kevinveenbirkenbach/computer-playbook
1
0 Fork 0
mirror of https://github.com/kevinveenbirkenbach/computer-playbook.git synced 2026-11-06 10:59:59 +00:00
Code Issues Packages Projects Releases Wiki Activity
14,682 Commits 9 Branches 78 Tags
fix/dev-python/python-upper-bound
Commit Graph
2 Commits
Author SHA1 Message Date
kevinveenbirkenbachandClaude Opus 4.8 48753de136 feat(deploy-verify): scope required_by coverage to deploy modes (compose/swarm) 
The required_by coverage verifier treated every flat 'required_by: {categories/roles}' as required in BOTH deploy modes. But sys-ctl-rpr-container-hard/soft repair compose compositions (DIR_COMPOSITIONS) and gate their body to compose; declaring required_by:[web] flat made the verifier expect them on swarm too, where they correctly skip, so web-opt-rdr-domains swarm CI failed 'required role(s) did not execute'. Let required_by nest under 'compose:'/'swarm:'; the verifier infers the deploy mode from the role set, mirroring DEPLOYMENT_MODE's own groups['svc-swarm-node'] definition, and enforces only the matching mode.

Migrate all 21 existing flat declarations to mirror under both modes (behavior unchanged) and mark sys-ctl-rpr-container-* compose-only. role_has_required_by reads both forms. New lint test_required_by_mode_keys requires the explicit compose:/swarm: form so the flat-vs-gate contradiction can't recur.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
 2026-06-25 14:59:57 +02:00
kevinveenbirkenbachandClaude Opus 4.7 1866d624e3 feat(roles): expand required_by[web] for deploy verifier (Bundle B) 
Annotates 23 non-invokable system roles with `required_by: { categories: [web] }`
in their meta/services.yml so the runtime verifier
(cli.meta.roles.services.called) flags coverage regressions when any web-app
deploy fails to trigger them.

Covers: docker mgmt (cln/hlth/rpr/bkp), compose chain (svc-compose, svc-compose-ca,
svc-container), stack assembly (stk-full, stk-front-proxy), front-inj-all,
alm (compose/email), cln (anon-volumes, bkps, certs, disc-space, faild-bkps),
hlth (container, disc-space, journalctl, volumes), rpr (container-hard/-soft),
mtn-cert (deploy/renew).

Scope deliberately narrowed to [web] only — svc is reserved for explicit
service-only deploys to avoid false positives.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
 2026-05-23 04:23:45 +02:00