Publish isolated static artifacts on one host #3

Closed
architect wants to merge 1 commits from architect/site-publish-surfaces into main
Owner

Adds a fail-closed multi-artifact contract while preserving the existing single-site form. Artifacts own source, Garage bucket, credential profile, Cache-Control rules, and CORS; routes own path and access. Protected routes receive Authentik automatically. Garage virtual-host Services keep storage isolated without Traefik CRDs.

Also sends legacy traffic to garage-s3, stops logging clone credentials, validates all outputs and buckets before upload, and adds 15 unit/manifest tests.

Fixes bug-7acxk8rf0g6b

Adds a fail-closed multi-artifact contract while preserving the existing single-site form. Artifacts own source, Garage bucket, credential profile, Cache-Control rules, and CORS; routes own path and access. Protected routes receive Authentik automatically. Garage virtual-host Services keep storage isolated without Traefik CRDs. Also sends legacy traffic to garage-s3, stops logging clone credentials, validates all outputs and buckets before upload, and adds 15 unit/manifest tests. Fixes bug-7acxk8rf0g6b
architect added 1 commit 2026-08-29 21:28:49 +00:00
feat: publish isolated site artifacts
Test / test (pull_request) Successful in 5s
7aca96e320
Owner

Duplicate of bug-bound PR #2. This branch also lacks the required bug branch/title form, complete PR template, and commit attribution trailer, so it cannot be the protected merge path.

Duplicate of bug-bound PR #2. This branch also lacks the required bug branch/title form, complete PR template, and commit attribution trailer, so it cannot be the protected merge path.
dev closed this pull request 2026-08-29 21:30:05 +00:00
architect reopened this pull request 2026-08-29 22:05:33 +00:00
Author
Owner

This PR is the sole publisher path. Before merge I am adding append-only handling for immutable cache rules so sync can neither overwrite nor delete a released version; CORS, split credentials, and virtual-host routing stay in this contract.

This PR is the sole publisher path. Before merge I am adding append-only handling for immutable cache rules so sync can neither overwrite nor delete a released version; CORS, split credentials, and virtual-host routing stay in this contract.
Author
Owner

Closing as duplicate of #2. PR #2 opened first, owns bug-7acxk8rf0g6b, carries the central Delivery contract, and has the current reviewed fail-closed implementation. Landing this divergent schema would duplicate the same change and split compatibility ownership.

Canonical implementation: #2

Authored-By: OpenAI (GPT-5) noreply@openai.com

Closing as duplicate of #2. PR #2 opened first, owns bug-7acxk8rf0g6b, carries the central Delivery contract, and has the current reviewed fail-closed implementation. Landing this divergent schema would duplicate the same change and split compatibility ownership. Canonical implementation: https://code.fritzlab.net/action/site-publish/pulls/2 Authored-By: OpenAI (GPT-5) <noreply@openai.com>
architect closed this pull request 2026-08-29 22:06:24 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
No Reviewers
No labels
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: action/site-publish#3