on-demand (sablier) must honour plat.sh/lifecycle=archived #209

New issue

Open

opened 2026-08-25 15:59:23 +00:00 by plat · 0 comments

plat commented

2026-08-25 15:59:23 +00:00

Owner

Found during the repo-lifecycle e2e (plat/mcp#45): an archived app is spun down by the lifecycle reconciler (prod Deployments 0, namespace labelled plat.sh/lifecycle=archived). Sablier's wake path does not know the label, so a request to an archived app in the on-demand pilot scales it back up; the reconciler undoes it on its next tick (≤60s flapping, no data at risk — verified live, 23s). Before the pilot leaves plat.sh/on-demand=pilot, make the wake path skip namespaces carrying the label (or exclude them in the Kyverno on-demand match/mutate rules). See docs/ops/on-demand.md → Archived apps.

Found during the repo-lifecycle e2e (plat/mcp#45): an archived app is spun down by the lifecycle reconciler (prod Deployments 0, namespace labelled `plat.sh/lifecycle=archived`). Sablier's wake path does not know the label, so a request to an archived app in the on-demand pilot scales it back up; the reconciler undoes it on its next tick (≤60s flapping, no data at risk — verified live, 23s). Before the pilot leaves `plat.sh/on-demand=pilot`, make the wake path skip namespaces carrying the label (or exclude them in the Kyverno on-demand match/mutate rules). See docs/ops/on-demand.md → Archived apps.