ci: deploy + seed a test stand after the umbrella chart publish on main - #2404

Merged

ktursunov merged 64 commits into

mainfrom

Aug 13, 2026

Commits on Aug 12, 2026

chore(studio): sync Constructor Studio config

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
7a3ada9
feat(gitops): add the test-stand environment, CI emulation and deploy credential

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
1257fbe
ci(stand): deploy, seed and smoke the published chart on the test stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
6071508
test(stand): add the post-deploy smoke gate for a deployed stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
410427a
ci(stand): do not inherit every repository secret into the deploy

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
6d043a0
fix(stand): redact underscore-joined secret keys, and grant the cross-namespace RBAC the chart needs

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
0aca4e7
ci(stand): let a dispatch run deploy and seed without the smoke credentials

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ddfb903
docs(stand): say why the branch allow-list is the control, and that the token is a stopgap

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
edbcaef
feat(gitops): re-sync the test-stand environment to the redeployed stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
78d1225
fix(stand): recover the seed manifest from an interleaved log, and re-sync the rest to the stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
54f3a14
fix(gitops): stop the persons-seed CronJob competing with the seeded roster

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
f281958
ci(stand): allow a dispatched reseed to override the foreign-rows guard

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
6758a88
fix(seed): read the dev-lead address from the realm the stand applies

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
267538d
ci(stand): drop the rehearsal harness, and let a dispatch take the newest chart

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
128ef21
fix(stand): resolve the newest chart from the registry, not from a branch's file

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
4ffaf74
fix(stand): seed a window the API can query, and let the caller rebuild gold

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
25d41aa
fix(tests/stand): skip an optional fixture instead of aborting, and stop assuming the IdP is on another host

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
f894136
ci(stand): stop publishing cluster output, tell the truth in the summary, deploy only what was published

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
9240ddf
ci(stand): deploy through `make deploy`, and let the environment declare its own shape

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
fd6d7ae
feat(gitops): an executable rebuild for the disposable stand, that drops the databases too

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
0b39add
fix(gitops): give each database client its own image, and stop a stray file blocking a deploy

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
5c483e7
fix(gitops): hand make the context the rebuild already validated

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
fa15e1d
fix(gitops): ask the deploy's guards before the wipe, not between the wipe and the install

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
8ed5bfe
refactor(stand-ci): fold the stand tooling into gitops, one spelling per fact

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
39a1f5d
ci(stand): downgrades have no override — recovery is recreate, never rollback

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
32173d7
ci(stand): let a manual dispatch omit the version and take the registry's newest

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
4233607
feat(seed): let a stand set the persona password via INSIGHT_SEED_PERSONA_PASSWORD

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
439df8c
ci(stand): TEMPORARY debug trigger for the deploy pipeline — delete before merge

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
5c856e8
ci(stand): TEMPORARY branch exception in the main-only guard for the debug trigger

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
86097a9
ci(stand): debug run marker 3

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
9db43bd
ci(stand): TEMPORARY manifest-capture fallback for the pre-merge debug run

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
2f69c07
ci(stand): fix the TEMPORARY manifest fallback — stop at the document's own closing brace

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
8daa2de
ci(stand): TEMPORARY fallback reads the completed Job's log at rest

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
dbdedfc
ci(stand): TEMPORARY fallback filters interleaved stderr log lines

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
b0b3ecd
ci(stand): debug run marker 8

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
51ba45c
test(stand): xfail the metric non-null check — seeded observations bind to nobody since the identity-resolution rework

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
6a6bf38
ci(stand): debug run marker 9 — full rerun after rebase on main

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
9250bc7
docs(stand): comment diet — constraints stay, narration goes

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
1601d77
ci(stand): debug run marker 10 — seed + smoke the recreated stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
4cfbe04
docs+seed(stand): retire the dead login-mode machinery from the docs; fail fast on a weak persona password

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
be32a18
ci(stand): the deploy leaves the build's concurrency slot; TEMPORARY debug rig removed

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
47dc28d
security(stand): enumerate the CI deployer's grants instead of binding the admin ClusterRole

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
717bd6b
Merge remote-tracking branch 'origin/main' into test-stand-ci

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
0ac7cb9
test(stand): give the /auth/me module its quality vector — main's gate demands exactly one

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
ee14b43
Merge remote-tracking branch 'origin/main' into test-stand-ci

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
4209972
ci(stand): TEMPORARY debug trigger returns for a pre-merge CI run — delete before merge

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
3593ad0
ci(stand): TEMPORARY — debug run 12 executes the full stand suite

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
2738b62
fix(stand): the blob rule no longer eats file paths

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
7fe2860
Revert "ci(stand): TEMPORARY — debug run 12 executes the full stand suite"

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
44fadc3
Revert "ci(stand): TEMPORARY debug trigger returns for a pre-merge CI run — delete before merge"

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
8ec2e27
docs(stand): move the CI credentials runbook next to the stand it documents

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
c376a1e
docs(stand): condense INFRA.md to a scannable reference (1193 -> 291 lines)

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
6eac4bd
docs(stand): condense README to the deploy walkthrough (484 -> 285 lines)

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
39aacec
docs(stand): tighten the RBAC manifest comments

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
81da0de
Merge remote-tracking branch 'origin/main' into test-stand-ci

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
0475793
chore(stand): clear the validation-sweep warnings

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
fce64e1
fix(stand): seed to a resolved stand — run the identity projection and rebuild gold

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
bc764b8
ci(stand): TEMPORARY debug trigger for a pre-merge CI run — delete before merge

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
8da7f87
test(stand): un-xfail test_metric_results_200 — #2447 verified on the stand

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
51ad3b8
Revert "ci(stand): TEMPORARY debug trigger for a pre-merge CI run — delete before merge"

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
063e677
Merge remote-tracking branch 'origin/main' into test-stand-ci

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
91346c3
Reapply "ci(stand): TEMPORARY debug trigger for a pre-merge CI run — delete before merge"

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
9adffd0
Revert "Reapply "ci(stand): TEMPORARY debug trigger for a pre-merge CI run — delete before merge""

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
e6b7262

Commits on Aug 13, 2026

Merge remote-tracking branch 'origin/main' into test-stand-ci

Konstantin Tursunov
authored and
Konstantin Tursunov
committed
f28d1f2