Skip to content

Rewrite changelog registry docs for scrubber Lambda ownership - #3761

Draft
cotti wants to merge 4 commits into
changelog-retire-client-registry-refreshfrom
changelog-registry-docs
Draft

Rewrite changelog registry docs for scrubber Lambda ownership#3761
cotti wants to merge 4 commits into
changelog-retire-client-registry-refreshfrom
changelog-registry-docs

Conversation

@cotti

@cotti cotti commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

Why

Phase 4 of elastic/docs-eng-team#688, stacked on #3760. After Phases 1–3 the registry docs described a retired system: client-side refresh, registry pass-through, an ETag "documented as useless", a CloudFront "1 h TTL" that hasn't existed since caching was disabled, and a claim that the refresh was "skipped for --artifact-type changelog".

What

docs/development/changelog-bundle-registry.md now documents the end state: the scrubber Lambda's RegistryReconciler as the manifest's sole producer (registry = f(state)), the producer field, bundles[].etag as the public object's ETag (finally usable for CDN cache revalidation), consistency stated as convergence with the consumer's listed-but-missing tolerance kept, the deliberate absent ≠ empty manifest semantics, and the registry reconcile / registry verify operator tooling with the reconcile message contract. The scrubber README's event-handling section and cmd-upload.md's registry paragraph are aligned with the same model.

Part of elastic/docs-eng-team#688 (Phase 4).

@cotti cotti added the documentation Improvements or additions to documentation label Aug 4, 2026
@cotti
cotti requested review from a team as code owners August 4, 2026 01:36
@cotti cotti added the documentation Improvements or additions to documentation label Aug 4, 2026
@cotti
cotti requested a review from reakaleek August 4, 2026 01:36
cotti and others added 3 commits August 3, 2026 22:50
Phase 2 of elastic/docs-eng-team#688. The cutover/heal tooling for the
Lambda-owned public registry:

- `changelog registry reconcile` plans groups (one scope, or the union of
  both buckets so orphan public groups are covered) and sends one versioned,
  discriminated reconcile message per group to the scrubber queue —
  {kind, version, scope, group, correlation_id}, validated through
  ChangelogKeys on both ends. The CLI never mutates S3; the Lambda stays the
  public bucket's single writer. --dry-run prints the plan; the non-dry-run
  path asks for confirmation (--yes for CI). Each run stamps one correlation
  id and prints a ledger line per group.
- On a reconcile message the Lambda performs a full group heal:
  object-level reconcile over the union of both buckets' listings (copy
  what's live, delete what isn't), then the group reconcile — recovering
  lost/DLQ-expired scrub events. Requires the new optional
  PRIVATE_BUCKET_NAME Lambda env var; malformed messages are rejected to
  the DLQ where the Phase 0 alarm surfaces them.
- `changelog registry verify` is the read-only sibling and cutover gate:
  compares each public manifest against what a reconcile would write (same
  listing spec and entry rules by construction) and reports divergence as
  missing/stale/corrupt/object-divergent, with unsupported schemas reported
  distinctly.
- Fix the manifest ETag wire format: the snake_case policy serialized the
  producer-side field as "e_tag" while consumers and the documented format
  read "etag" — recorded ETags were invisible to every consumer.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Same suppression RegistryBuilderTests carries: xUnit owns the test class
lifetime and TestDiagnosticsCollector needs no disposal in these tests.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
The scrubber Lambda is the sole producer of the public registry.json,
reconciled from public bucket state on the S3 events every upload already
emits (elastic/docs-eng-team#688 Phase 3). Uploads now write YAML objects
only; RegistryBuilder and the private-manifest write path are removed, and
the amend end-to-end test exercises RegistryReconciler instead.
@cotti
cotti force-pushed the changelog-retire-client-registry-refresh branch from 4cefbe5 to cc65ecf Compare August 4, 2026 01:50
The registry docs still described the retired model: client-side refresh,
registry pass-through, pre-scrub ETags, a 1 h CloudFront TTL (caching is
disabled), and a refresh "skipped for --artifact-type changelog". Documents
the reconciler as sole producer, the public-object ETag, convergence
semantics, absent-vs-empty manifests, the reconcile message contract, and
the registry reconcile/verify operator commands (docs-eng-team#688 Phase 4).
@cotti

cotti commented Aug 6, 2026

Copy link
Copy Markdown
Contributor Author

Converting to draft: these docs describe the per-product registry model that's being dropped per the review on #3738. I'll rewrite them once the thin folder→ETag registry shape lands there.

@cotti
cotti marked this pull request as draft August 6, 2026 13:07
@cotti
cotti force-pushed the changelog-retire-client-registry-refresh branch from cc65ecf to 95b64ed Compare August 6, 2026 15:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

documentation Improvements or additions to documentation

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant