fix(f3): prepare light and sidecar smoke batch #309

Merged

pdurlej merged 1 commit from codex/f3/light-sidecar-batch-prep into main

2026-05-17 01:49:55 +02:00

codex commented

2026-05-17 01:44:23 +02:00

Collaborator

Canary status: missing — Forgejo PR checks will run on open; operator merge after green/accepted evidence.

Canary Context Pack

Product story

Continue RS2000 migration with the next low-risk batch while preserving F3 backup discipline for sidecar-bound modules.

What changed

honcho-api health now probes through Tailnet (tailnet-https://honcho.pdurlej.com/health) because public edge correctly returns 403.
karakeep strict-v2 text is shortened and health now uses its real endpoint (https://archive.pdurlej.com/api/health).
platformctl manual F3 override now accepts sidecar-bound modules when backup_ref is present, matching Karakeep's state model.
Workflow input copy now says stateful/sidecar no-op smoke.

Why it changed

The requested batch includes stateless modules plus karakeep as sidecar-bound. Current policy allowed only stateful, which blocked a backup-backed Karakeep no-op smoke even though the operator explicitly selected it.

Files touched

.forgejo/workflows/platformctl-auto-apply.yml
control-plane/platformctl/ci/auto_apply_scope.py
control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py
modules/honcho-api/module.yaml
modules/karakeep/module.yaml

Runtime evidence

RS2000 release root: /opt/pdurlej-platform/current -> releases/5a8d77a4132e68228d531d688e317d146e83348a
forgejo-deploy-runner.service=active
forgejo-deploy-runner-watchdog.timer=active
No unhealthy containers reported; 64 containers listed.
curl --resolve honcho.pdurlej.com:443:100.110.188.20 https://honcho.pdurlej.com/health -> 200
curl https://archive.pdurlej.com/api/health -> 200
home-platform-honcho-api-1=running/healthy
home-platform-karakeep-1=running/healthy

Known constraints

minio-init is not included in this smoke batch. It is currently strict-v2 incomplete and live container home-platform-minio-init-1 is exited=1; its Docker command is effectively sh -c mc, so it prints mc help and exits. That requires a separate real-change/init fix, not a no-op F3 smoke.
karakeep still requires backup-before-apply before dispatch because it is sidecar-bound.

Explicit out-of-scope

No MinIO init repair.
No real-change apply.
No F3 smoke execution in this PR.

Requested decision

Merge this prep PR, then run the batch sequentially: coredns, honcho-api, honcho-deriver, and karakeep after backup.

Merge blockers

strict-v2 validation fails for coredns, honcho-api, honcho-deriver, or karakeep
sidecar-bound F3 scope test fails
health regression in test_health_phase3.py

Spec sources read

modules/coredns/module.yaml — requested batch manifest
modules/honcho-api/module.yaml — requested batch manifest + probe fix
modules/honcho-deriver/module.yaml — requested batch manifest
modules/karakeep/module.yaml — requested batch manifest + probe/strict-v2 fix
modules/minio-init/module.yaml — requested batch manifest; excluded as blocker
compose/core/compose.yaml — coredns/minio-init service reality
compose/apps/compose.yaml — honcho-*/karakeep service reality
control-plane/platformctl/ci/auto_apply_scope.py — F3 scope guard
control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py — scope contract tests
tests/smoke.sh — HTTP probe behavior

Verification

PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/coredns/module.yaml -> OK
PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/honcho-api/module.yaml -> OK
PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/honcho-deriver/module.yaml -> OK
PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/karakeep/module.yaml -> OK
PYTHONPATH=control-plane control-plane/.venv/bin/python -m pytest control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py control-plane/platformctl/tests/test_health_phase3.py -> 51 passed
auto_apply_scope.py --module karakeep --allow-stateful --backup-ref /opt/pdurlej-platform/backups/karakeep-20260517T000000Z.tar.gz --fail-on-blocked -> eligible

