Keep bound pod generation immutable until cleanup

toasterson commented

2026-10-01 21:51:13 +00:00

Owner

General Pod PUT/PATCH previously allowed a bound native workload image, command, mount or brand to change while its zone retained the original ownership configuration. Updates now preserve managed identity/status/deletion fields and reject changes to a bound spec or brand. Metadata labels remain editable, and initial Pending binding still works.

Work item: 01a0f6e0-dd44-7ef3-b54c-30ff0d5a7ff1 (WI-5 follow-up discovered during WI-3 integration).

Validation at 9d7a788: 38 API tests, strict package all-target Clippy, formatting/build and complete TLS/authentication/restart process smoke passed locally. Native workspace validation passed at exact9d7a788 on oibldofgate (SunOS/global/root, GCC14/Rust1.97.1, jobs2); unit tests, fmt, strict Clippy, SMF validation and build exited 0. Process suites were replayed serially against a frozen binary to avoid shared-output interference. All API/TLS, two-worker, lifecycle and authenticated generation guard suites passed. Frozen native binary SHA256 dd214aca44772f05a3b5e1cfc4ba43c15679547ba4bcff0be36da3ec79a07ad9. This PR does not claim native zone proof or canonical Anima acceptance.

General Pod PUT/PATCH previously allowed a bound native workload image, command, mount or brand to change while its zone retained the original ownership configuration. Updates now preserve managed identity/status/deletion fields and reject changes to a bound spec or brand. Metadata labels remain editable, and initial Pending binding still works. Work item: 01a0f6e0-dd44-7ef3-b54c-30ff0d5a7ff1 (WI-5 follow-up discovered during WI-3 integration). Validation at 9d7a788: 38 API tests, strict package all-target Clippy, formatting/build and complete TLS/authentication/restart process smoke passed locally. Native workspace validation passed at exact9d7a788 on oibldofgate (SunOS/global/root, GCC14/Rust1.97.1, jobs2); unit tests, fmt, strict Clippy, SMF validation and build exited 0. Process suites were replayed serially against a frozen binary to avoid shared-output interference. All API/TLS, two-worker, lifecycle and authenticated generation guard suites passed. Frozen native binary SHA256 dd214aca44772f05a3b5e1cfc4ba43c15679547ba4bcff0be36da3ec79a07ad9. This PR does not claim native zone proof or canonical Anima acceptance.

toasterson added 1 commit

2026-10-01 21:51:14 +00:00

Preserve bound Pod native generation on API updates 9d7a788f7e

toasterson merged commit fc0a759616 into main

2026-10-01 22:03:04 +00:00

toasterson referenced this pull request from a commit

2026-10-01 22:03:05 +00:00

Merge pull request 'Keep bound pod generation immutable until cleanup' (#5) from codex/pod-generation-guards-20261001 into main

Rows
Columns

Keep bound pod generation immutable until cleanup #5