tegwick
5a0f4cb5c8
Registers the repo with State Hub (agents / practice, prefix RCP-WP) and fills in the rapp shape. declarations/rapp.yaml declares a manifest-managed platform service owned by canned-prompts, bound to rail-kubernetes and reef-railiance, with rollout, smoke and rollback contracts. The image pin says `pending-publication` rather than carrying a placeholder digest. The image builds and was verified locally (canned-prompts CANP-WP-0006-T06) but has never been pushed, so no registry digest exists. A placeholder shaped like a real digest would be worse than a sentinel: it could be mistaken for something deployable. manifests/ follows the rapp-sbom-nexus shape: namespace labelled for the postgres client, external secrets from OpenBao, a migration Job, and the runtime Deployment with a ClusterIP-only Service, dedicated ServiceAccount and default-deny plus runtime NetworkPolicies. Three choices worth stating. Credentials arrive as mounted files, never env vars — an env var holding a password is visible in kubectl describe, in crash dumps, and to anything that can read /proc. Migrations run as a Job rather than at start-up, so a schema rollback stays separate from a code rollback and replicas do not race. Liveness points at /healthz, which checks only that the process is up: pointing it at a database-dependent path would restart every replica during a database blip. Egress is PostgreSQL and DNS only. A package arrives by publish; the registry never reaches out, so it is given no path to. tools/smoke.sh checks what only the cluster can answer and calls canned-prompts' service/tools/smoke.py for health and migration head, rather than holding a second opinion about whether the service is healthy. RCP-WP-0002 carries the two operator actions that block a first rollout — publishing the image and provisioning database roles — and records per-publisher identity as a decision belonging upstream, which this repo must not paper over with cluster configuration implying finer control than exists. Co-Authored-By: Claude Opus 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01Bjefh8NUiEiahN4JLwoSKM Assistant: claude-code Assistant-Model: opus Assistant-Process: 388925@bnt-lap001 Assistant-Session: 3507023f-e0fd-4a1e-9d90-a0d4217d1502
65 lines
2.1 KiB
YAML
65 lines
2.1 KiB
YAML
kind: managed-workload-package
|
|
repo_family: rapp
|
|
rapp_id: rapp-canned-prompts
|
|
repo: rapp-canned-prompts
|
|
ownership_repo: canned-prompts
|
|
contract_version: 1.0.0
|
|
readiness_state: draft
|
|
workload_identity:
|
|
name: canned-prompts
|
|
package_type: manifest-managed-platform-service
|
|
data_classification: internal
|
|
criticality: medium
|
|
primary_rail: rail-kubernetes
|
|
supported_rails:
|
|
- rail-kubernetes
|
|
bound_reefs:
|
|
- reef-railiance
|
|
runtime_dependencies:
|
|
- kubernetes-api
|
|
- openbao-database-secrets-engine
|
|
composition:
|
|
purpose: >-
|
|
Package and operate the canned-prompts hosted registry and index on
|
|
Railiance. Format semantics, package validation, API compatibility, the
|
|
schema and its migrations, and image publication remain owned by
|
|
canned-prompts. PostgreSQL topology, database isolation, backups and
|
|
credential issuance remain owned by rapp-postgres and the platform
|
|
credential broker.
|
|
member_repos:
|
|
- repo: rapp-canned-prompts
|
|
role: managed runtime package
|
|
deployables:
|
|
- canned-prompts
|
|
upstream_components:
|
|
- name: canned-prompts
|
|
source: forgejo.coulomb.social/coulomb/canned-prompts
|
|
# NOT YET PUBLISHED. The image builds and was verified locally
|
|
# (CANP-WP-0006-T06), but has never been pushed, so no registry digest
|
|
# exists to pin. A placeholder shaped like a digest would be worse than
|
|
# this sentinel: it could be mistaken for something deployable.
|
|
# RCP-WP-0001-T01 replaces this with the real digest.
|
|
version: pending-publication
|
|
rollout_contract:
|
|
default_mode: kubectl-server-side-apply
|
|
smoke_contract:
|
|
required:
|
|
- state-health-ok
|
|
- migration-at-head
|
|
- external-secrets-ready
|
|
- private-service-only
|
|
- networkpolicies-present
|
|
- live-image-digest-match
|
|
rollback_contract:
|
|
order:
|
|
- previous-immutable-image-digest
|
|
- apply-reviewed-git-revision
|
|
source_documents:
|
|
- repo: canned-prompts
|
|
path: CannedPromptFormat.md
|
|
- repo: canned-prompts
|
|
path: service/README.md
|
|
- repo: canned-prompts
|
|
path: workplans/CANP-WP-0006-hosted-registry-service.md
|
|
- repo: repo-manager
|
|
path: docs/RailianceAppDeploymentGuide.md
|