2e70c9fdb6
Some checks failed
LNM Migration CI / build-runner (push) Has been cancelled
Ledger OpenAPI CI / deprecation-check (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Airgap Sealed CI Smoke / sealed-smoke (push) Has been cancelled
Ledger Packs CI / build-pack (push) Has been cancelled
Export Center CI / export-ci (push) Has been cancelled
Ledger OpenAPI CI / validate-oas (push) Has been cancelled
Ledger OpenAPI CI / check-wellknown (push) Has been cancelled
Ledger Packs CI / verify-pack (push) Has been cancelled
LNM Migration CI / validate-metrics (push) Has been cancelled
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
57 lines
1.5 KiB
Markdown
57 lines
1.5 KiB
Markdown
# Findings Ledger OpenAPI Infrastructure
|
|
|
|
## Scope
|
|
Infrastructure for Ledger OAS lint, publish, SDK generation, and deprecation governance.
|
|
|
|
## Tasks Covered
|
|
- DEVOPS-LEDGER-OAS-61-001-REL: Lint/diff/publish gates
|
|
- DEVOPS-LEDGER-OAS-61-002-REL: `.well-known/openapi` validation
|
|
- DEVOPS-LEDGER-OAS-62-001-REL: SDK generation/signing
|
|
- DEVOPS-LEDGER-OAS-63-001-REL: Deprecation governance
|
|
|
|
## File Structure
|
|
```
|
|
ops/devops/ledger/
|
|
├── oas-infrastructure.md (this file)
|
|
├── validate-oas.sh # Lint + validate OAS spec
|
|
├── generate-sdk.sh # Generate and sign SDK
|
|
├── publish-oas.sh # Publish to .well-known
|
|
└── deprecation-policy.yaml # Deprecation rules
|
|
|
|
.gitea/workflows/
|
|
├── ledger-oas-ci.yml # OAS lint/validate/diff
|
|
├── ledger-sdk-release.yml # SDK generation
|
|
└── ledger-oas-publish.yml # Publish spec
|
|
```
|
|
|
|
## Prerequisites
|
|
- Findings Ledger OpenAPI spec at `api/ledger/openapi.yaml`
|
|
- Version info in spec metadata
|
|
- Examples for each endpoint
|
|
|
|
## Usage
|
|
|
|
### Validate OAS
|
|
```bash
|
|
./ops/devops/ledger/validate-oas.sh api/ledger/openapi.yaml
|
|
```
|
|
|
|
### Generate SDK
|
|
```bash
|
|
# Dev mode
|
|
COSIGN_ALLOW_DEV_KEY=1 ./ops/devops/ledger/generate-sdk.sh
|
|
|
|
# Production
|
|
./ops/devops/ledger/generate-sdk.sh
|
|
```
|
|
|
|
### Publish to .well-known
|
|
```bash
|
|
./ops/devops/ledger/publish-oas.sh --environment staging
|
|
```
|
|
|
|
## Outputs
|
|
- `out/ledger/sdk/` - Generated SDK packages
|
|
- `out/ledger/oas/` - Validated spec + diff reports
|
|
- `out/ledger/deprecation/` - Deprecation reports
|