kind: Deployment + namespace: argocd + name: argocd-repo-server +pins: + component: + name: ocm.railiance.dev/argocd + version: live + resources: [] + sources: + - name: railiance-cluster + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: aad0e7094a69682725d2c280a6e049331e6223d2 diff --git a/registry/release-units/cert-manager.yaml b/registry/release-units/cert-manager.yaml new file mode 100644 index 0000000..cad346e --- /dev/null +++ b/registry/release-units/cert-manager.yaml @@ -0,0 +1,47 @@ +# No owner classification file. Recorded internal/high for this wave. +kind: release-unit +unit_id: cert-manager +owner: railiance-cluster +contract_version: 1.0.0 +data_classification: internal +criticality: high +composition: + purpose: Covers the live cert-manager workloads as one release unit. + member_repos: + - repo: railiance-cluster + role: rollout owner + deployables: + - cert-manager + - cert-manager-cainjector + - cert-manager-webhook +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: cert-manager + name: cert-manager +- kind: Deployment + namespace: cert-manager + name: cert-manager-cainjector +- kind: Deployment + namespace: cert-manager + name: cert-manager-webhook +pins: + component: + name: ocm.railiance.dev/cert-manager + version: live + resources: [] + sources: + - name: railiance-cluster + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: aad0e7094a69682725d2c280a6e049331e6223d2 diff --git a/registry/release-units/cloudnative-pg.yaml b/registry/release-units/cloudnative-pg.yaml new file mode 100644 index 0000000..eac4759 --- /dev/null +++ b/registry/release-units/cloudnative-pg.yaml @@ -0,0 +1,39 @@ +# No owner classification file. Recorded internal/high for this wave. +kind: release-unit +unit_id: cloudnative-pg +owner: railiance-cluster +contract_version: 1.0.0 +data_classification: internal +criticality: high +composition: + purpose: Covers the live cloudnative-pg workloads as one release unit. + member_repos: + - repo: railiance-cluster + role: rollout owner + deployables: + - cnpg-controller-manager +rollout_contract: + default_mode: owner-deploy +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: cnpg-system + name: cnpg-controller-manager +pins: + component: + name: ocm.railiance.dev/cloudnative-pg + version: live + resources: [] + sources: + - name: railiance-cluster + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: aad0e7094a69682725d2c280a6e049331e6223d2 diff --git a/registry/release-units/external-secrets.yaml b/registry/release-units/external-secrets.yaml new file mode 100644 index 0000000..917ca80 --- /dev/null +++ b/registry/release-units/external-secrets.yaml @@ -0,0 +1,58 @@ +# No owner classification file. Recorded internal/high for this wave. +kind: release-unit +unit_id: external-secrets +owner: railiance-cluster +contract_version: 1.0.0 +data_classification: internal +criticality: high +composition: + purpose: Covers the live external-secrets workloads as one release unit. + member_repos: + - repo: railiance-cluster + role: rollout owner + deployables: + - eso-token-renewer + - external-secrets + - external-secrets-cert-controller + - external-secrets-webhook +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: CronJob + namespace: external-secrets + name: eso-token-renewer +- kind: Deployment + namespace: external-secrets + name: external-secrets +- kind: Deployment + namespace: external-secrets + name: external-secrets-cert-controller +- kind: Deployment + namespace: external-secrets + name: external-secrets-webhook +pins: + component: + name: ocm.railiance.dev/external-secrets + version: live + resources: + - name: python + type: ociImage + version: live + digest: + hashAlgorithm: SHA-256 + normalisationAlgorithm: ociArtifactDigest/v1 + value: sha256:d764629ce0ddd8c71fd371e9901efb324a95789d2315a47db7e4d27e78f1b0e9 + sources: + - name: railiance-cluster + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: aad0e7094a69682725d2c280a6e049331e6223d2 diff --git a/registry/release-units/k3s.yaml b/registry/release-units/k3s.yaml new file mode 100644 index 0000000..ca70914 --- /dev/null +++ b/registry/release-units/k3s.yaml @@ -0,0 +1,67 @@ +# No owner classification file. Recorded internal/high for this wave. +kind: release-unit +unit_id: k3s +owner: railiance-cluster +contract_version: 1.0.0 +data_classification: internal +criticality: high +composition: + purpose: Covers the live k3s workloads as one release unit. + member_repos: + - repo: railiance-cluster + role: rollout owner + deployables: + - coredns + - helm-install-traefik + - helm-install-traefik-crd + - local-path-provisioner + - metrics-server + - svclb-mas-smtp-d86db2b1 + - svclb-traefik-0c8aecaf + - traefik +rollout_contract: + default_mode: helm-upgrade-install +smoke_contract: + required: + - workload-ready +rollback_contract: + order: + - owner-rollback +workloads: +- kind: Deployment + namespace: kube-system + name: coredns +- kind: Job + namespace: kube-system + name: helm-install-traefik +- kind: Job + namespace: kube-system + name: helm-install-traefik-crd +- kind: Deployment + namespace: kube-system + name: local-path-provisioner +- kind: Deployment + namespace: kube-system + name: metrics-server +- kind: DaemonSet + namespace: kube-system + name: svclb-mas-smtp-d86db2b1 +- kind: DaemonSet + namespace: kube-system + name: svclb-traefik-0c8aecaf +- kind: Deployment + namespace: kube-system + name: traefik +pins: + component: + name: ocm.railiance.dev/k3s + version: live + resources: [] + sources: + - name: railiance-cluster + type: git + version: live + digest: + hashAlgorithm: SHA-1 + normalisationAlgorithm: gitCommit/v1 + value: aad0e7094a69682725d2c280a6e049331e6223d2