NationTech/harmony
3
0
Fork 2
Code Issues 39 Pull Requests 11 Actions Packages Projects Releases 1 Wiki Activity

review/2026-09-08 #349

Open
johnride wants to merge 0 commits from review/2026-09-08 into master
pull from: review/2026-09-08
merge into: NationTech:master
Conversation 0 Commits - Files Changed -
johnride commented 2026-09-11 13:19:25 +00:00
Owner
Copy Link
No description provided.
johnride added 4 commits 2026-09-11 13:19:26 +00:00
refactor: drop harmony_app landfill eea006535b 
Scores own deploy. harmony_app is identity, images, context, and
HarmonyApp→Scores. Authoring DX lives in dx. Compose/chart/Application
model and the Helm render test are gone.
feat: read device pull secrets from the deployment subtree 7ed471a6bf 
Agent get_raw is {prefix}/{deployment}/{image_pull_secret}. Grant
policy is that subtree only. Drop DEVICE_PULL_SECRET_PATH.
feat: publish fleet-agent with OpenBao RegistryCredentials 8b8fdb5615 
When HARMONY_ZITADEL_KEY_JSON and --deploy-manifest are set, the
tenant release-agent bin publishes via AppContext. Device patch
stays in release.sh. REGISTRY_* remains the fallback.
refactor: grant policy does not re-validate pull secret names
All checks were successful
Run Check Script / check (pull_request) Successful in 11m18s
Details
c865ad2cee 
Aggregator already admits image_pull_secret references. Policy is the
deployment subtree only.
johnride added 13 commits 2026-09-15 04:02:55 +00:00
fix: publish harmony/* with the Fleet bot OpenBao tree ff64b1fc35 
hub.nationtech.io/harmony images read RegistryCredentials from
harmony/harmony-fleet via the Fleet Zitadel key. Tenant
detexion/harmony-fleet is not used for Harbor push.
feat: add harmony-fleet operate CLI; release.sh does not patch Devices 253a5cb692 
Operate: cargo run -p harmony-fleet-deploy --bin harmony-fleet --
--context <openbao-ns> device list|upgrade. Tenant key to ClusterAccess.
Release: fleet/scripts/release.sh no longer takes --device.
docs: three Fleet jobs; release.sh only publishes images 1c11dd0b8a 
Operate is harmony-fleet. Provision is the tenant deploy crate.
Release.sh rejects tenant flags. target-agent.sh is gone.
fix: merge-patch Device upgrades; reject tagged agent URLs 6a5052765c 
Operate patches only spec.agentUpgrade. Release always targets
hub.nationtech.io/harmony.
feat: Fleet operate domain and thin CLI 8398dea3b2 
harmony-fleet holds tenant session, Harbor catalog, device/operator/
deployment ops. harmony-fleet-cli is clap only. Upgrade takes --version
and resolves the digest from Harbor. Deploy crate is Scores/release again.
fix: operator upgrade preserves containers; pin callout too b6e06485f4 
Get-then-replace image on named containers. CLI resolves operator and
callout from Harbor for the same version.
fix: check agent version and parse digest lines in release.sh 16dc28f99d 
Anchor x86 --version to the last word, check aarch64 via qemu or
strings, and read agent=/operator=/callout= from stdout only.
feat: Pin, Agent, and Tenant for Fleet operate 1dc24784e9 
Harbor mints digest-pinned Pins from --version/--arch. The CLI is clap
plus OpenBao. Tenant writes Agent onto Device and ResolvedVersions onto
operator/callout.
docs: operate CLI resolves Harbor tags with --tenant 0071ec1246
feat: print headers on harmony-fleet list tables 9c6e56e1c4 
Device list columns are DEVICE, VERSION, REACHABILITY, UPGRADE so
upgrade phase is not mistaken for reachability.
docs: record owner corrections from the Fleet operate pass ee7501908d
docs: ask the owner before inventing jobs, identities, or secret paths 3dceab878f 
Agents fail by coding a product shape nobody chose. AGENTS.md and the
code-review skill now require asking and waiting on those forks.
feat: fleet cli better device status message
All checks were successful
Run Check Script / check (pull_request) Successful in 1m26s
Details
3f8cf99020
johnride added 1 commit 2026-09-16 02:08:28 +00:00
feat: improve fleet UX for enrollement with simple tag flag and better app publish UX
Some checks failed
Run Check Script / check (pull_request) Failing after -42s
Details
16aac0e0df
Some checks failed
Run Check Script / check (push) Successful in 1m5s
Details
Compile and package harmony_composer / package_harmony_composer (push) Failing after 41s
Details
Run Check Script / check (pull_request) Successful in 25s
Details
This branch is already included in the target branch. There is nothing to merge.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin review/2026-09-08:review/2026-09-08
git checkout review/2026-09-08
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
Architecture Decision Record
Good first issue
RFC
No Label
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
johnride leokumojin reda sbernier stremblay
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: NationTech/harmony#349
No description provided.
Delete Branch "review/2026-09-08"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?