Scott KarpandClaude Fable 5.1
354e223384
From a reading of the gate's documents (2026-10-21): - AGENTS.md: Steps 14 and 15 shown Pending while the Port and both sockets have carried live traffic since the gate was built → Done, with what carries them; "next build task" now points at the open items, the phase tables being complete. - README.md: the repository tree omitted azazel_processor, kushya_generator, mesorah, src/tools and scripts → listed, each in a line. - deploy/ARCHITECTURE.md: the judgment path holds no model, said in writing — the examination is Python patterns and Prolog rules, the judges consult that Prolog; kushya_generator (a fine-tuned model in this repo, not deployed, not wired) is an OFFERER whose output is examined, never a component the bedikah, the engine or a judge consults. The kohen is not the offerer. azazel_processor listed. - The map: the repository is public; eleven files named the ingress NLB's literal address and five the kohen's kubeconfig path. Docs now use the domains (git.bikoret.ch, bikoret.ch) or "<NLB-IP>" with the kubectl query that answers it; the kubeconfig is "$KUBECONFIG" / "$HOME/.kube/<your-cluster>.yaml". gitea-public-apply.sh takes NLB from the environment. None of it was a secret; all of it was a map. - OTP pin: checked, not changed — the segfault in the build log was a source-built OTP 26.2.1 on macOS; the image is hexpm's 26.2.1 with ERL_FLAGS +JMsingle. Co-Authored-By: Claude Fable 5.1 <noreply@anthropic.com>
30 lines
1.9 KiB
Bash
Executable File
30 lines
1.9 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
# Take shorashim.ch down from the cluster and rename Gitea's brand
|
|
# (2026-10-20). Run by the transmitter:
|
|
# ! bash ~/.local/bin/shorashim-ch-takedown
|
|
# Idempotent.
|
|
# 1. Ingress `shorashim`: the shorashim.ch host rule is gone (service.yaml).
|
|
# The no-host catch-all stays, so http://<NLB-IP>/ still answers —
|
|
# the name itself dies when its A record is removed at Infomaniak.
|
|
# 2. The orphan TLS secret for mcp.shorashim.ch is deleted.
|
|
# 3. Gitea APP_NAME "Shorashim" → "Bikoret" (gitea-public-patch.yaml; one restart).
|
|
set -euo pipefail
|
|
REPO="${REPO:-$HOME/bikoret}"
|
|
cd "$REPO"
|
|
echo "== 1/3 ingress without the shorashim.ch rule"
|
|
kubectl apply -f deploy/k8s/service.yaml
|
|
echo "== 2/3 orphan certificate secret for mcp.shorashim.ch"
|
|
kubectl -n shorashim delete secret gitea-mcp-tls --ignore-not-found
|
|
echo "== 3/3 Gitea brand → Bikoret"
|
|
kubectl -n temple-council patch deploy gitea --patch-file deploy/k8s/gitea-public-patch.yaml
|
|
kubectl -n temple-council rollout status deploy/gitea --timeout=180s
|
|
echo "== verify"
|
|
fail=0
|
|
hosts=$(kubectl get ingress -A -o jsonpath='{range .items[*]}{range .spec.rules[*]}{.host}{" "}{end}{end}')
|
|
case " $hosts " in *" shorashim.ch "*) echo "FAIL ingress still lists shorashim.ch"; fail=1;; *) echo "ok no ingress rule for shorashim.ch";; esac
|
|
case "$(kubectl get secret -A -o name | grep -c 'gitea-mcp-tls$' || true)" in 0) echo "ok gitea-mcp-tls secret gone";; *) echo "FAIL gitea-mcp-tls secret remains"; fail=1;; esac
|
|
title=$(curl -sS -m 15 https://git.bikoret.ch/ | grep -o -m1 '<title>[^<]*</title>' || echo none)
|
|
case "$title" in *Bikoret*) echo "ok gitea title: $title";; *) echo "FAIL gitea title: $title"; fail=1;; esac
|
|
case "$(curl -sS -m 15 -o /dev/null -w '%{http_code}' https://bikoret.ch/kodesh/health || echo err)" in 200) echo "ok bikoret.ch still healthy";; *) echo "FAIL bikoret.ch health"; fail=1;; esac
|
|
exit $fail
|