release v6cd37e20327a (6cd37e2032) #641

Merged

pipeline-bot merged 1 commit from _promote/v6cd37e20327a-r1 into main 2026-08-06 01:50:27 +00:00

Conversation 0 Commits 1 Files changed 1 +20 -1

pipeline-bot commented 2026-08-06 01:50:26 +00:00

Collaborator

Copy link

No description provided.

pipeline-bot added 1 commit 2026-08-06 01:50:26 +00:00

docs(guard): scope the ACME guard to the approval record ... 6cd37e2032

The header claimed "An unapproved flip — commit or agent — goes CI-red
at the merge gate". That is false for the LIVE knob, and it is precisely
the sentence that makes a reader believe this file is the gate.

It is not. The field this guard watches, Stack.spec.tls.acmeServer, is
read by no composition patch and defaults to staging in
apis/stack/xrd.yaml; it is the retained committed record of the
2026-06-13 approval, and this guard keeps that record from being edited
without one.

The live ClusterIssuer/letsencrypt renders from sean/pipelines
bundle/dns/issuer.yaml (-> ArgoCD app `dns`) and signs all 16
portal-gateway certs. It is guarded by that repo's own
tests/check-acme-approval.sh — same marker rule, plus a floor that fails
when no ACME directory URL exists anywhere, so it cannot pass vacuously
if the knob relocates — enforced through pipeline/ci ->
pipeline-validate-with-operator -> pipeline-validate -> tests/check.sh.

Comment-only: scopes the claim, names the real gate by path, and asks
that the two files' scope comments be kept in agreement. sean/pipelines'
guard already describes the relationship correctly; this makes
platform-seanfarm agree rather than contradict it.

Verified: tests/check-acme-approval.sh green, full tests/check.sh green.

pipeline-bot merged commit 6cd37e2032 into main 2026-08-06 01:50:27 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/platform-seanfarm!641

No description provided.