Skip to content

docs: pin the operator chart whose README is not wrong - #196

Merged
stxkxs merged 1 commit into
mainfrom
operator-0-6-5
Aug 8, 2026
Merged

docs: pin the operator chart whose README is not wrong#196
stxkxs merged 1 commit into
mainfrom
operator-0-6-5

Conversation

@stxkxs

@stxkxs stxkxs commented Aug 8, 2026

Copy link
Copy Markdown
Member

0.6.5 is a documentation-only release. Its rendered manifests are identical to 0.6.4's — 34 changed lines against this repo's production values, all of them the helm.sh/chart label:

34 changed lines, 34 of them the label

So why move the pin

Because the pinned version is also the pointer to the chart's documentation.

0.6.4's README carries an ### operator SLO (slo.*) section describing values the chart removed at 0.6.0 and that its own values.schema.json now rejects. Following it produces:

Error: values don't meet the specifications of the schema(s)
- at '': additional properties 'slo' not allowed

An OCI tag here is immutable by policy — the release job refuses to overwrite a published version — so those bytes are permanent. Confirmed against the registry just now:

0.6.5 README: corrective section present
0.6.4 README: still documents slo.alerting.enabled

Correcting the README in source (eks-agent-platform#213) and leaving the fleet pinned a version behind it would leave the defect exactly where it does harm — in the artifact a reader actually reaches.

task validate: 109 addon×env combinations, 0 failed.

0.6.5 is a documentation-only release. Its rendered manifests are identical to
0.6.4's — 34 changed lines against this repo's production values, all of them
the helm.sh/chart label.

The pin moves anyway, because the pinned version is also the pointer to the
chart's documentation. 0.6.4's README carries an `### operator SLO (slo.*)`
section describing values the chart removed at 0.6.0 and that its own
values.schema.json now rejects, so following it produces `additional properties
'slo' not allowed` rather than the alerting it promises. An OCI tag here is
immutable by policy — the release job refuses to overwrite a published version —
so those bytes are permanent, and anyone who inspects the chart this fleet
resolves reads them.

Correcting the README in source and leaving the fleet pinned a version behind it
would have left the defect exactly where it does harm: in the artifact a reader
actually reaches.
@github-actions

github-actions Bot commented Aug 8, 2026

Copy link
Copy Markdown

CI Results

Check Status
Zero-placeholder gate ✅ success
YAML Lint ✅ success
Dashboard gate (live grafana.com ids + AMG-saveable) ✅ success
Kyverno policy tests (+ verify-images contract) ✅ success
Fork-safety gate (no hardcoded org, blocking) ✅ success
Helm-render (every addon × every env) ✅ success
Policy-admission (Enforce-tier Kyverno vs the fleet) ✅ success
ApplicationSet schema + sync waves ✅ success
Appset render (Karpenter subnet selector) ✅ success
Secret scan (gitleaks) ✅ success
Render + assert + schema + misconfig (all environments) ✅ success

All checks passed.

@stxkxs
stxkxs merged commit 8e61dab into main Aug 8, 2026
21 checks passed
@stxkxs
stxkxs deleted the operator-0-6-5 branch August 11, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant