deploy: pre-release check tooling (creds rotation, upstream images on ROKS, operator-from-main recipe) - #9
Open
ibolton336 wants to merge 3 commits into
Open
ibolton336 wants to merge 3 commits into
ibolton336 wants to merge 3 commits into
Conversation
goose's Bedrock provider reports a context limit and cost but never
occupancy; the console showed that as a reading ("0 / 200K"). This mode
reproduces the shape so tackle2-ui#3608's chip fix is verifiable against
the contract fixture.
Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
The Gateways hold nothing; the Secret is the credential and pods read it at start. Validates key shape (placeholders were pasted in twice on 2026-09-17), requires a session token for ASIA keys, preflights one live Bedrock call, then applies and prints byte sizes only. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
…om-main recipe (B) There is no 0.11 release-candidate path: alphas are tagged off main, so quay.io/konveyor/*:latest and tackle2-operator-index:latest are the candidate. use-upstream-images.sh swaps ROKS to those digests (with rollback); release-candidate/ is the operator-driven install for a throwaway cluster, with pass criteria and a log of the first attempt. ROKS README gains credential rotation plus three gotchas met on the way: dead Bedrock keys, unanswered ask_user, bulk delete taking Running runs. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Everything from the 2026-09-17 "is main good to cut?" session, in three commits:
mock:MOCK_UNMETERED_CONTEXT=1— the usage shape goose's Bedrock provider sends on a real cluster (usedstuck at 0). What 🐛 Session panel: pin the plan, and stop the usage chip reporting what it cannot know konveyor/tackle2-ui#3608's chip fix was verified against.roks:set-bedrock-creds.sh— rotateaws-bedrock-credswithout the keys passing through a chat: shape checks (placeholders got pasted into the Secret twice), ASIA-needs-session-token, one live Bedrock preflight, then apply + byte sizes only.SECRET_NAMEoverride for upstream'sbedrock-credentials.deploy:release check A + B —roks/use-upstream-images.shswaps ROKS toquay.io/konveyor/*:latestby digest (withrollback);release-candidate/is the operator-from-main install for a throwaway cluster (olm-main.yaml, steps, pass criteria, and a log of the first attempt). ROKS README: credential rotation + three new gotchas (dead Bedrock keys, unansweredask_user, bulk delete taking Running runs).Tested: both scripts' rejection paths offline;
use-upstream-images.shforward path run for real on ROKS (rollback path not yet exercised);set-bedrock-creds.shapply/preflight path not run by me — it handles keys. Recipe B is untested end to end; the Subscription deliberately sets nochannel.Related: konveyor/agentic-controller#242, konveyor/tackle2-ui#3608.
🤖 Generated with Claude Code