Story 16.5 — helm test smoke + comprehensive CI/CD - #10
Merged
Conversation
Add the chart-repo CI workflow (.github/workflows/federation-helm.yml) plus the deploy-es.sh / install-sealed-secrets.sh scripts, and the helm test smoke Job. CI redesigned for the chart-only repo: the sbt build-images job is replaced by an image-availability probe that docker-pulls the PUBLIC DockerHub federation + sidecar images and kind-loads them; live-install jobs are gated on image publication and skip-with-warning until published (OQ-1). JFROG creds + setup-java/setup-sbt removed. All static-validation gates (lint, template+kubeconform, golden diff, zero kind:Secret, duckdb-attach discriminator) run unconditionally. Trigger paths updated to softclient4es-federation/**. Smoke = ADBC GetCatalogs (1/3/3 per example). README CI section + Chart.yaml metadata rewritten to match (softclient4es.dev, softclient4es-helm sources, public DockerHub images, private-repo references removed). Closes #9 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Add the canonical operator guide (softclient4es-federation/docs/operator-guide.md) that ships with the chart: prerequisites, single-cluster + multi-cluster paths, configuration reference, secret-backend chooser, licensing quota, migration, upgrades/rollback, troubleshooting + SRE incident-triage walkthrough. Authoritative copy — mirror language and private-repo references removed; working-directory convention uses softclient4es-federation/. Same Chart.yaml/README/CI rewrites as prior stories (softclient4es.dev metadata, public DockerHub images, chart-only CI). Closes #12 Refs #11 Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Story 16.6 — Operator guide
fupelaqu
marked this pull request as ready for review
June 23, 2026 11:51
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Adds the chart-repo CI workflow (
.github/workflows/federation-helm.yml), thedeploy-es.sh/install-sealed-secrets.shscripts, and thehelm testsmoke Job (ADBC Flight SQL GetCatalogs; 1/3/3 per example).CI redesign for a chart-only repo (no sbt build): the original sbt
build-imagesjob is replaced by animage-availabilityjob thatdocker manifest inspects the PUBLIC DockerHub federation + sidecar images; live-install jobsdocker pull+kind loadthose public tags and are gated onimages_published— they skip-with-warning until the images are published (OQ-1).JFROG_USER/JFROG_PASSWORDandsetup-java/setup-sbtremoved. All static-validation gates (helm lint, helm template + kubeconform -strict, golden-file diff, zerokind: Secret,type = "duckdb-attach"discriminator) run unconditionally. Trigger paths updated tosoftclient4es-federation/**.Static gates: helm lint OK (base + 3 examples), kubeconform OK, all 7 goldens match unchanged; workflow YAML parses (7 jobs).
Stacked on Story 16.4 (base:
feature/16.4). Part of the Epic-16 stacked chart chain. Live kind installs pull public DockerHub images, gated until published (OQ-1).Closes #9
🤖 Generated with Claude Code