stack-orchestrator/stack_orchestrator/deploy
Prathamesh Musale 4733631572 feat(k8s): namespace ownership check to prevent silent cross-deployment override
Two deployments whose stack_name derives the same namespace (e.g. two
deployments of the test stack, or any spec without an explicit
`namespace:` override) silently patch each other's Deployment,
ConfigMaps, Services, and PVCs when they share a cluster — last
`deployment start` wins. No error today; operator sees only "Updated
Deployment ... (rolling update)" and can't tell what happened.

Stamp the namespace with a `laconic.com/deployment-dir` annotation on
first creation. On subsequent `deployment start`:

- Annotation missing (legacy / user-created namespace): adopt by
  stamping, so the NEXT conflicting deployment fails loudly.
- Annotation matches this deployment's dir: proceed.
- Annotation points to a different deployment dir: raise
  DeployerException with both dirs and the exact `namespace:` spec
  override to fix it.

Low migration risk: the woodburn pattern (multiple stacks, each with
its own stack_name-derived namespace) continues to work — those
namespaces don't collide by construction. Only same-stack+same-cluster
deployments are affected, which never worked correctly.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-20 13:30:53 +00:00
..
compose so-l2l: in-place stop/restart via label-scoped cleanup (#743) 2026-04-16 12:10:04 +05:30
k8s feat(k8s): namespace ownership check to prevent silent cross-deployment override 2026-04-20 13:30:53 +00:00
webapp Merge wd-a7b: cluster-id/namespace naming, jobs, multi-cert, secrets 2026-04-01 18:22:07 +00:00
__init__.py Rename app -> stack_orchestrator (#625) 2023-11-07 00:06:55 -07:00
deploy.py so-l2l: in-place stop/restart via label-scoped cleanup (#743) 2026-04-16 12:10:04 +05:30
deploy_types.py Add Job and secrets support for k8s-kind deployments (#995) 2026-03-11 03:56:21 +00:00
deploy_util.py Fix pyright type errors across codebase 2026-01-22 01:10:36 -05:00
deployer.py so-l2l: in-place stop/restart via label-scoped cleanup (#743) 2026-04-16 12:10:04 +05:30
deployer_factory.py Add Job and secrets support for k8s-kind deployments (#995) 2026-03-11 03:56:21 +00:00
deployment.py so-l2l: in-place stop/restart via label-scoped cleanup (#743) 2026-04-16 12:10:04 +05:30
deployment_context.py Merge origin/main into multi-port-service 2026-01-24 16:48:11 -05:00
deployment_create.py feat(k8s): auto-ConfigMap for file-level host-path compose volumes 2026-04-20 13:13:43 +00:00
dns_probe.py feat(deploy): add deployment restart command 2026-02-03 17:15:19 -05:00
images.py Apply pre-commit linting fixes 2026-01-21 20:58:31 -05:00
spec.py Add ip mode to external-services for static IP endpoints (#740) 2026-04-02 17:53:23 +05:30
stack.py Apply pre-commit linting fixes 2026-01-21 20:58:31 -05:00
stack_state.py Rename app -> stack_orchestrator (#625) 2023-11-07 00:06:55 -07:00