Skip to content

initial config-service onboarding#1608

Open
japoorv wants to merge 35 commits into
mainfrom
feature/onboard-config-service
Open

initial config-service onboarding#1608
japoorv wants to merge 35 commits into
mainfrom
feature/onboard-config-service

Conversation

@japoorv

@japoorv japoorv commented Jun 11, 2026

Copy link
Copy Markdown

No description provided.

@CLAassistant

CLAassistant commented Jun 11, 2026

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you all sign our Contributor License Agreement before we can accept your contribution.
1 out of 2 committers have signed the CLA.

✅ hibohra1398
❌ japoorv
You have signed the CLA already but the status is still pending? Let us recheck it.

japoorv and others added 28 commits June 11, 2026 13:51
Two issues surfaced when smpairgappatch1 deployed config-service via
the umbrella chart:

- the rendered Deployment used `<+artifacts.primary.tag>` as the
  image tag. That's a Harness CD pipeline expression — it only
  resolves under HelmDeploy, so plain `helm upgrade` in SMP leaves
  the literal token in the manifest. The subchart's own
  configService.image.repository ("config-service") also wins over
  migrate-image-repos.sh's rewrite of the top-level image block.

- kafka TLS user/truststore secrets (kafka-platform-super-admin,
  kafka-platform-cluster-ca-cert) are mounted by default; not
  present in SMP namespaces, so the pod gets stuck in Init.

Pin the image to the published signed artifact and disable kafka at
the UDP module level so every SMP consumer of this module gets the
right defaults without per-devspace overrides.
Drop dep version so the SMP release helper sees a real diff
when bumping to 0.1.130 on the next PL-1234 build, otherwise
the helper finds nothing to commit and never pushes the ticket
branch to origin.
- Add schema-service as a dep at 0.13.5 (one notch behind latest 0.13.6
  so the SMP release helper sees a real diff on next ticket-branch push).
- Pin image to harnesssecure/schema-service-signed:0.13.6 and disable
  kafka via override, mirroring the config-service pattern.
- Add docker-repo-map entry so migrate-image-repos.sh rewrites the
  rendered chart image to harnesssecure/schema-service-signed.

Pre-req: secops needs to create harnesssecure/schema-service-signed
on docker.io before deployments can pull successfully.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants