Skip to content

seam-core: session/17 PKI rotation fields, CAPI mode validation, condition reasons, CODEBASE.md#16

Merged
ontave merged 2 commits into
mainfrom
session/17-pki-rotation-automation
May 2, 2026
Merged

seam-core: session/17 PKI rotation fields, CAPI mode validation, condition reasons, CODEBASE.md#16
ontave merged 2 commits into
mainfrom
session/17-pki-rotation-automation

Conversation

@ontave
Copy link
Copy Markdown
Contributor

@ontave ontave commented May 2, 2026

Summary

  • Add PkiRotationThresholdDays to InfrastructureTalosClusterSpec (days before cert expiry to trigger rotation)
  • Add PkiExpiryDate to InfrastructureTalosClusterStatus (earliest cert expiry across talosconfig and kubeconfig certs)
  • Add ReasonConductorDeploymentAvailable and ReasonConductorDeploymentUnavailable condition reason constants
  • T-04a: CEL validation rule for mode=import requires spec.role on InfrastructureTalosClusterSpec
  • Add CODEBASE.md with precise code references
  • Fix TCOR operationCount: remove omitempty so zero serializes correctly

Test plan

  • go test ./... passes in seam-core
  • Generated deepcopy includes PkiExpiryDate and PkiRotationThresholdDays

🤖 Generated with Claude Code

ontave added 2 commits May 2, 2026 23:05
…uctureTalosCluster

Adds spec.pkiRotationThresholdDays (int32, default 30, min 1) and
status.pkiExpiryDate (*metav1.Time) to support PKI rotation automation.
Updates zz_generated.deepcopy.go and CODEBASE.md. platform-schema.md §13.
@ontave ontave force-pushed the session/17-pki-rotation-automation branch from cc1ba85 to 0f5483e Compare May 2, 2026 21:05
@ontave ontave merged commit d90ee3d into main May 2, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant