Skip to content

chore(operator): the hosting operator leaves core for MeshWeaver.Plugins (delete half) - #7119

Merged
rbuergi merged 4 commits into
mainfrom
chore/hosting-operator-leaves-core
Oct 25, 2026
Merged

chore(operator): the hosting operator leaves core for MeshWeaver.Plugins (delete half)#7119
rbuergi merged 4 commits into
mainfrom
chore/hosting-operator-leaves-core

Conversation

@rbuergi

@rbuergi rbuergi commented Oct 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Refs core slimming (the hosting operator leaves core). This is the DELETE half.

Pairs-with: Systemorph/MeshWeaver.Plugins#4137
Pairs-with: Systemorph/Memex#819

The two preconditions, and where each stands

  1. Systemorph/MeshWeaver.Plugins#4137 has merged and its Hosting Operator lane has PUBLISHED. Done: Plugins#4137 merged; its hosting-operator.yml run 40179992917 (push on Plugins main) pushed hosting-operator:364d07a-d587633-f2e13f7 and moved hosting-operator:main to the same digest, and its hourly scheduled runs are green since.
  2. The estate repository's aks-ops lane no longer checks out deploy/aks/operator/bin from core. Systemorph/Memex#819 does this. Every record pins hosting-operator:main (the estate's check-no-pins.py refuses a hash), and Exact-path reads run under the caller's identity, so gating applies #819 resolves that moving tag to the scripts' new home, MeshWeaver.Plugins deploy/hosting-operator/bin at main, with the chart from MeshWeaver.Deploy and the retention record from core. Immutable <plugins>-<core>[-<deploy>] tags resolve to their halves. This PR merges only after Exact-path reads run under the caller's identity, so gating applies #819 has merged.

Old <core sha7> pins keep working after this lands, because the scripts remain in core's history at those commits.

What this removes

  • deploy/aks/operator/ (bin, test, Dockerfile). The same trees are at Plugins deploy/hosting-operator: bin a6280377, test e16fd9a5, identical to main here, including the merged feat(operator): AnalyzeDump reports what holds the heap (gcheapstat, dumpheap -stat) #7100.
  • .github/workflows/hosting-operator.yml. Its memex-local steps (parse, shellcheck, behaviour tests, on every PR) are not the operator's, so they stay here unchanged as .github/workflows/memex-local.yml.
  • The operator's 16 entries in .github/manual-keyvault.allow. They moved to Plugins deploy/hosting-operator/manual-keyvault.allow, and the Plugins lane runs this repository's check-manual-keyvault.py over that directory. Here the gate reads clean … 1 allowed path glob.
  • The .gitignore re-include for deploy/aks/operator/bin.
  • Doc/Architecture/OperatorCredentialsByName, moved to Plugins Hosting/OperatorCredentialsByName. The two inbound links (Architecture.md, SecretsWriteOnlyEntry) point at /Hosting/OperatorCredentialsByName.

What changes so hosting-operator:main stays protected

release-channels.json declared hosting-operator.yml#publish as the writer of hosting-operator:main, and release-channels.py check requires a writer's workflow to exist in this tree. Deleting the workflow would therefore red that check. Dropping the binding would remove hosting-operator from the protected patterns the pruners read. So a binding may now name another repository: "repo": "Systemorph/MeshWeaver.Plugins". Such a binding is shape-validated but not opened here. New self-test cases:

  • a writer in another repository is not looked for in this tree;
  • a writer that names THIS repository explicitly still is (red on a missing workflow);
  • a malformed repo is refused;
  • the hosting-operator binding names MeshWeaver.Plugins.

release-channels self-test: passed (0 failure(s)), check .: 11 labels consistent.

Everything else

  • lock-pinned-digests.py: the ARM 13 fixture path and its docstring name the new location. The self-test passes.
  • Comments in check-workflow-shell.py, homebrew.yml and s1-extract-image.yml that named the old workflow are updated.
  • Path mentions in docs, the new-deployment skill and deploy/aks/manifests/hosting-operator/README.md point at MeshWeaver.Plugins/deploy/hosting-operator. INSTANCE-LIFECYCLE.md step 4 no longer tells anyone to docker build the image by hand.
  • Not touched: deploy/helm, deploy/helm-db, deploy/aks/scripts and deploy/aks/manifests/** (bytes). The operator image still bakes the chart from here, and manifests are applied by digest. test/MeshWeaver.Deployment.Contract.Test fixtures are also untouched: they name the image only, and a parallel change owns that project.
  • CarvingProjectsOutOfCore has a new section on moving a tool whose image carries core bytes.

Not moved: OperatingFromThePortal. It is the agent-facing manual of action kinds, linked from AGENTS.md, and its AnalyzeDump row describes the action, not operator internals. The same goes for DebuggingNativeCrashes → "Reading a production dump". Both now name the scripts' new path.

Local gates (re-run on the head merged with main)

  • Merge of main: deploy/aks/operator/test/run-tests.sh was modified on main by Per-hub Autofac child scopes cost ~55 KB per hub: replace Autofac with the standard container plus a per-hub overlay #7145 (Autofac frame names in a dump-analysis fixture) and is deleted here; the deletion wins. CarvingProjectsOutOfCore keeps both new sections.
  • MeshWeaver.Documentation.Test builds -c Release -warnaserror with 0 warnings and 0 errors. DocumentationLinkIntegrityTest + ArchitectureTopicMapTest ran 5 tests, 0 failed.
  • release-channels.py --self-test and check ., check-manual-keyvault.py --root ., check-workflow-timeouts.py, lock-pinned-digests.py --self-test, check-workflow-shell.py: all clean.

No public type or member leaves src/. Nothing was run against the cluster, and no InstanceAction was filed.

🤖 Generated with Claude Code

rbuergi and others added 2 commits October 24, 2026 12:47
@rbuergi @claude
chore(operator): the hosting operator leaves core for MeshWeaver.Plug…
6b7419c 
…ins (delete half)

Removes deploy/aks/operator, .github/workflows/hosting-operator.yml and the
operator's entries in manual-keyvault.allow and .gitignore; they live in
MeshWeaver.Plugins deploy/hosting-operator now, with its own
hosting-operator.yml publishing hosting-operator:main.

- memex-local's Linux gate, which rode in hosting-operator.yml, stays here
  unchanged as memex-local.yml.
- release-channels: a writer binding may name another repository ("repo");
  the hosting-operator:main writer now names MeshWeaver.Plugins, so the
  label stays declared and protected. Self-tests for both directions.
- Doc/Architecture/OperatorCredentialsByName moved to Hosting/ in Plugins;
  inbound links and path mentions repointed; the carving map records the move.

Pairs-with: Systemorph/MeshWeaver.Plugins#4137
Refs core slimming.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
@rbuergi
Merge origin/main
df5c48f
@github-actions

github-actions Bot commented Oct 24, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Test Results

    27 files  ±0      27 suites  ±0   52m 16s ⏱️ +17s
11 724 tests ±0  11 527 ✅ ±0  197 💤 ±0  0 ❌ ±0 
11 750 runs  ±0  11 553 ✅ ±0  197 💤 ±0  0 ❌ ±0 

Results for commit c4e1315. ± Comparison against base commit f531a28.

This pull request removes 59 and adds 22 tests. Note that renamed tests count towards both. 

   --- End of inner exception stack trace ---
   --- End of inner exception stack trace ---, expected: True)
   --- End of inner exception stack trace ---, kind: "Timeout", layer: null)
 ---> (Inner Exception #1) MeshWeaver.Mesh.QueryProviderStalledException: Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.<---
 ---> (Inner Exception #1) MeshWeaver.Messaging.Hub.Test.InfrastructureFaultTest+ProviderException (0x80004005): Failed to connect to 10.42.18.4:5432<---
 ---> (Inner Exception #1) MeshWeaver.Messaging.HubDisposingException: Hub node/a is shutting down — cannot create "x". The address may reactivate (recycle / restart); retry to get the authoritative answer.
 ---> (Inner Exception #1) System.ArgumentException: Value does not fall within the expected range.<---
 ---> (Inner Exception #1) System.InvalidOperationException: boom<---
 ---> (Inner Exception #1) System.InvalidOperationException: source B is misconfigured<---
…

MeshWeaver.Compiler.Pipeline.Test.SourcesWatcherStallBackoffTest ‑ The_production_classifier_recognises_a_stall_through_every_wrapping(because: "a stall as an aggregate's FIRST member", fault: System.AggregateException: One or more errors occurred. (Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.)
 ---> MeshWeaver.Mesh.QueryProviderStalledException: Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.
   --- End of inner exception stack trace ---, expected: True)
MeshWeaver.Compiler.Pipeline.Test.SourcesWatcherStallBackoffTest ‑ The_production_classifier_recognises_a_stall_through_every_wrapping(because: "a stall as an aggregate's SECOND member", fault: System.AggregateException: One or more errors occurred. (The operation has timed out.) (Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.)
 ---> System.TimeoutException: The operation has timed out.
   --- End of inner exception stack trace ---
 ---> (Inner Exception #1) MeshWeaver.Mesh.QueryProviderStalledException: Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.<---
, expected: True)
MeshWeaver.Compiler.Pipeline.Test.SourcesWatcherStallBackoffTest ‑ The_production_classifier_recognises_a_stall_through_every_wrapping(because: "a stall nested in an aggregate inside a wrapper", fault: System.InvalidOperationException: outer
 ---> System.AggregateException: One or more errors occurred. (Value does not fall within the expected range.) (Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.)
 ---> System.ArgumentException: Value does not fall within the expected range.
   --- End of inner exception stack trace ---
 ---> (Inner Exception #1) MeshWeaver.Mesh.QueryProviderStalledException: Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.<---

   --- End of inner exception stack trace ---, expected: True)
MeshWeaver.Compiler.Pipeline.Test.SourcesWatcherStallBackoffTest ‑ The_production_classifier_recognises_a_stall_through_every_wrapping(because: "a stall wrapped as InnerException", fault: System.InvalidOperationException: outer
 ---> MeshWeaver.Mesh.QueryProviderStalledException: Query provider(s) [pg] did not emit an Initial within the query fan-in's 16s bound for query 'nodeType:NodeType' (user 'system'). The merged Initial gates on EVERY provider, so this query has NO snapshot to answer with — it is reported as unavailable (retryable) rather than left hanging with no error. This is an availability failure, never a permission verdict: a consumer deciding access must fail CLOSED and say it could not establish the answer. Fix the stalled provider; never bump the consumer's timeout.
   --- End of inner exception stack trace ---, expected: True)
MeshWeaver.Compiler.Pipeline.Test.SourcesWatcherStallBackoffTest ‑ The_production_classifier_recognises_a_stall_through_every_wrapping(because: "an aggregate of unrelated faults", fault: System.AggregateException: One or more errors occurred. (The operation has timed out.) (Value does not fall within the expected range.)
 ---> System.TimeoutException: The operation has timed out.
   --- End of inner exception stack trace ---
 ---> (Inner Exception #1) System.ArgumentException: Value does not fall within the expected range.<---
, expected: False)
MeshWeaver.Messaging.Hub.Test.FaultClassifierTest ‑ Classifies(shape: "a bare disposed object with no context — not prova"···, exception: System.ObjectDisposedException: Cannot access a disposed object.
Object name: 'MemoryStream'., kind: "Fault", layer: null)
MeshWeaver.Messaging.Hub.Test.FaultClassifierTest ‑ Classifies(shape: "a cancellation whose timeout cause sits at aggrega"···, exception: System.OperationCanceledException: t
 ---> System.AggregateException: One or more errors occurred. (x) (The operation has timed out.)
 ---> System.InvalidOperationException: x
   --- End of inner exception stack trace ---
 ---> (Inner Exception #1) System.TimeoutException: The operation has timed out.<---

   --- End of inner exception stack trace ---, kind: "Timeout", layer: null)
MeshWeaver.Messaging.Hub.Test.FaultClassifierTest ‑ Classifies(shape: "a driver wrapping a connect timeout", exception: MeshWeaver.Messaging.Hub.Test.FaultClassifierTest+FakeDbException (0x80004005): Failed to connect
 ---> System.TimeoutException: The operation has timed out., kind: "Transient", layer: "Store")
MeshWeaver.Messaging.Hub.Test.FaultClassifierTest ‑ Classifies(shape: "a hub announcing its disposal", exception: MeshWeaver.Messaging.HubDisposingException: Hub node/a is shutting down — cannot create "stream". The address may reactivate (recycle / restart); retry to get the authoritative answer.
Object name: 'node/a'., kind: "HubTeardown", layer: null)
MeshWeaver.Messaging.Hub.Test.FaultClassifierTest ‑ Classifies(shape: "a mixed aggregate keeps the defect", exception: System.AggregateException: One or more errors occurred. (Success) (boom)
 ---> System.Net.Sockets.SocketException (0x80004005): Success
   --- End of inner exception stack trace ---
 ---> (Inner Exception #1) System.InvalidOperationException: boom<---
, kind: "Fault", layer: null)
…

♻️ This comment has been updated with latest results.

This was referenced Oct 24, 2026
Merged
Merged
rbuergi and others added 2 commits October 25, 2026 12:58
@rbuergi
rbuergi requested a balanced review from Copilot October 25, 2026 12:11
@rbuergi
rbuergi marked this pull request as ready for review October 25, 2026 12:15
Copilot AI reviewed Oct 25, 2026
View reviewed changes

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔵 Needs a closer look

One or more issues must be addressed before approval.

No open issues 🎉

What changed in this PR

This is the deletion half of moving the hosting operator from core to MeshWeaver.Plugins, while retaining core’s local-development checks and image-retention protections.

Changes:

  • Removes migrated operator assets and separates the retained memex-local workflow.
  • Supports cross-repository release-channel writers without dropping protection for hosting-operator:main.
  • Updates documentation, paths, and credential-guard ownership.

One validator defect was identified. The external publication and estate-lane prerequisites could not be independently verified because the linked repositories were inaccessible.

