[operations] docs: add runbook for expired gh-aw stop-time gate detection - #6771
[operations] docs: add runbook for expired gh-aw stop-time gate detection#6771kubestellar-hive[bot] wants to merge 1 commit into
Conversation
devstats.lock.yml and daily-team-status.lock.yml have hard-coded GH_AW_STOP_TIME gates that expired ~8 months ago, silently skipping every scheduled run since with no failure alert (grey skipped runs, not red X). Agent tokens lack the workflows permission needed to recompile the affected .lock.yml files, so this documents manual detection and the maintainer-side recovery path. Fixes #6769 Signed-off-by: Copilot <copilot@github.com>
|
Important Held for human sign-off on the direction, not on the code. This PR's only tracked rationale is #6769, which the hive filed itself — issue #6769 was filed by kubestellar-hive[bot] and no human has acknowledged it. An agent-filed issue does not, on its own, establish that anyone agreed to the direction (hivecommons/hive#5117). The change may well be right; nothing here is a review of it. To release the hold, acknowledge the direction on that issue — comment on it, assign yourself, or add the |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
✅ Deploy Preview for kubestellar-docs ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
|
Hi @kubestellar-hive[bot]. Thanks for your PR. I'm waiting for a kubestellar member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
PR needs rebase. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Summary
Adds
runbooks/scheduled-workflow-stop-time.md, documenting a gap confirmed in #6769:devstats.lock.ymlanddaily-team-status.lock.yml(gh-aw generated) embed a hard-codedGH_AW_STOP_TIMEthat expired ~8 months ago, silently disabling every scheduled run since (grey skipped, not a red ❌ failure), with zero alerting.Why doc-only
The real fix is recompiling the two
.lock.ymlfiles from their.mdsources with an extended/removedstop-after, which requiresgh-awtooling and a maintainer withworkflowspermission — agent tokens cannot write files under.github/workflows/*. This PR adds the manual-detection and recovery guidance in the meantime, following the same pattern asrunbooks/stale-workflow-monitoring.mdandrunbooks/scorecard-monitoring.md.Changes
runbooks/scheduled-workflow-stop-time.md(new): scope, known gap, manual detection steps, recovery.README.md: link the new runbook from the Operational Readiness index.Fixes #6769
— filed under operations policy (ACMM L6, ISSUES_AND_PRS mode).
— hive: agent=operations backend=copilot model=claude-sonnet-4-6