fix(deploy): validate resolved Compose config and namespaced Secrets #84

Merged

forust merged 2 commits from fix/deploy-validation into main 2026-10-06 14:54:29 +00:00

Conversation 0 Commits 2 Files Changed 7

+147 -42

forust commented 2026-10-06 14:23:08 +00:00

Owner

Copy link

Copy source

Deploy preflight currently disables Compose interpolation and file resolution, and checks Secrets by name across all namespaces. Missing local settings or a Secret in the wrong namespace can pass validation. CI also misses the three manually named Compose entry points.

Resolve active Compose configuration on the deployment host. Discover all tracked *compose.yaml/*compose.yml files for CI. Extract required pod Secret references from rendered JSON and check each namespace/name pair, including mounted/projected Secrets and init containers; honor optional references.

Validation: shell regressions for discovery, missing variables, Secret namespace/optional handling, and render failures; ShellCheck and actionlint. Regression checks are wired into CI. Checks establish Secret existence/access, not key contents or password validity.

Deploy preflight currently disables Compose interpolation and file resolution, and checks Secrets by name across all namespaces. Missing local settings or a Secret in the wrong namespace can pass validation. CI also misses the three manually named Compose entry points. Resolve active Compose configuration on the deployment host. Discover all tracked *compose.yaml/*compose.yml files for CI. Extract required pod Secret references from rendered JSON and check each namespace/name pair, including mounted/projected Secrets and init containers; honor optional references. Validation: shell regressions for discovery, missing variables, Secret namespace/optional handling, and render failures; ShellCheck and actionlint. Regression checks are wired into CI. Checks establish Secret existence/access, not key contents or password validity.

forust added 1 commit 2026-10-06 14:23:09 +00:00

fix(deploy): resolve Compose config and check namespaced pod Secrets ff40a71145

forust added 1 commit 2026-10-06 14:31:51 +00:00

fix(ci): install jq for deploy validation regressions 8d3185f8ab

forust merged commit 080ae343e6 into main 2026-10-06 14:54:29 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

docker

homelab

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

renovate-bot forust

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: forust/homelab#84