Add fast dev UDS delivery and disposable bundle cleanup #84

Merged

gitchegumi merged 3 commits from kiyi/dev-bundle-lifecycle into main

2026-10-11 19:34:19 -05:00

kiyi commented

2026-10-10 18:55:58 -05:00

Member

Dev iteration currently repeats production scans and has no owning workflow to discard an unused bundle and its data. Add an explicit scan_profile: dev for dev-only bundling/deployment. It retains history/tree secret checks, immutable images, signed provenance, archive integrity, managed credentials and target/health checks, while skipping heavyweight source/image scans, malware, SBOMs and their tool downloads. Production defaults and fully scanned same-archive promotion remain intact; production rejects dev-only receipts.

Add a protected manual cleanup implementation, defaulting to a read-only plan. Removal checks the installed release marker, managed namespace labels and volume/claim UIDs, requires the exact namespace confirmation, and removes only the dev package and namespace. Dynamic CSI backing storage must deprovision; named Retain volumes require reviewed allowlisting. Declared external PostgreSQL databases use restricted dev Secret references, verified TLS and a fixed cleanup Job after writers stop. Database failures prevent namespace removal. Unsupported static/shared storage is refused. Expired historical mitigations do not prevent uninstall.

Cleanup authority is per-app opt-in through the paired platform change. Unflagged apps preserve their contracts. The template adopts matching build/deploy/cleanup callers at proposed release v1.32.0; v1.31.0 public-asset support is incorporated from current main.

Validation: 286 source tests completed, 272 passed and 14 skipped (11 existing conditional/integration skips plus three Linux socket-path tests unavailable on Windows). Bash was explicitly selected for Windows canary checks. Separately validated all workflow YAML, 62 Bash scripts and 24 canary gate cases. No local container build or live deletion was run. Hosted Linux integration, publication, per-app adoption, platform reconciliation, CSI/database removal and empty recreation acceptance remain required.

Refs #83. Keep that issue open for rollout acceptance.

Dev iteration currently repeats production scans and has no owning workflow to discard an unused bundle and its data. Add an explicit `scan_profile: dev` for dev-only bundling/deployment. It retains history/tree secret checks, immutable images, signed provenance, archive integrity, managed credentials and target/health checks, while skipping heavyweight source/image scans, malware, SBOMs and their tool downloads. Production defaults and fully scanned same-archive promotion remain intact; production rejects dev-only receipts. Add a protected manual cleanup implementation, defaulting to a read-only plan. Removal checks the installed release marker, managed namespace labels and volume/claim UIDs, requires the exact namespace confirmation, and removes only the dev package and namespace. Dynamic CSI backing storage must deprovision; named Retain volumes require reviewed allowlisting. Declared external PostgreSQL databases use restricted dev Secret references, verified TLS and a fixed cleanup Job after writers stop. Database failures prevent namespace removal. Unsupported static/shared storage is refused. Expired historical mitigations do not prevent uninstall. Cleanup authority is per-app opt-in through the paired platform change. Unflagged apps preserve their contracts. The template adopts matching build/deploy/cleanup callers at proposed release v1.32.0; v1.31.0 public-asset support is incorporated from current main. Validation: 286 source tests completed, 272 passed and 14 skipped (11 existing conditional/integration skips plus three Linux socket-path tests unavailable on Windows). Bash was explicitly selected for Windows canary checks. Separately validated all workflow YAML, 62 Bash scripts and 24 canary gate cases. No local container build or live deletion was run. Hosted Linux integration, publication, per-app adoption, platform reconciliation, CSI/database removal and empty recreation acceptance remain required. Refs #83. Keep that issue open for rollout acceptance.

kiyi added 3 commits

2026-10-10 18:55:58 -05:00

Add dev-only scan profile and managed disposable bundle cleanup 7d935e36f9

Merge remote-tracking branch 'refs/remotes/dev-lifecycle/main' into kiyi/dev-bundle-lifecycle 10afaa7cd8

Document dev lifecycle adoption with next available release

Workflow acceptance / acceptance (pull_request) Successful in 1m27s

Details

Repository security / security-1 (pull_request) Successful in 6m9s

Details

Library checks / tests (pull_request) Successful in 6m7s

Details

68af2156d1

kiyi referenced this pull request from Homelab/Documentation

2026-10-10 18:59:11 -05:00

Record disposable dev delivery and cleanup policy #37

kiyi referenced this pull request

2026-10-10 18:59:54 -05:00

Add fast, disposable UDS dev delivery and cleanup #83

gitchegumi approved these changes

2026-10-11 19:34:13 -05:00

gitchegumi changed title from ~~WIP: Add fast dev UDS delivery and disposable bundle cleanup~~ to Add fast dev UDS delivery and disposable bundle cleanup

2026-10-11 19:34:15 -05:00

gitchegumi merged commit 4d33d11424 into main

2026-10-11 19:34:19 -05:00

gitchegumi deleted branch kiyi/dev-bundle-lifecycle

2026-10-11 19:34:19 -05:00

gitchegumi referenced this pull request from a commit

2026-10-11 19:34:21 -05:00

Merge pull request 'Add fast dev UDS delivery and disposable bundle cleanup' (#84) from kiyi/dev-bundle-lifecycle into main

~~kiyi referenced this pull request 2026-10-11 19:45:58 -05:00~~

Add protected Terraform provisioning workflows #85