NationTech/harmony

fix: app-deploy safety — no secret helm dump, jwt mount, ingress, smoke #347

Open

johnride wants to merge 5 commits from fix/app-deploy-safety into master

Author	SHA1	Message	Date
johnride	010332a083	Merge pull request 'chore: clear compile warnings; retire SecretManager' (#346 ) from chore/clear-compile-warnings into fix/app-deploy-safety All checks were successful Run Check Script / check (pull_request) Successful in 1m44s Details Reviewed-on: #346	2026-08-08 23:59:15 +00:00
Jean-Gabriel Gill-Couture	3163d916b1	feat: bump harmony composer docker rust version All checks were successful Run Check Script / check (pull_request) Successful in 1m51s Details	2026-08-08 19:55:22 -04:00
Jean-Gabriel Gill-Couture	7bd78c9ab5	fix: format imports	2026-08-08 19:54:57 -04:00
Jean-Gabriel Gill-Couture	3b2da4d6ff	chore: clear compile warnings; retire SecretManager Some checks failed Run Check Script / check (pull_request) Failing after 2s Details - Migrate callers from SecretManager to harmony_config::get_or_prompt - Lazy-init global ConfigClient from HARMONY_SECRET_NAMESPACE - Convert remaining Secret derives to Config + #[config(secret)] - Remove deprecated SecretManager - Retry::spawn → start; drop unused import; cfg-gate nm_bond_mode - allow(deprecated) on legacy ApplicationScore examples	2026-08-07 19:12:10 -04:00
Jean-Gabriel Gill-Couture	633c9990a4	fix: app-deploy safety — no secret helm dump, jwt mount, ingress, smoke All checks were successful Run Check Script / check (pull_request) Successful in 1m52s Details - Drop Zitadel Helm values trace (embeds admin password) - Honor OPENBAO_JWT_AUTH_MOUNT on assignment role read/write - Fail loud on unknown ingress endpoint instead of silent None - Gate smoke checks on rollout.readiness.wait	2026-08-07 19:04:53 -04:00