Repository navigation
codegen-orchestrator-1713: Skip unchanged deploy-owned secret payloads - #853
Merged
Merged
Conversation
… receipt A deploy digests the GitHub repository id and its six deployer-owned secret values. A matching receipt from an earlier complete write skips those six PUTs and their public-key reads; REGISTRY_* are still written on every deploy. The receipt is claimed (hit or deleted) and published in Lua scripts that compare the project deploy lock first, and published only after all nine secrets were set. Every secret PUT attempt, retries included, checks the lock through the shared request guard, and a refusal stops the batch as DeployFenceLost.
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What
Candidate: branch pipeline/codegen-orchestrator-1713, commit 14b0f5c (tree dacfc1988c8bb3bd02f544907f739f447a558b26), based on main 9f24567. One commit, no AI trailer, TASK.md not committed.
git status --porcelainis empty.Why
Skip unchanged writes of the six deployer-owned GitHub secrets using a successful-payload digest retained across deploy jobs. This is the next independently mergeable d6 increment of sprint1496. The three REGISTRY_* secrets stay on their current refresh path in this increment; d6 remains open until their shared-writer boundary is handled separately.
How verified
CI runs
Backend Docker-in-Docker Integration Tests,Build Service Image Candidates,Build Worker Base Image Candidates,CI Contract,Detect Changed Services,Fast Checks (Unit Tests),Lint (Ruff),Publish Service Image Release,Publish Worker Base Images,Required CI Gate,Service Image Entrypoint Importson14b0f5c2d611; the merge waits for them to pass.Card:
codegen-orchestrator-1713