Hide the staging rollout controller

Hide the staging rollout controller

Deploy story

What this commit did to the running system — joined from the forge receipt chain, the part a commit page elsewhere cannot show.

Not deployed through the forge lane

No push, promotion, build, or deploy receipt references this commit (receipts are scanned over a bounded recent window). Changes shipped by full node replacement carry their proof in the release gate receipt instead.

Changed files

modified infra/staging/templates/deployer-startup.sh.tftpl
modified infra/staging/tests/safety.tftest.hcl

Diff

2 files changed, +9 -0

    exec /app/erts-*/bin/erl \
      -boot_var RELEASE_LIB /app/lib \
      -boot "/app/releases/$release_version/start_clean" \
      -hidden \
      -name openagents-deployer@openagents-deployer.staging.internal \
      -kernel inet_dist_listen_min 9100 inet_dist_listen_max 9115 \
      -noshell \

    error_message = "The staging deployer must not have a public access configuration."
  }

  assert {
    condition = strcontains(
      google_compute_instance.deployer.metadata["startup-script"],
      "-hidden"
    )
    error_message = "The staging deployer must use a hidden Erlang node so it can probe every fleet member without joining the global cluster."
  }

  assert {
    condition     = google_sql_database_instance.staging.deletion_protection
    error_message = "The staging database must keep Terraform deletion protection enabled."

85	85		`exec /app/erts-*/bin/erl \`
86	86		`-boot_var RELEASE_LIB /app/lib \`
87	87		`-boot "/app/releases/$release_version/start_clean" \`
	88	+	`-hidden \`
88	89		`-name openagents-deployer@openagents-deployer.staging.internal \`
89	90		`-kernel inet_dist_listen_min 9100 inet_dist_listen_max 9115 \`
90	91		`-noshell \`

38	38		`error_message = "The staging deployer must not have a public access configuration."`
39	39		`}`
40	40
	41	+	`assert {`
	42	+	`condition = strcontains(`
	43	+	`google_compute_instance.deployer.metadata["startup-script"],`
	44	+	`"-hidden"`
	45	+	`)`
	46	+	`error_message = "The staging deployer must use a hidden Erlang node so it can probe every fleet member without joining the global cluster."`
	47	+	`}`
	48	+
41	49		`assert {`
42	50		`condition = google_sql_database_instance.staging.deletion_protection`
43	51		`error_message = "The staging database must keep Terraform deletion protection enabled."`