fix: unblock stale La Suite Docs canonical #50

Merged
autonomic-bot merged 3 commits from fix/lasuite-docs-stale-base into main 2026-11-02 18:35:59 +00:00
Owner

What changed

  • After checking out a pinned upgrade base, fill secret-version variables removed from the current recipe's .env.sample. This lets a v5 La Suite Docs base generate its collab_ss secret.
  • Supply the two operator-managed RSA PEM keys required by the published v6 release before a v5-to-v6 upgrade.
  • Choose an unused OIDC secret version during canonical promotion so an old warm secret cannot block a new realm.
  • Keep all install, upgrade, backup, restore, and custom assertions unchanged.

Evidence

Unit tests: 15 passed. A cold run of tagged 1.0.1+v6.0.4 passed every test tier at level 5; it exposed a separate stale OIDC secret during canonical promotion, addressed in the final commit. A second full cold run is in progress to verify promotion.

## What changed - After checking out a pinned upgrade base, fill secret-version variables removed from the current recipe's `.env.sample`. This lets a v5 La Suite Docs base generate its `collab_ss` secret. - Supply the two operator-managed RSA PEM keys required by the published v6 release before a v5-to-v6 upgrade. - Choose an unused OIDC secret version during canonical promotion so an old warm secret cannot block a new realm. - Keep all install, upgrade, backup, restore, and custom assertions unchanged. ## Evidence Unit tests: 15 passed. A cold run of tagged `1.0.1+v6.0.4` passed every test tier at level 5; it exposed a separate stale OIDC secret during canonical promotion, addressed in the final commit. A second full cold run is in progress to verify promotion.
autonomic-bot added 3 commits 2026-11-02 18:32:43 +00:00
fix: prepare secrets from pinned La Suite Docs base
continuous-integration/drone/push Build is failing
c7545505f2
fix: provision v6 keys before a v5 to v6 upgrade
continuous-integration/drone/push Build is failing
53f204fc8c
fix: avoid stale OIDC secret during canonical promotion
continuous-integration/drone/push Build is failing
870f00d3e3
autonomic-bot merged commit d569e6528f into main 2026-11-02 18:35:59 +00:00
Sign in to join this conversation.
No Reviewers
No labels
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: recipe-maintainers/cc-ci#50