Batch YAML reference checks and reuse declarations #605

Merged

binjovi-bot merged 2 commits from perf/seanfarm-reference-guards into trunk

2026-09-10 22:47:13 +00:00

sean commented

2026-09-10 22:35:52 +00:00

Owner

The replacement resolves the same 70 service-account references and 129 declarations. All original secret negative controls, ten relation mutations, and malformed-template/read-order fixtures pass with Python denied; shellcheck and syntax checks pass. Four replacement guards took 3.78 seconds in one local observation, versus 49.57 seconds for the old secret guard alone. These are observations, not matched pipeline savings.

Replace Python in four guards with one batched YAML read and shared jq relations. Reuse secret declarations across component checks and negative controls; preserve the existing malformed Flux template exclusions, while requiring component YAML to parse. The replacement resolves the same 70 service-account references and 129 declarations. All original secret negative controls, ten relation mutations, and malformed-template/read-order fixtures pass with Python denied; shellcheck and syntax checks pass. Four replacement guards took 3.78 seconds in one local observation, versus 49.57 seconds for the old secret guard alone. These are observations, not matched pipeline savings.

sean added 1 commit

2026-09-10 22:35:52 +00:00