[bug-7acxk8rf0g6b] feat(delivery): publish multiple surfaces #1

Closed
dev wants to merge 2 commits from dev/bug-7acxk8rf0g6b/publish-multiple-surfaces into main
Owner

Summary

Publish independent public and authenticated static artifacts on one hostname with fail-closed routing, storage, credential, and cache contracts.

Changes

  • Add the schema v2 artifact and longest-prefix route model, atomic immutable releases, revalidated channel pointers, unique publication authorities, and explicit single-surface-v1 compatibility.
  • Generate one certificate with separate bucket-specific Services and Ingresses, correct the legacy Garage website backend, remove stale manifests, and keep Git credentials out of argv and command output.
  • Add repository contract documentation, public/private fixtures, rejection tests, cache tests, credential-safety tests, and pull-request CI.

Validation

  • python3 -m unittest discover -v — 15 tests pass.
  • kubectl --context sjc001 apply --dry-run=server for the three fixture Services and three Ingresses — all accepted.
  • IPv6 request to garage-s3.storage.svc.k8s.sjc001.fritzlab.net with Host docs.fritzlab.net — HTTP 200 with cache-control public, max-age=0, must-revalidate.

Tracking

Fixes bug-7acxk8rf0g6b

Attribution

Authored-By: OpenAI (GPT-5) noreply@openai.com

## Summary Publish independent public and authenticated static artifacts on one hostname with fail-closed routing, storage, credential, and cache contracts. ## Changes - Add the schema v2 artifact and longest-prefix route model, atomic immutable releases, revalidated channel pointers, unique publication authorities, and explicit single-surface-v1 compatibility. - Generate one certificate with separate bucket-specific Services and Ingresses, correct the legacy Garage website backend, remove stale manifests, and keep Git credentials out of argv and command output. - Add repository contract documentation, public/private fixtures, rejection tests, cache tests, credential-safety tests, and pull-request CI. ## Validation - python3 -m unittest discover -v — 15 tests pass. - kubectl --context sjc001 apply --dry-run=server for the three fixture Services and three Ingresses — all accepted. - IPv6 request to garage-s3.storage.svc.k8s.sjc001.fritzlab.net with Host docs.fritzlab.net — HTTP 200 with cache-control public, max-age=0, must-revalidate. ## Tracking Fixes bug-7acxk8rf0g6b - Bug [bug-7acxk8rf0g6b](https://agenthub.fritzlab.net/bug-7acxk8rf0g6b) ## Attribution Authored-By: OpenAI (GPT-5) <noreply@openai.com>
dev added 1 commit 2026-08-29 21:22:18 +00:00
feat(delivery): publish multiple surfaces
Test / test (pull_request) Failing after 5s
099a48f2b5
Authored-By: OpenAI (GPT-5) <noreply@openai.com>
dev added 1 commit 2026-08-29 21:24:16 +00:00
fix(ci): allow managed runner dependencies
Test / test (pull_request) Successful in 17s
49fcd8dafc
Authored-By: OpenAI (GPT-5) <noreply@openai.com>
Author
Owner

Superseded by PR #2, which owns the selected split-surface contract and complete fixture suite. PR #1 will not merge; its atomic immutable-write and credential-safe push findings are recorded as required changes on PR #2.

Superseded by PR #2, which owns the selected split-surface contract and complete fixture suite. PR #1 will not merge; its atomic immutable-write and credential-safe push findings are recorded as required changes on PR #2.
dev closed this pull request 2026-08-29 21:29:51 +00:00

Pull request closed

This pull request cannot be reopened because the branch was deleted.
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: action/site-publish#1