Closes: none

Canary status: missing — Forgejo PR checks will run on open; operator merge after green/accepted evidence. ## Canary Context Pack ### Product story Continue RS2000 migration with the next low-risk batch while preserving F3 backup discipline for sidecar-bound modules. ### What changed - `honcho-api` health now probes through Tailnet (`tailnet-https://honcho.pdurlej.com/health`) because public edge correctly returns 403. - `karakeep` strict-v2 text is shortened and health now uses its real endpoint (`https://archive.pdurlej.com/api/health`). - `platformctl` manual F3 override now accepts `sidecar-bound` modules when `backup_ref` is present, matching Karakeep's state model. - Workflow input copy now says stateful/sidecar no-op smoke. ### Why it changed The requested batch includes stateless modules plus `karakeep` as sidecar-bound. Current policy allowed only `stateful`, which blocked a backup-backed Karakeep no-op smoke even though the operator explicitly selected it. ### Files touched - `.forgejo/workflows/platformctl-auto-apply.yml` - `control-plane/platformctl/ci/auto_apply_scope.py` - `control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py` - `modules/honcho-api/module.yaml` - `modules/karakeep/module.yaml` ### Runtime evidence - RS2000 release root: `/opt/pdurlej-platform/current -> releases/5a8d77a4132e68228d531d688e317d146e83348a` - `forgejo-deploy-runner.service=active` - `forgejo-deploy-runner-watchdog.timer=active` - No unhealthy containers reported; 64 containers listed. - `curl --resolve honcho.pdurlej.com:443:100.110.188.20 https://honcho.pdurlej.com/health` -> `200` - `curl https://archive.pdurlej.com/api/health` -> `200` - `home-platform-honcho-api-1=running/healthy` - `home-platform-karakeep-1=running/healthy` ### Known constraints - `minio-init` is not included in this smoke batch. It is currently strict-v2 incomplete and live container `home-platform-minio-init-1` is `exited=1`; its Docker command is effectively `sh -c mc`, so it prints `mc` help and exits. That requires a separate real-change/init fix, not a no-op F3 smoke. - `karakeep` still requires `backup-before-apply` before dispatch because it is `sidecar-bound`. ### Explicit out-of-scope - No MinIO init repair. - No real-change apply. - No F3 smoke execution in this PR. ### Requested decision Merge this prep PR, then run the batch sequentially: `coredns`, `honcho-api`, `honcho-deriver`, and `karakeep` after backup. ### Merge blockers - strict-v2 validation fails for `coredns`, `honcho-api`, `honcho-deriver`, or `karakeep` - sidecar-bound F3 scope test fails - health regression in `test_health_phase3.py` ## Spec sources read - `modules/coredns/module.yaml` — requested batch manifest - `modules/honcho-api/module.yaml` — requested batch manifest + probe fix - `modules/honcho-deriver/module.yaml` — requested batch manifest - `modules/karakeep/module.yaml` — requested batch manifest + probe/strict-v2 fix - `modules/minio-init/module.yaml` — requested batch manifest; excluded as blocker - `compose/core/compose.yaml` — `coredns`/`minio-init` service reality - `compose/apps/compose.yaml` — `honcho-*`/`karakeep` service reality - `control-plane/platformctl/ci/auto_apply_scope.py` — F3 scope guard - `control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py` — scope contract tests - `tests/smoke.sh` — HTTP probe behavior ## Verification - `PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/coredns/module.yaml` -> OK - `PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/honcho-api/module.yaml` -> OK - `PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/honcho-deriver/module.yaml` -> OK - `PYTHONPATH=control-plane control-plane/.venv/bin/python -m platformctl.cli validate --strict-v2 modules/karakeep/module.yaml` -> OK - `PYTHONPATH=control-plane control-plane/.venv/bin/python -m pytest control-plane/platformctl/tests/test_forgejo_ci_scripts_contract.py control-plane/platformctl/tests/test_health_phase3.py` -> 51 passed - `auto_apply_scope.py --module karakeep --allow-stateful --backup-ref /opt/pdurlej-platform/backups/karakeep-20260517T000000Z.tar.gz --fail-on-blocked` -> eligible Closes: none

codex added 1 commit

2026-05-17 01:44:24 +02:00

fix(f3): prepare light and sidecar smoke batch

base-is-main / guard (pull_request) Successful in 1s

Details

canary-required / collect-diff (pull_request) Successful in 4s

Details

infra-docs-drift / docs-drift (pull_request) Successful in 4s

Details

patchwarden-pr-sanity / collect-diff (pull_request) Successful in 3s

Details

platformctl plan / auto-apply scope (pull_request) Successful in 20s