docs: record E-Shop Harbor and GitOps state #15

Merged
jarvis-at-skic merged 1 commits from governance/eshopv1-deployment-status into main 2026-08-27 03:18:49 -07:00
Showing only changes of commit 96661df5ec - Show all commits
+7 -5
View File
@@ -28,7 +28,7 @@ RootAtSkic (`discord:1518725627845283888`) approved kickoff and override `ESHOPV
- Project organization: [corp-v1-eshopv1](https://gitea.lego-cloud.eu/corp-v1-eshopv1) — private
- Skills organization: [corp-v1-eshopv1-skills-code-agent](https://gitea.lego-cloud.eu/corp-v1-eshopv1-skills-code-agent) — private
- [Application repository](https://gitea.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1) — `test` `7fd6b88fc01e3834862fecfa063931d65ed0b786`
- [Application repository](https://gitea.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1) — `test` `3be141af869220620672b04681d335fb2803f425`
- [Documentation repository](https://gitea.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1-documentation) — `test` `4d7a24fafb1fb9e9afc5b406407a1c8c670513be`
- [Published documentation](https://pages.apps.lego-cloud.eu/corp-v1-eshopv1/corp-v1-eshopv1-documentation/)
- Global diagram source: [drawio-main](https://gitea.lego-cloud.eu/home-v1-skills-code-agent/drawio-main); no project copy exists.
@@ -72,18 +72,20 @@ All repositories are private, use default branch `test`, retain complete source
`e-shop-v1-team` exists independently in both organizations, includes all repositories, grants per-unit write access, and contains verified users `root-at-skic` and `jarvis-at-skic`.
Scheduler job `d6505c6ac0da` is the single approved 30-minute General job. It uses frozen high-watermarks, scans only the seven E-Shop channels, attaches all fourteen adopted skills, delivers only to General, and pauses on the first human message.
Scheduler job `d6505c6ac0da` is the single approved 30-minute General job. It uses frozen high-watermarks, scans only the seven E-Shop channels, attaches all fourteen adopted skills, delivers only to General, and pauses on the first human message. RootAtSkic explicitly renewed foreground continuation and requested that the job be returned to service in Board message `1542470702525980672` on 2026-08-27.
Verified organization variables:
- `HL_V1_HARBOR_ADDRESS=harbor-v1.apps.lego-cloud.eu`
- `HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_USERNAME=robot$gondor-v1+gitea-actions-v1`
`HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_SECRET` presence: **missing**. Its value was never requested or accessed. Harbor publication and Argo CD storefront deployment remain gated.
`HL_V1_HARBOR_ROBOT_GITEA_ACTIONS_V1_SECRET` presence: **verified by name** after RootAtSkic's confirmation in message `1542462573750784022`. Its value was never requested or accessed. A governed publication retry reached Harbor but registry authentication returned `unauthorized`; therefore the configured credential must be corrected or reconciled with the configured robot username before publication can succeed.
## Verification
- Application PR 1 reviewed head `ca4ed6e27c565a2775e82c8471e5a355536af6c6`; exact-head Actions task `1415`: success; merged default head `7fd6b88fc01e3834862fecfa063931d65ed0b786`; integrated task `1418`: success.
- Application PR 4 reviewed head `b2b28d9b82f12af822b705453b64e585b65bcd0f`; exact-head tasks `1446` and `1447`: success. It added a durable Argo CD AppProject/Application bootstrap, ingress, resource bounds, immutable Harbor image pin, and fail-closed optional PayPal secret references. Merged default head: `3be141af869220620672b04681d335fb2803f425`.
- Integrated artifact task `1448` failed at Harbor authentication with `unauthorized`; no image, chart, Argo Application, or deployed storefront is claimed.
- Documentation PR 1 reviewed head `d65c41749cfe99b8b58e317da3f87dd83b1a94eb`; merged default head `4d7a24fafb1fb9e9afc5b406407a1c8c670513be`; integrated task `1417`: success.
- Authorized Pages body readback found the E-Shop v1 and Bootstrap MVP markers.
- Local application validation passed lint, type checks, seven tests, production build, runtime rendering, and fail-closed PayPal behavior.
@@ -91,7 +93,7 @@ Verified organization variables:
## Outstanding gates
1. A member must add the Harbor organization secret directly in Gitea.
2. Publish the application image and onboard a durable E-Shop Argo CD Application.
1. A member must correct or reconcile the existing Harbor organization secret directly in Gitea so it authenticates as the configured robot user; the value must never be sent to Hermes or Discord.
2. Publish the application image, apply the merged Argo CD bootstrap, and wait for `Synced` / `Healthy` convergence.
3. Verify the deployed storefront and inject PayPal Sandbox credentials through the approved secret path for an end-to-end Sandbox create/capture test.
4. Production payment go-live requires a separate explicit decision.