49 lines
2.4 KiB
Markdown
49 lines
2.4 KiB
Markdown
|
# RCP-WP-0002-T04 — first deployment evidence
|
||
|
|
|
||
|
|
**Date:** 2026-09-08
|
||
|
|
**Image:** `sha256:2fbac3c0d1609a76d9478e540ae5450c5425e8c04e0565cccc6a4eb0180ebcaf` (tag 0.1.4)
|
||
|
|
**Cluster:** railiance01 / k3s, namespace `canned-prompts`
|
||
|
|
**Schema:** alembic revision 0002, applied by the migration Job as `canned_prompts_migrate` with `SET ROLE canned_prompts_owner`
|
||
|
|
|
||
|
|
## `tools/smoke.sh`
|
||
|
|
|
||
|
|
```text
|
||
|
|
PASS external-secrets-ready:canned-prompts-postgres-runtime
|
||
|
|
PASS external-secrets-ready:canned-prompts-postgres-migration
|
||
|
|
PASS private-service-only:type
|
||
|
|
PASS private-service-only:no-ingress
|
||
|
|
PASS networkpolicies-present
|
||
|
|
PASS live-image-digest-match
|
||
|
|
--- service-level (/home/worsch/canned-prompts/service/tools/smoke.py) ---
|
||
|
|
PASS liveness-ok 200 {'status': 'ok'}
|
||
|
|
PASS readiness-ok 200 ok
|
||
|
|
PASS state-health-ok 200 connected
|
||
|
|
PASS migration-at-head running 0002, expected 0002
|
||
|
|
PASS index-queryable 200
|
||
|
|
PASS registry-queryable 200
|
||
|
|
|
||
|
|
all 6 checks passed
|
||
|
|
|
||
|
|
all deployment checks passed
|
||
|
|
```
|
||
|
|
|
||
|
|
## Read-only posture verified
|
||
|
|
|
||
|
|
`POST /packages` returns **503**, not a 500 and not an acceptance:
|
||
|
|
|
||
|
|
```json
|
||
|
|
{"detail":"publishing is not configured: this service has no publisher identity, so it cannot tell who is calling and refuses writes rather than accepting anonymous publishes (§ 20.1)"}
|
||
|
|
```
|
||
|
|
|
||
|
|
This is the intended state. `creds/canned-prompts-publish` was deliberately not issued (rapp-postgres receipt, 2026-09-08). The read surface answers normally: `/packages` and `/index` both return empty result sets rather than errors.
|
||
|
|
|
||
|
|
## Defects found and fixed during this rollout
|
||
|
|
|
||
|
|
| Defect | Consequence had it shipped |
|
||
|
|
|---|---|
|
||
|
|
| `env.py` read `database_url` rather than `resolved_database_url` | Migration could never run in the cluster, where the credential is a mounted file |
|
||
|
|
| `SET ROLE` opened an implicit transaction Alembic then nested inside | Every migration logged as applied and was silently rolled back — an empty database reported as success |
|
||
|
|
| Egress NetworkPolicy selected `name`, not `part-of` | Migration Job matched only the default-deny; it succeeded once purely because it ran before the policies existed |
|
||
|
|
| Missing optional publish-token file treated as a hard failure | The documented read-only posture returned 500 instead of an explanatory 503 |
|
||
|
|
| `smoke.sh` extracted the digest with a line-offset `grep` | `live-image-digest-match` silently degraded to "not pinned" and could never have passed |
|