2 Commits

Author	SHA1	Message	Date
autonomic-bot	32f00717ac	fix(2w): W0.9 WC1.1 hardening (proven live: healthy upgrade + marquee rollback) ... Bugs found by the live proof, fixed: - warmsnap: snapshot now swaps a <recipe>/snapshot/ SUBDIR, not the whole <recipe>/ dir — so the reconciler's sibling last_good file survives a snapshot swap (was being clobbered). - warm_reconcile: deploy_version captures abra's stdout (it writes FATA to stdout) in the error; add wait_undeployed() after every undeploy so snapshot/restore/redeploy don't race a half-removed swarm stack; the upgrade deploy is wrapped so a deploy FAILURE (not just unhealthy) also triggers rollback. (57 unit pass.) LIVE PROOF on warm keycloak (annotated fake tags via CCCI_SKIP_FETCH): (a) healthy upgrade 10.7.1->10.7.9: snapshot+deploy+health-pass, last_good committed=10.7.9, marker realm preserved. (b) MARQUEE rollback: broken latest 10.7.10 (lint-fail) -> rollback to 10.7.9, HEALTHY, marker realm INTACT (data preserved through broken-upgrade+restore), last_good NOT advanced, rollback alert written (attempted=10.7.10, last_good=10.7.9, recovered=True). keycloak recovered to canonical 10.7.1+26.6.2 healthy. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-29 01:21:05 +01:00
autonomic-bot	4cc1e15a53	feat(2w): W0.5 WC3 snapshot/restore helper (warmsnap.py) ... runner/harness/warmsnap.py: raw per-volume tar of an app's stack volumes while UNDEPLOYED, under /var/lib/ci-warm/<recipe>/ (meta.json + volumes/<vol>.tar); one last-good, atomic dir swap; restore clears+untars each volume back. Asserts undeployed (consistency). Reused by WC1.1 (pre-upgrade keycloak snapshot) + WC5. +5 unit tests (48 unit pass). LIVE round-trip PROVEN on warm keycloak: create marker realm -> undeploy -> snapshot (mariadb+providers vols) -> deploy -> delete marker (mutate DB) -> undeploy -> restore -> deploy -> marker realm BACK; keycloak healthy. WC3 core. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>	2026-05-29 00:12:46 +01:00