merge feat/extraction-wave (57f911a415) #29

Merged

pipeline-bot merged 1 commit from feat/extraction-wave into trunk 2026-07-16 14:24:39 +00:00

Conversation 0 Commits 1 Files changed 10 +745 -3

pipeline-bot commented 2026-07-16 14:23:56 +00:00

Collaborator

Copy link

No description provided.

pipeline-bot added 1 commit 2026-07-16 14:23:56 +00:00

feat(extract): IsRemoteGone delete fold + Metrics kit + secret-drift helpers + httpkit ... 57f911a415

The extraction wave from the 2026-07-15 audit — four surfaces every
operator duplicated divergently:

- Config.IsRemoteGone: harness-level not-found-as-success on the delete
  path (openbao folded in its adapter, forgejo per-handler, kratos in
  the HTTP client; the same status-lost-CR leak was fixed twice in 24h).
  Unmatched errors keep exact current semantics — deliberate holds work.
- reconcile.Metrics + Config wiring: reconcile_total/duration +
  status_update_total recorded by Run itself; InstrumentedCall/
  RecordCall for API clients (both success/error and raw-status forms).
  Name-spaced per operator so dashboards survive adoption.
- SecretValue/HashValue/HashCanonical: both write-only-secret
  fingerprint conventions, chosen per field sensitivity.
- httpkit: ClusterCATransport, CredentialCache[C] (build-outside-lock,
  rebuild-on-rotation), BoundedRead/ErrorExcerpt (bounded to
  MaxConditionMessageBytes so excerpts never re-truncate downstream).

pipeline-bot force-pushed feat/extraction-wave from 57f911a415 to adb1dcf72a 2026-07-16 14:24:01 +00:00 Compare

pipeline-bot merged commit 82ab083ea8 into trunk 2026-07-16 14:24:39 +00:00

pipeline-bot deleted branch feat/extraction-wave 2026-07-16 14:24:39 +00:00

pipeline-bot referenced this pull request from a commit 2026-07-16 14:24:40 +00:00

Merge pull request 'merge feat/extraction-wave (57f911a415ab)' (#29) from feat/extraction-wave into trunk

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/libseanfarm-operator!29

No description provided.