test(mealie): exercise fail-closed canary reconciliation #183
No reviewers
Labels
No labels
bug
documentation
duplicate
enhancement
good first issue
help wanted
invalid
question
wontfix
No milestone
No project
No assignees
1 participant
Notifications
Due date
No due date set.
Dependencies
No dependencies set
Reference
homelab/apps!183
Loading…
Reference in a new issue
No description provided.
Delete branch "test/homeit-474-mealie-fail-closed"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Temporarily add an intentionally missing group reference to the Mealie canary for HOMEIT-474's reviewed failure acceptance. The existing administrator and app-group references remain declared; the operator must reject the incomplete list as a whole, detach the provider and retain ALL+false guard. This deliberately blocks new Mealie authorizations during the test, with no existing-session revocation or changes to other applications.
Current canary grant/removal is proven with actual new authorization attempts: akadmin allowed only after the Git grant, denied again after Git removal; morten allowed. Chart validation and server dry-run accept the new reference shape. After green CI and merge, observe exact live closure and actual rejection, exercise empty-list/status/restart recovery while closed, then restore only the known-good app+admin references in a separate Git commit. This is an acceptance step within the Security HOMEIT-481/Morten-approved canary plan; it never opens access or provisions identity data.