Skip to content

Validate unrelated chart releases without retirement lookup data #4857

Closed

Description

@devantler

🤖 Generated by the Agentic Engineer

Expected Behavior

Offline validation of an unrelated chart release can establish that it is not a retirement consumer without needing live retirement state. Real consumers must still fail closed on missing, malformed or failed lookup evidence.

Actual Behavior

The chart-consumer retirement rule asks for lookup-dependent state before checking whether a resource consumes the captured chart. The standard offline validator therefore stops on unrelated chart releases, blocking otherwise unrelated manifest fixes.

Steps to Replicate

  1. Run the production manifest validator with the committed tool version.
  2. Observe an unavailable-context error on an unrelated chart release.
  3. Compare the independent consumer predicate with the lookup-dependent precondition order.

Acceptance criteria

  • Reproduce the ordering failure using the real policy engine and offline validator.
  • Preserve all consumer and retained-data denials, including failed API lookups.
  • Prefer an equivalent condition-order correction; reject it if actual controls show weakened enforcement or no repair.
  • Pass affected regressions, current-head CI/review and normal merge/deployment verification.

Related to #4266 and #4856. Priority rationale: a validation blocker on live observability restoration; a narrow ordering repair is preferable to disabling a safety check.

Activity

  1. added theissue type on Oct 13, 2026
  2. moved this to 📥 Backlog in 🌊 Project Boardon Oct 13, 2026
  3. moved this from 📥 Backlog to 🏃🏻‍♂️ In Progress in 🌊 Project Boardon Oct 13, 2026
  4. added 2 commits that reference this issue on Oct 13, 2026
  5. moved this from 🏃🏻‍♂️ In Progress to 👀 In Review in 🌊 Project Boardon Oct 13, 2026
  6. moved this from 👀 In Review to ✅ Done in 🌊 Project Boardon Oct 14, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Fields

    Priority

    None yet

    Effort

    None yet

    Projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions