bitborg/bitborg-infra

Bevaka

Avgrena 0

Tier 1: ephemeral OpenStack staging host (boot → site.yml → smoke → destroy) #105

Nytt ärende

Öppen

öppnade 2026-07-18 15:01:09 +00:00 av supernaut · 1 kommentar

supernaut kommenterad

2026-07-18 15:01:09 +00:00

Ägare

Tier 1 — on-demand prod-parity staging, no standing cost. Reuse the existing throwaway-VM machinery (ephemeral-runner ADR 0021 tofu + cloud-init; restore-drill ADR 0027 boot→do→destroy flow) to:

tofu apply a single staging VM on a dedicated network/SG (staging_count var, default 0 → $0 when idle).
Run ansible-playbook site.yml against it with the staging inventory (from the layering task).
Smoke-test (Tier 0 assertions, plus real TLS + real systemd + pasta networking that CI can't model).
tofu destroy the VM.

Includes staging DNS + TLS: a staging domain (e.g. *.stg.gitborg.se or an nip.io fallback) and the Let's Encrypt staging ACME directory (caddy_acme_ca override in group_vars/staging) to avoid burning prod LE rate limits.

Run before prod for risky changes (socket/networking/capability/app.ini). A one-shot pnpm/make wrapper + optional CI trigger.

Epic: gitborg/gitborg-docs#37

**Tier 1 — on-demand prod-parity staging, no standing cost.** Reuse the existing throwaway-VM machinery (ephemeral-runner ADR 0021 tofu + cloud-init; restore-drill ADR 0027 boot→do→destroy flow) to: 1. `tofu apply` a single staging VM on a dedicated network/SG (`staging_count` var, default 0 → $0 when idle). 2. Run `ansible-playbook site.yml` against it with the `staging` inventory (from the layering task). 3. Smoke-test (Tier 0 assertions, plus real TLS + real systemd + pasta networking that CI can't model). 4. `tofu destroy` the VM. Includes staging DNS + TLS: a staging domain (e.g. `*.stg.gitborg.se` or an nip.io fallback) and the **Let's Encrypt staging** ACME directory (`caddy_acme_ca` override in `group_vars/staging`) to avoid burning prod LE rate limits. Run before prod for risky changes (socket/networking/capability/app.ini). A one-shot pnpm/make wrapper + optional CI trigger. Epic: gitborg/gitborg-docs#37

supernaut refererade till detta ärende från bitborg/bitborg-docs

2026-07-18 15:01:30 +00:00

Pre-prod validation: staging environment for infra changes #37

supernaut lade till etiketterna

2026-07-18 15:01:42 +00:00

supernaut lade till detta till projektet Bitborg Infrastructure

2026-07-18 15:12:29 +00:00

supernaut refererade till detta ärende

2026-07-18 16:38:01 +00:00

feat(ci): Tier-0 smoke — hardened containers can start (#104) #110

supernaut refererade till detta ärende från en incheckning

2026-07-18 16:38:01 +00:00

feat(ci): Tier-0 smoke — hardened containers can start (#104)

supernaut refererade till detta ärende

2026-07-18 16:38:21 +00:00

Tier 0: full-stack smoke test (Molecule) — assert every service container starts #104

supernaut refererade till detta ärende från en incheckning

2026-07-18 16:41:28 +00:00

feat(ci): Tier-0 smoke — hardened containers can start (#104) (#110)

supernaut refererade till detta ärende

2026-07-18 16:53:17 +00:00

feat(ci): Tier-0 textfile-metric safety guard (#104) #111

supernaut refererade till detta ärende från en incheckning

2026-07-18 16:53:17 +00:00

feat(ci): Tier-0 textfile-metric safety guard (#104)

supernaut refererade till detta ärende från en incheckning

2026-07-18 16:56:15 +00:00

ci: run infra steps only when their area changed (+ ansible↔tofu x-dep)

supernaut refererade till detta ärende

2026-07-18 16:56:31 +00:00

ci: run infra steps only when their area changed (+ ansible↔tofu x-dep) #112

supernaut refererade till detta ärende

2026-07-18 16:56:59 +00:00

Tier 0: full-stack smoke test (Molecule) — assert every service container starts #104

supernaut refererade till detta ärende från en incheckning

2026-07-18 18:53:24 +00:00

ci: run infra steps only when their area changed (+ ansible↔tofu x-dep) (#112)

supernaut refererade till detta ärende

2026-07-18 19:34:13 +00:00

Tier 0: full-stack smoke test (Molecule) — assert every service container starts #104

supernaut kommenterad

2026-07-18 21:25:59 +00:00

Upphovsperson

Ägare

Deferred per ADR 0030 — Tier-1 full staging and the prod/staging env split are last-ditch/optional: documented as the target shape but built only when a real-host-only failure actually demands it (the restore-drill clone covers the irreversible-upgrade case first). Kept in Backlog; not scheduled. See bitborg-docs/decisions/0030-environments-and-promotion.md.

**Deferred per ADR 0030** — Tier-1 full staging and the prod/staging env split are last-ditch/optional: documented as the target shape but built only when a real-host-only failure actually demands it (the restore-drill clone covers the irreversible-upgrade case first). Kept in Backlog; not scheduled. See `bitborg-docs/decisions/0030-environments-and-promotion.md`.

supernaut refererade till detta ärende

2026-07-29 22:47:43 +00:00

fix(caddy): scope the web retry window to brief blips, not deploys #250

supernaut refererade till detta ärende från en incheckning

2026-07-29 23:07:26 +00:00

fix(caddy): scope the web retry window to brief blips, not deploys (#250)

supernaut lade till

ready-for-implementation

och tog bort

needs-triage

etiketter

2026-07-30 22:33:38 +00:00