Skip to content

Maintain product config human grants#626

Merged
cbusillo merged 1 commit into
mainfrom
fix/merge-train-controller-safety
May 15, 2026
Merged

Maintain product config human grants#626
cbusillo merged 1 commit into
mainfrom
fix/merge-train-controller-safety

Conversation

@cbusillo
Copy link
Copy Markdown
Owner

Summary

  • stop the merge-train controller when the latest active candidate has failed
  • revalidate stack-collapse records against the current merge-train policy before controller execution/admission
  • reconcile signed-in product-config operator grants during deploy from repo variables instead of hardcoded logins/products/contexts

Validation

  • bash -n scripts/deploy/ensure-authz-grants.sh
  • shellcheck scripts/deploy/ensure-authz-grants.sh
  • uv run python -m unittest tests.test_service.LaunchplaneServiceTests.test_merge_train_controller_stops_after_candidate_failure tests.test_service.LaunchplaneServiceTests.test_merge_train_controller_rejects_planned_stack_after_policy_digest_changes tests.test_service.LaunchplaneServiceTests.test_merge_train_controller_advances_unstacked_batch_flow tests.test_service.LaunchplaneServiceTests.test_merge_train_controller_advances_stacked_batch_flow
  • uv run python -m unittest

Notes

Live #521 validation is currently blocked by a signed-in UI authz denial: launchplane_req_3b18826d09f74e388b2d75c044dceecc. This change makes deploy reconcile the missing DB-backed GitHub-human product_config.plan and product_config.apply grants from repository variables before retrying the UI flow.

@cbusillo cbusillo merged commit a33140f into main May 15, 2026
12 checks passed
@cbusillo cbusillo deleted the fix/merge-train-controller-safety branch May 15, 2026 00:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant