review/2026-09-08 #349

Open
johnride wants to merge 4 commits from review/2026-09-08 into master

4 Commits

Author SHA1 Message Date
c865ad2cee refactor: grant policy does not re-validate pull secret names
All checks were successful
Run Check Script / check (pull_request) Successful in 11m18s
Aggregator already admits image_pull_secret references. Policy is the
deployment subtree only.
2026-09-08 22:14:28 -04:00
8b8fdb5615 feat: publish fleet-agent with OpenBao RegistryCredentials
When HARMONY_ZITADEL_KEY_JSON and --deploy-manifest are set, the
tenant release-agent bin publishes via AppContext. Device patch
stays in release.sh. REGISTRY_* remains the fallback.
2026-09-08 22:10:41 -04:00
7ed471a6bf feat: read device pull secrets from the deployment subtree
Agent get_raw is {prefix}/{deployment}/{image_pull_secret}. Grant
policy is that subtree only. Drop DEVICE_PULL_SECRET_PATH.
2026-09-08 22:10:38 -04:00
eea006535b refactor: drop harmony_app landfill
Scores own deploy. harmony_app is identity, images, context, and
HarmonyApp→Scores. Authoring DX lives in dx. Compose/chart/Application
model and the Helm render test are gone.
2026-09-08 22:10:34 -04:00