Skip to content

fix(ci): pull the published MinIO image on the gateway release line - #7

Merged
kombiz merged 10 commits into
task/BUZZ-ACP-0524/gateway-acp-on-v0-5-24from
task/HS-46/base-ci-minio--buzz
Oct 11, 2026
Merged

kombiz merged 10 commits into
task/BUZZ-ACP-0524/gateway-acp-on-v0-5-24from
task/HS-46/base-ci-minio--buzz

Conversation

@kombiz

@kombiz kombiz commented Oct 11, 2026

Copy link
Copy Markdown

Backport of main's MinIO CI fix (#5, commit 2246518) to the gateway release line that HS-46's Buzz adapter (#3) targets.

Why: the pinned quay.io/minio/* digests in docker-compose.yml now return unauthorized, so every job that starts the compose fixtures fails before running any test. On #3 that is Relay E2E, Backend Integration, both Desktop E2E Integration shards and the mesh lifecycle smoke. #5 fixed this on main, but this branch splits CI into reusable _ci-*.yml workflows, so the cherry-pick conflicts. This is the same change, ported by hand.

What:

  • Adds docker-compose.ci.yml, byte-identical to main's, which selects ghcr.io/block/buzz-minio:latest (overridable with MINIO_CI_IMAGE). An anonymous GHCR manifest read returned HTTP 200.
  • Sets job-level COMPOSE_FILE: docker-compose.yml:docker-compose.ci.yml on desktop-e2e-integration-shard, backend-integration and relay-e2e (_ci-relay.yml), and on lifecycle-smoke (mesh-lifecycle.yml).
  • docker-compose.yml is unchanged, so local development keeps the pinned images.

Checks run locally: both workflows parse as YAML, and docker compose -f docker-compose.yml -f docker-compose.ci.yml config resolves minio and minio-init to the GHCR image. CI on this PR exercises the relay lane, because the path filter includes .github/workflows/_ci-*.yml.

Not addressed here: the Docker/GHCR image publish jobs fail on main too ("installation does not exist"). That is estate-wide and separate from this branch.

🤖 Generated with Claude Code

kombiz and others added 9 commits September 24, 2026 16:23
Signed-off-by: Kombiz Lavasany <kombiz@gmail.com>
Signed-off-by: Kombiz Lavasany <kombiz@gmail.com>
Signed-off-by: Kombiz Lavasany <kombiz@gmail.com>
Signed-off-by: Kombiz Lavasany <kombiz@gmail.com>
Signed-off-by: Kombiz Lavasany <kombiz@gmail.com>
The pinned quay.io MinIO digests now answer `unauthorized`, so every job
that starts the compose fixtures fails before its tests run. Port main's
docker-compose.ci.yml override (2246518) to this branch's split
workflows: the desktop integration shards, backend integration, relay
E2E and mesh lifecycle jobs select it through COMPOSE_FILE. Local
development keeps the pinned images in docker-compose.yml.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Gateway main now refuses a shared submit that omits or mismatches the
route's permission_profile and side_effect_class (agent-gateway block#30).
backend=shared takes both from BUZZ_ACP_GATEWAY_PERMISSION_PROFILE and
BUZZ_ACP_GATEWAY_SIDE_EFFECT_CLASS, accepts read-only values only, and
sends them on every submit. The legacy backend rejects these options.

A batch still refused as busy at the turn deadline was reported as an
unknown outcome, although the daemon never admitted it. Once a lookup
proves the submission absent, exhausting the loop now ends Failed. A
gateway that never answered a lookup stays unknown, because an earlier
harness process may have submitted the same event.

Gate both Unix-socket clients so the Windows build compiles; on other
targets every connect returns Unsupported.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Review follow-up. Like main's 2246518, run the Rust lane and the mesh
lifecycle smoke when either compose file changes, and point the
quickstart chart's MinIO images at the published CI image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Review follow-up. route_session returns the route generation's latest
session without checking its policy binding, so a session bound before
agent-gateway block#30, or under a changed route policy, refuses every
submit. The failure now tells the operator to raise the route's
route_generation, which scopes route_session to a fresh session.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@kombiz

kombiz commented Oct 11, 2026

Copy link
Copy Markdown
Author

Review follow-up cca199af: ports the rest of main's #5. Compose-file changes now trigger the Rust lane and the mesh smoke, and the quickstart chart's MinIO images point at the published image.

Independent review of 618f06e9: SHIP-WITH-FOLLOWUPS. It covers every job on this branch that pulls MinIO. Mesh Lifecycle passed here; on #3 it fails on quay.io unauthorized.

The other red checks on this PR come from the base branch, not this change. Its private gateway-api git dependency can't be cloned, so the relay artifact job fails and the three relay jobs are skipped. #3 removes that dependency and is now stacked on this PR, so its CI exercises both changes together. Merge order: #3 into this branch, then this PR into the base.

🤖 Generated with Claude Code

…adapter--buzz

feat(buzz-acp): bridge Buzz to shared gateway sessions
@kombiz

kombiz commented Oct 11, 2026

Copy link
Copy Markdown
Author

Merge receipt, approved by the owner on 2026-10-11.

Head ad347518 is #3 (0066d726) merged into this branch (cca199af). Both heads had independent exact-head reviews (SHIP). The merge tree 6f21b49e equals git merge-tree of the two reviewed heads.

CI at this head: 48 checks passed. Rust lint, unit tests, Windows, Relay E2E, backend integration, desktop integration, mesh smoke and security are all green.

The one red check is Desktop Smoke E2E shard 4 and its roll-ups. Across 3 attempts it failed a different set of UI specs each time:

  • attempt 1: video-attachment, virtualization, scroll-history and others
  • attempt 2: thread-head-stale-edit, workflows
  • attempt 3: scroll-history, workflows, virtualization

The same tree passed that shard on #3's run. These smoke tests run static dist against a mocked Tauri bridge and never build buzz-acp. This is recorded as pre-existing desktop smoke flakiness on this branch, not a defect in this change. Nothing is deployed by this merge.

🤖 Generated with Claude Code

@kombiz
kombiz merged commit 58ce91e into task/BUZZ-ACP-0524/gateway-acp-on-v0-5-24 Oct 11, 2026
200 of 210 checks passed
@kombiz
kombiz deleted the task/HS-46/base-ci-minio--buzz branch October 11, 2026 11:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant