Record promoted stable channel and Harbor IaC deployment gates #43

Merged

gitchegumi merged 2 commits from kiyi/harbor-stable-readiness into main

2026-10-13 20:33:42 -05:00

kiyi commented

2026-10-13 20:20:05 -05:00

Member

Reconcile Harbor PR #5, Terraform stable-caller PR #10 and PostgreSQL PR #9 source status, preserving check names and embedded image provenance. The owner reconfirmed that state/KMS, the provisioner and all dev runtime resources remain unset. The disposable PostgreSQL provider regression has now passed in exact-head hosted run 36 and the reviewer accepted its specific SQL fix. Distinguish that fixture acceptance from the combined database/storage delivery profile, one runtime writer, live bootstrap and deployment still required. Keep detailed operator steps in the owning private repositories; no credentials or payloads are published.

Validation at 0bc685c: npm run check and npm run build passed; public/private link policy, source diff and native staged Gitleaks 8.30.1 passed. Documentation only; no infrastructure, tag movement or deployment performed.

Record the first verified stable-v1 promotion, selecting v1.36.0 through snapshot c025748ca41b6525b2e1f6ab1ed00c95571df0a6 and audit workflow-channel-promotion-v1-r7086. Document owner-selected incremental caller migration, starting with Harbor and its direct Terraform dependencies. Reconcile Harbor PR #5, Terraform stable-caller PR #10 and PostgreSQL PR #9 source status, preserving check names and embedded image provenance. The owner reconfirmed that state/KMS, the provisioner and all dev runtime resources remain unset. The disposable PostgreSQL provider regression has now passed in exact-head hosted run 36 and the reviewer accepted its specific SQL fix. Distinguish that fixture acceptance from the combined database/storage delivery profile, one runtime writer, live bootstrap and deployment still required. Keep detailed operator steps in the owning private repositories; no credentials or payloads are published. Validation at 0bc685c: npm run check and npm run build passed; public/private link policy, source diff and native staged Gitleaks 8.30.1 passed. Documentation only; no infrastructure, tag movement or deployment performed.

kiyi added 2 commits

2026-10-13 20:20:05 -05:00

Record promoted stable channel and Harbor IaC deployment gates 73a8c47800

Record passed disposable PostgreSQL provider regression

Documentation site checks / validate (pull_request) Successful in 1m45s

Details

Source security / security (pull_request) Successful in 3m17s

Details

Source security / pipeline (pull_request) Successful in 0s

Details

0bc685c1e8

portegumi approved these changes

2026-10-13 20:22:00 -05:00

portegumi left a comment

Source-only approval for exact head 0bc685c1e8. Read all three changed Markdown files at that head and reconciled their key status statements against the live workflows #94, Harbor #5 and terraform-modules #9/#10 PR records. The documentation keeps the initial stable-v1 channel promotion distinct from proposed caller adoption; preserves the security-image provenance boundary; and clearly separates the passed disposable PostgreSQL provider fixture from unprovisioned backend/KMS, provisioner, combined DB/storage profile, single writer, signed delivery and live acceptance. No source-level blocker found in this documentation review. This does not independently validate the channel tag/audit object or live infrastructure, and is not merge authorization. Source security and documentation-site checks are still pending on this head; require their exact-head successful results before merge.

CI at submission: pending. This is a source-review approval, not a scan verdict; required checks still block merge.

Source-only approval for exact head 0bc685c1e83f0f8d981ecbe043c8aed98a8b9f46. Read all three changed Markdown files at that head and reconciled their key status statements against the live workflows #94, Harbor #5 and terraform-modules #9/#10 PR records. The documentation keeps the initial stable-v1 channel promotion distinct from proposed caller adoption; preserves the security-image provenance boundary; and clearly separates the passed disposable PostgreSQL provider fixture from unprovisioned backend/KMS, provisioner, combined DB/storage profile, single writer, signed delivery and live acceptance. No source-level blocker found in this documentation review. This does not independently validate the channel tag/audit object or live infrastructure, and is not merge authorization. Source security and documentation-site checks are still pending on this head; require their exact-head successful results before merge. CI at submission: pending. This is a source-review approval, not a scan verdict; required checks still block merge.