Update passive HA application hosts - #890

Open

ankitgoswami wants to merge 67 commits into

ankitg/ha-clean-install-qualificationfrom

ankitg/ha-passive-update

Commits on Aug 11, 2026

feat(ha): update passive application hosts
ankitgoswami
committed
ff273da
Address passive update review feedback (#890)
ankitgoswami
committed
9e3be86
Address passive update security review (#890)
ankitgoswami
committed
7cd62f6
Surface degraded HA update completion (#890)
ankitgoswami
committed
c0e9eca
Limit HA updates to adjacent releases (#890)
ankitgoswami
committed
f50d1db
Keep HA infrastructure pinned during app updates (#890)
ankitgoswami
committed
bbc46db
Make HA recovery command directly runnable (#890)
ankitgoswami
committed
57c1561
Verify adjacent releases across bounded history (#890)
ankitgoswami
committed
52db87e
Preserve HA substrate after target preflight (#890)
ankitgoswami
committed
ddab096
Allow verified mixed-version passive startup (#890)
ankitgoswami
committed
3b4800e
Require passive HA update redundancy (#890)
ankitgoswami
committed
64d814b
Name rolling-update readiness explicitly (#890)
ankitgoswami
committed
1e31204
Harden HA update activation outcomes
ankitgoswami
committed
89c8030
Allow passive update after HA role change (#890)
ankitgoswami
committed
1997874
Fail closed on stale HA update state (#890)
ankitgoswami
committed
b7e3898
Reject stale HA updater artifacts (#890)
ankitgoswami
committed
3a00ac9
Install updater from verified release snapshot
ankitgoswami
committed
a3c7cdc
Fail closed on incomplete release history
ankitgoswami
committed
d6a0db3
Document HA updates only with completion flow
ankitgoswami
committed
119fb69
Simplify HA update version validation
ankitgoswami
committed
454accf
Report degraded HA update readiness
ankitgoswami
committed
5c4d4ec
Recover updater before HA startup
ankitgoswami
committed
ccb2e98
Keep updater independent from HA startup
ankitgoswami
committed
5977124
Backfill pinned HA infrastructure config
ankitgoswami
committed
433cbf4
Clean up HA after updater setup failure
ankitgoswami
committed
41961c7
Disable incomplete HA updater service
ankitgoswami
committed
420e5f8
Permit HA updater config backfill
ankitgoswami
committed
60768cd
Keep pinned HA infrastructure immutable
ankitgoswami
committed
fef514f
Document HA migration compatibility contract
ankitgoswami
committed
6f5a406
Enforce qualified HA update source
ankitgoswami
committed
e450f22
Select adjacent HA release semantically
ankitgoswami
committed
ccacd36
Require passive role after HA update
ankitgoswami
committed
5553d9e
Keep stable HA updates on stable channel
ankitgoswami
committed
0bf151c
Fail HA updates before privileged mutation
ankitgoswami
committed
5d85391
Document HA update support boundary
ankitgoswami
committed
1e7d880
Require explicit HA update qualification
ankitgoswami
committed
58a62bc
Gate HA release publication on qualification
ankitgoswami
committed
2b12c84
Keep HA qualification on released artifacts
ankitgoswami
committed
09b310d
Repair interrupted passive update before HA startup
ankitgoswami
committed
7ba65c8
Clarify HA update qualification timing
ankitgoswami
committed
0e69ff2
Recheck passive role during update activation
ankitgoswami
committed
d278a84
Stabilize concurrent updater admission test
ankitgoswami
committed
26bbd90
Fail closed on unsupported HA update states
ankitgoswami
committed
d34cb42
Simplify HA update readiness checks
ankitgoswami
committed
7547a63
Bound HA updater recovery and substrate
ankitgoswami
committed
8a8df93
Document initial HA update boundary
ankitgoswami
committed
da78c53
Test HA substrate generation guard
ankitgoswami
committed
e2b036f
Restart updater with HA services
ankitgoswami
committed
5cd4345
Bind HA updates to qualified release builds
ankitgoswami
committed
82b9804
Backfill pinned HA config before validation
ankitgoswami
committed
0ebab56
Leave a promoted HA node untouched during recovery
ankitgoswami
committed
4813c61
Hold HA qualification releases as prereleases
ankitgoswami
committed
6f42403
Keep updater install test credentials valid
ankitgoswami
committed
f564029
Fail closed before replacing a running HA app
ankitgoswami
committed
7520407
Allow HA repair when updater is already healthy
ankitgoswami
committed
b3f4ffc
Qualify HA updates from stable releases only
ankitgoswami
committed
2637130
Recover interrupted updater handoffs
ankitgoswami
committed
1b7f4c0
Recover passive HA application on updater restart
ankitgoswami
committed
f16181f
Preserve updater rollback during restart recovery
ankitgoswami
committed
d986963
Recover HA applications after substrate startup
ankitgoswami
committed
e65c22e
Fail closed without pinned HA infrastructure
ankitgoswami
committed
f77a5f1
Keep HA rolling updates stable-only
ankitgoswami
committed
c3961b9
Preserve updater retry through HA repair
ankitgoswami
committed
02effad
Require qualified HA update releases
ankitgoswami
committed
309582e
Accept complete GitHub release metadata
ankitgoswami
committed
6865b50
Make HA recovery commands active-safe
ankitgoswami
committed
4a56f52
Align HA updates with local status API
ankitgoswami
committed
41df5bb