Skip to content

fix(ske/ske-starterkit): wire stackit-ai secret into forgejo-connector e2e#216

Closed
malhussan wants to merge 1 commit into
mainfrom
fix/ske-starterkit-e2e-stackit-ai-secret
Closed

fix(ske/ske-starterkit): wire stackit-ai secret into forgejo-connector e2e#216
malhussan wants to merge 1 commit into
mainfrom
fix/ske-starterkit-e2e-stackit-ai-secret

Conversation

@malhussan

@malhussan malhussan commented Jul 2, 2026

Copy link
Copy Markdown
Member

Summary

  • The ske-starterkit e2e test references the ai-summarizer Helm chart, which requires a stackit-ai Kubernetes secret (STACKIT_AI_BASE_URL, STACKIT_AI_API_KEY, STACKIT_AI_MODEL) via envFrom.secretRef
  • The forgejo-connector was never passed additional_kubernetes_secrets, so the secret was never created in the tenant namespace
  • Pod failed with CreateContainerConfigError: secret "stackit-ai" not found
  • Gap existed since May 6 but was masked until June 26 by a race in trigger_and_await_forgejo_workflow.py that declared success before the deploy job was scheduled
  • Accept a stackit_ai_secret_data variable from the smoke-test runner and pass it to module "forgejo_connector" as additional_kubernetes_secrets; token provisioned in meshstack-smoke-test/infra/stackit-ske

…r e2e

The e2e test referenced the ai-summarizer Helm chart which requires a
'stackit-ai' Kubernetes secret (STACKIT_AI_BASE_URL, STACKIT_AI_API_KEY,
STACKIT_AI_MODEL), but the forgejo-connector module was never given
additional_kubernetes_secrets to create it. The deploy job therefore
failed with CreateContainerConfigError: secret "stackit-ai" not found.

This gap existed since the e2e was first created (May 6). It was masked
until June 26 by a bug in trigger_and_await_forgejo_workflow.py that
declared success before the deploy job was even scheduled (281007c).

Accept a stackit_ai_secret_data variable from the smoke-test runner and
pass it to forgejo-connector as additional_kubernetes_secrets. The token
is provisioned in meshstack-smoke-test/infra/stackit-ske via
stackit_modelserving_token so the hub module stays environment-agnostic.
@github-actions

github-actions Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Scorecard Check

Scorecard run on commit cce068d802c7199508ae1207c7b86a3e4f2dbea9 relative to origin/main

📊 meshstack-hub Module Scorecard

Generated: 2026-07-02 | Modules scanned: 1 | Categories: 5

📋 Per-Module Category Summary

Score per category per building block. n/a = category does not apply to this module.

Module Overall Core Structure Integration Azure Backplane STACKIT Backplane Testing
ske/ske-starterkit 🟢 95% 🟢 100% 🟢 100% n/a n/a 🟡 67%

⚠️ 1 module has failing checks — failing categories are expanded below.

Core Structure — ✅ all passing

Basic module file structure and documentation — applies to 1 modules

Module Score 📦 🔗 📋 📝 🖼️ 📌 🔒
ske/ske-starterkit 🟢 100%

Core Structure — Summary

Emoji Criterion Coverage Status
📦 buildingblock/ directory exists 1/1 🟢 100%
🔗 meshstack_integration.tf present 1/1 🟢 100%
📋 buildingblock/APP_TEAM_README.md present (no-integration fallback) n/a
📝 buildingblock/README.md with YAML front-matter 1/1 🟢 100%
🖼️ buildingblock/logo.png included 1/1 🟢 100%
📌 buildingblock/versions.tf present 1/1 🟢 100%
🔒 Provider versions use minimum constraint (>=) 1/1 🟢 100%
Integration — ✅ all passing

meshstack_integration.tf conventions — applies to 1 modules

Module Score 🏷️ 🏢 📤 🔌 📎 🔀 📋 🏷️ 📖 📝 📊 🚫 🔄
ske/ske-starterkit 🟢 100%

Integration — Summary

Emoji Criterion Coverage Status
🏷️ variable "hub" in integration 1/1 🟢 100%
🏢 variable "meshstack" in integration 1/1 🟢 100%
📤 building_block_definition output exposed 1/1 🟢 100%
🔌 meshcloud/meshstack in required_providers 1/1 🟢 100%
📎 backplane source uses var.hub.git_ref 1/1 🟢 100%
🔀 ref_name uses var.hub.git_ref 1/1 🟢 100%
📋 version_spec.draft uses var.hub.bbd_draft 1/1 🟢 100%
🏷️ BBD metadata.tags forwards var.meshstack.tags 1/1 🟢 100%
📖 BBD readme field present 1/1 🟢 100%
📝 BBD readme starts with plain-text description (no heading) 1/1 🟢 100%
📊 BBD readme has shared responsibility table (✅/❌) 1/1 🟢 100%
🚫 No documentation_md output in backplane 1/1 🟢 100%
🔄 meshstack_platform has lifecycle ignore_changes = [availability] n/a
Azure Backplane — not applicable

Azure UAMI-based automation principal conventions — applies to 0 modules

No applicable modules.

STACKIT Backplane — not applicable

STACKIT WIF-based automation principal conventions — applies to 0 modules

No applicable modules.

Testing — some checks failing

End-to-end test coverage — applies to 1 modules

Module Score ⚙️ 🧪
ske/ske-starterkit 🟡 67%

Testing — Summary

Emoji Criterion Coverage Status
⚙️ backplane/ directory (optional tier) 0/1 🔴 0%
🧪 e2e/ test directory exists 1/1 🟢 100%
e2e/ contains .tftest.hcl files 1/1 🟢 100%

@aws-amplify-eu-central-1

Copy link
Copy Markdown

This pull request is automatically being deployed by Amplify Hosting (learn more).

Access this pull request here: https://pr-216.d1o16zfeoh2slu.amplifyapp.com

@malhussan malhussan closed this Jul 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant