ops: run host scripts with bash and adopt EndpointSlice #21

Merged

PerishFire merged 1 commit from ops-bash-and-endpointslice into main

2026-07-17 02:31:53 +00:00

PerishFire commented

2026-07-17 02:26:44 +00:00

Owner

Two ops-surface fixes found by exercising the PR #18 recipes end-to-end:

The cold-host recipe invoked the three bash host scripts with sh; dash on hk-03 rejects set -o pipefail, so the recipe exits 2 as written. The recipe now says bash (register-authentik.sh is genuine POSIX sh and keeps sh).
The window Service backend moves from the deprecated v1 Endpoints to a discovery.k8s.io/v1 EndpointSlice (k8s deprecates Endpoints in 1.33+; cluster traefik 3.6.13 consumes slices). Validated with a server-side dry-run against the live k3s (v1.35.5+k3s1): Deployment/Service unchanged, slice schema accepted. A one-time migration note (apply, then delete the legacy Endpoints object) rides in the manifest comment; live application is a separate ops step.

🤖 Generated with Claude Code

Two ops-surface fixes found by exercising the PR #18 recipes end-to-end: - The cold-host recipe invoked the three bash host scripts with `sh`; dash on hk-03 rejects `set -o pipefail`, so the recipe exits 2 as written. The recipe now says `bash` (register-authentik.sh is genuine POSIX sh and keeps `sh`). - The window Service backend moves from the deprecated `v1 Endpoints` to a `discovery.k8s.io/v1 EndpointSlice` (k8s deprecates Endpoints in 1.33+; cluster traefik 3.6.13 consumes slices). Validated with a server-side dry-run against the live k3s (v1.35.5+k3s1): Deployment/Service unchanged, slice schema accepted. A one-time migration note (apply, then delete the legacy Endpoints object) rides in the manifest comment; live application is a separate ops step. 🤖 Generated with [Claude Code](https://claude.com/claude-code)

PerishFire added 1 commit

2026-07-17 02:26:44 +00:00

ops: run host scripts with bash and adopt EndpointSlice

guard / guard (pull_request) Successful in 5m3s

Details

4d44ba5182

The cold-host recipe invoked the bash host scripts with sh; dash on
hk-03 rejects `set -o pipefail`, so the recipe failed as written.

The window Service backend moves from the deprecated v1 Endpoints to a
discovery.k8s.io/v1 EndpointSlice (traefik 3.6.13 consumes slices;
verified by server-side dry-run against k8s v1.35.5+k3s1). Migration
note for the legacy object rides in the manifest comment.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

PerishFire merged commit 1411d53fbc into main

2026-07-17 02:31:53 +00:00

PerishFire deleted branch ops-bash-and-endpointslice

2026-07-17 02:31:53 +00:00

PerishFire referenced this pull request from a commit

2026-07-17 02:31:55 +00:00

ops: run host scripts with bash and adopt EndpointSlice (#21)