Skip to content

feat(dcap): decouple PCK provisioning lifecycle - #150

Merged
butler54 merged 5 commits into
validatedpatterns:mainfrom
butler54:feat/decouple-dcap-pck-lifecycle
Sep 24, 2026
Merged

butler54 merged 5 commits into
validatedpatterns:mainfrom
butler54:feat/decouple-dcap-pck-lifecycle

Conversation

@butler54

@butler54 butler54 commented Sep 7, 2026 •

Copy link
Copy Markdown
Collaborator

Summary

  • Make the Makefile the primary interface for DCAP collateral and PCK lifecycle actions.
  • Separate platform-independent collateral collection from platform-specific PCK export, generation, and import.
  • Support a connected bastion and high-side/low-side transfer bundles with platform-set validation.
  • Resume an interrupted connected-bastion provision by reusing matching request and unexpired response bundles.
  • Discover the QGS DaemonSet from the pck-certs-watcher pod owner reference.
  • Fix DCAP/PCK expiry command failure propagation and document the lifecycle.

Validation

  • pytest -q: 14 passed
  • Shell syntax checks
  • Python compilation
  • make help
  • git diff --check

Live Validation Pending

  • Resume connected-bastion import and QGS rollout from the generated response bundle.
  • Split high-side/low-side export, generation, and import workflow.

Closes #149

command_provision passes SimpleNamespace instances to command_export,
command_generate, and command_import, which were annotated as
argparse.Namespace. Super-linter's mypy (1.15.0) rejects the call sites
with [arg-type] errors because SimpleNamespace is the superclass of
argparse.Namespace, not the other way around.

Widen the handler signatures to SimpleNamespace; argparse.Namespace
objects remain valid at runtime and the handlers only read attributes.
Run the new scripts/dcap-pck.py and tests/test_dcap_pck.py through Black
so PYTHON_BLACK and PYTHON_FLAKE8 (E501) pass in super-linter, alongside the
earlier mypy [arg-type] fix.

Black wraps the long lines to its 88-char default, which also clears the
flake8 line-length limit. Split a few long error-message literals that did
not fit Black's wrapping so they stay under the limit and remain readable.
@butler54
butler54 marked this pull request as ready for review September 24, 2026 06:48
@butler54
butler54 requested a review from a team September 24, 2026 06:48
@butler54
butler54 merged commit 201d72e into validatedpatterns:main Sep 24, 2026
5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

[Feature]: Decouple makefile wrappers of dcap collateral phases

1 participant