44171930ff
Some checks failed
AOC Guard CI / aoc-guard (push) Has been cancelled
AOC Guard CI / aoc-verify (push) Has been cancelled
Docs CI / lint-and-preview (push) Has been cancelled
Policy Lint & Smoke / policy-lint (push) Has been cancelled
devportal-offline / build-offline (push) Has been cancelled
- Introduced `ui_bench_driver.mjs` to read scenarios and fixture manifest, generating a deterministic run plan. - Created `ui_bench_plan.md` outlining the purpose, scope, and next steps for the benchmark. - Added `ui_bench_scenarios.json` containing various scenarios for graph UI interactions. - Implemented tests for CLI commands, ensuring bundle verification and telemetry defaults. - Developed schemas for orchestrator components, including replay manifests and event envelopes. - Added mock API for risk management, including listing and statistics functionalities. - Implemented models for risk profiles and query options to support the new API.
54 lines
2.2 KiB
Markdown
54 lines
2.2 KiB
Markdown
# Concelier LNM Release Plan (DEVOPS-LNM-21-101-REL / 102-REL / 103-REL)
|
|
|
|
Scope: package and publish Link-Not-Merge migrations/backfill/object-store seeds for release and offline kits.
|
|
|
|
## Artefacts
|
|
- Migration bundles:
|
|
- 21-101 shard/index migrations (`EnsureLinkNotMergeShardingAndTtlMigration`)
|
|
- 21-102 backfill/tombstone/rollback scripts
|
|
- 21-103 object-store seed bundle (once contract final)
|
|
- Checksums (`SHA256SUMS`, signed)
|
|
- SBOMs (spdx.json) for migration runner image/tooling
|
|
- Cosign attestations for images/bundles
|
|
- Offline kit slice tarball with all above + DSSE manifest
|
|
|
|
## Pipeline outline
|
|
1) Build migration runner image (dotnet) with migrations baked; generate SBOM; pin digest.
|
|
2) Export migration scripts/bundles to `artifacts/lnm/`.
|
|
3) Create offline bundle:
|
|
- `migrations/21-101/` (DLLs, scripts, README)
|
|
- `migrations/21-102/` (backfill, rollback, README)
|
|
- `seeds/object-store/` (placeholder until 21-103 dev output)
|
|
- `SHA256SUMS` + `.sig`
|
|
- SBOMs + cosign attestations
|
|
4) Verification stage:
|
|
- `dotnet test` on migration runner
|
|
- `cosign verify-blob` for bundles
|
|
- `sha256sum --check`
|
|
5) Publish:
|
|
- Upload to release bucket + offline kit
|
|
- Record manifest (hashes, versions, digests)
|
|
|
|
## Runbook (apply in staging → prod)
|
|
1) Take Mongo backup; freeze Concelier ingest.
|
|
2) Apply 21-101 migrations (shards/TTL) — idempotent; record duration.
|
|
3) Run 21-102 backfill with `--batch-size=500 --stop-on-error`; capture report hash.
|
|
4) Validate counts (observations/linksets/events) and shard balance.
|
|
5) Enable outbox publishers; monitor lag and errors.
|
|
6) (When ready) apply 21-103 object-store migration: move raw payloads to object store; verify CAS URIs; keep GridFS read-only during move.
|
|
|
|
## Rollback
|
|
- 21-101: restore from backup if shard layout breaks; migrations are idempotent.
|
|
- 21-102: run rollback script (`ops/devops/scripts/rollback-lnm-backfill.js`); if inconsistent, restore backup.
|
|
- 21-103: switch back to GridFS URI map; restore seeds.
|
|
|
|
## Monitoring/alerts
|
|
- Migration error count > 0
|
|
- Mongo oplog lag > 60s during backfill
|
|
- Outbox backlog growth post-unfreeze
|
|
|
|
## Owners
|
|
- DevOps Guild (pipeline + rollout)
|
|
- Concelier Storage Guild (migration content)
|
|
- Platform Security (signing policy)
|