File Description
src/​MeshWeaver.Documentation/​Data/​Architecture/​SelfUpdateSchemaWall.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​SecretsWriteOnlyEntry.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​RemovingAKeyFromTheRecord.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​ReleaseEditions.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​PlanningADatabaseMigration.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​PinnedImageRetention.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​DeploymentAKS.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​DeniedIsNotAbsent.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​DebuggingNativeCrashes.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​ContainerRegistryInMemex.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​ChartDriftSemantics.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture/​CarvingProjectsOutOfCore.md Updated as part of this pull request.
src/​MeshWeaver.Documentation/​Data/​Architecture.md Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​verify/​openssl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​verify/​curl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​storage-prune/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​run/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pv-resize/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pv-purge/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pv-purge/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pull-secret/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pg/​psql Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pg/​pg_restore Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pg/​pg_dump Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​pg/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​migrate/​helm Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​manifest-apply/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​kv-set/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​kv-rotate/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​inventory/​psql Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​interlock/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​interlock/​hosting-migrate Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​image-mirror/​crane Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​image-mirror/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​helm Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​dump-analyze/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​deploy/​hosting-migrate Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​deploy/​helm Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​db-reset/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​db-release/​helm Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​az-session/​pg_dump Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​az-session/​curl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​az-session/​az Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​artifact-store-bind/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​aks-upgrade/​kubectl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stubs/​aks-upgrade/​curl Updated as part of this pull request.
deploy/​aks/​operator/​test/​stderr-discarded.allow Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​pod-refused.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​pod-partial.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​deployments-subpath.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​deployments-shadowed.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​deployments-plain.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​storage-prune/​deployments-emptydir.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​stuck/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​stuck/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​stuck/​pvc.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​pending/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​pending/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​no-expansion/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​no-expansion/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​grows/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​grows/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​grows/​pvc.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​filesystem-pending/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​filesystem-pending/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​filesystem-pending/​pvc.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​already/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​already/​pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-resize/​absent/​storageclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​pv-purge/​pvs.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​migrate/​rendered.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​migrate/​manifest.yaml Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​stuck/​deployment.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​rotated/​secret_memex-portal-keyvault.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​differ/​secret_memex-portal-keyvault.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​base/​secret_memex-portal-secrets.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​base/​secret_memex-portal-keyvault.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​base/​deployment.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​base/​deployment.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​inline-env/​base/​configmap_memex-portal-config.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​pod-refused.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​pod-partial.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​deployments-noroot.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​deployments-emptydir.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​deployments-data.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​dump-analyze/​deployments-claim.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​deploy/​status.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​deploy/​rendered.yaml Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​deploy/​names.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​deploy/​live/​secretproviderclass.secrets-store.csi.x-k8s.io_memex-kv.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​deploy/​live/​configmap_memex-portal-config.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​missing/​.keep Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​forbidden/​status.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​forbidden/​live/​role.forbidden Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​forbidden/​live/​deployment.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​forbidden/​live/​configmap.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​status.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​manifest.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​serviceaccount.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​service.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​secretproviderclass.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​secret.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​persistentvolumeclaim.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​job.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​ingress.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​cronjob.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​live/​configmap.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​drift/​hooks.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​status.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​serviceaccount.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​service.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​secret.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​scaledobject.notype Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​persistentvolumeclaim.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​job.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​ingress.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​deployment.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​live/​configmap.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​audit/​clean/​hooks.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pvc.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pvc-pending.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pv.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pv-explicit-attrs.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pv-disk.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​owner-pv-custom-secret.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pvc-other.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pvc-bound.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-writable.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-unlabelled.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-stale-secret.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-shared-handle.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-same.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-other.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​artifact-store-bind/​existing-pv-delete.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​versions.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​upgrades.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​show.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​show.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​runner.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​pools.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​pools.after.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​pods-memex.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​pdbs.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​nodes.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​metrics.txt Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​manifests/​pdb.yaml Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​manifests/​cron.yml Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​ingress-memex.json Updated as part of this pull request.
deploy/​aks/​operator/​test/​fixtures/​aks-upgrade/​deployments.json Updated as part of this pull request.
deploy/​aks/​INSTANCE-LIFECYCLE.md Updated as part of this pull request.
.gitignore Updated as part of this pull request.
.github/​workflows/​s1-extract-image.yml Updated as part of this pull request.
.github/​workflows/​homebrew.yml Updated as part of this pull request.
.github/​scripts/​lock-pinned-digests.py Updated as part of this pull request.
.github/​scripts/​check-workflow-shell.py Updated as part of this pull request.
.github/​release-channels.json Updated as part of this pull request.
.claude/​skills/​new-deployment/​SKILL.md Updated as part of this pull request.

Review effort: Balanced

@rbuergi
rbuergi merged commit 16b9902 into main Oct 25, 2026
47 of 49 checks passed
This was referenced Oct 25, 2026
Merged
Merged
rbuergi added a commit that referenced this pull request Oct 25, 2026
@rbuergi @claude
Merge origin/main into move/chart-leaves-core
e1f941a 
Every conflict resolved so the deletion wins: the chart files main changed (#7143, #7159, #7184,
#7170, #7119; all ported to MeshWeaver.Deploy by Deploy#4), the chart-reading guards main moved
onto RepoPaths (#7111), and the Memex.Portal.Shared files main moved to MeshWeaver.Plugins (#7125).
Also deleted: the build-host chart files main added after this branch was cut (frozen, in Deploy
now) and memex-local.yml (#7119), whose Linux gate is Deploy's homebrew.yml linux job. Kept from
main: instances.json's re-measured MeshWeaver.Deploy row.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This was referenced Oct 27, 2026
Merged
Closed
@rbuergi
rbuergi deleted the chore/hosting-operator-leaves-core branch October 31, 2026 09:12
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

Copilot code review Copilot
Copilot review effort
Applies to this pull request for everyone.Learn more about Copilot code review.
Copilot left review comments

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@rbuergi