sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests Projects Releases 386 Packages Wiki Activity

feat(kernel-roll): RustFS gates the roll; the retiring MinIO pair does not #528

Merged
binjovi-bot merged 1 commit from sean/rustfs-gates-the-roll into trunk 2026-09-10 04:18:26 +00:00 AGit
Conversation 0 Commits 1 Files changed 7 +41 -29
sean commented 2026-09-10 03:53:25 +00:00
Owner
Copy link

With zot on RustFS the store holds the kernel image spine, so rustfs and rustfs-identities lose the kernel-roll gates=false exemption and minio-instance/minio-operator gain it (retiring). The three guards move with it: check-roll-gate-exemptions.sh allow-lists the MinIO pair; rustfs.sh and rustfs-identities.sh now fail if the exemption returns. Lands with the zot repoint; Binjovi's own gate change (minio out of the pod floor and probe) follows between kernel rolls. https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76

With zot on RustFS the store holds the kernel image spine, so rustfs and rustfs-identities lose the kernel-roll gates=false exemption and minio-instance/minio-operator gain it (retiring). The three guards move with it: check-roll-gate-exemptions.sh allow-lists the MinIO pair; rustfs.sh and rustfs-identities.sh now fail if the exemption returns. Lands with the zot repoint; Binjovi's own gate change (minio out of the pod floor and probe) follows between kernel rolls. https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76
feat(kernel-roll): RustFS gates the roll; the retiring MinIO pair does not
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
a880c2f2ba
 
With zot on RustFS the store holds the kernel image spine: a roll that
reboots a node while RustFS is not Ready is a roll that cannot pull its next
node image. `rustfs` and `rustfs-identities` (which delivers zot's key) lose
the kernel-roll.seanfarm.io/gates="false" exemption they carried as an
evaluation install holding observability data only. `minio-instance` and
`minio-operator` gain it: nothing on the kernel path reads MinIO after the
cutover, and a tenant on its way out must not hold a roll. Both entries
leave with their directories in Stage 5.

The three guards move with it: check-roll-gate-exemptions.sh allow-lists the
MinIO pair and not the RustFS pair; rustfs.sh and rustfs-identities.sh now
FAIL if the exemption returns, where they used to fail if it was missing.
The rustfs.sh header no longer calls the store an evaluation.

Lands with the zot repoint (sean/zot), after the copy's diff gate reads
zero, and together with Binjovi's own gate change (the roll's per-namespace
pod floor and runtime probe move from minio to rustfs; its policy digest
moves, so between rolls).

Claude-Session: https://claude.ai/code/session_01KZoQin34jeyt6nDGqvJA76
sean force-pushed sean/rustfs-gates-the-roll from a880c2f2ba
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
to 73adf9d970
All checks were successful
binjovi/ci Binjovi completed the frozen plan
Details
2026-09-10 04:12:12 +00:00 Compare
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/seanfarm!528
No description provided.