Skip to content

Generate VeriReel preview runtime secrets#945

Merged
cbusillo merged 2 commits into
mainfrom
fix/verireel-preview-database-url-safety
May 28, 2026
Merged

Generate VeriReel preview runtime secrets#945
cbusillo merged 2 commits into
mainfrom
fix/verireel-preview-database-url-safety

Conversation

@cbusillo
Copy link
Copy Markdown
Owner

Summary

  • generate preview-local VeriReel runtime secrets instead of copying template app secrets
  • preserve existing preview secrets across refreshes so reruns do not rotate runtime identity unexpectedly
  • keep runtime key-safety checks for any other secret-shaped template keys that would still be copied

Verification

  • uv run python -m unittest tests.test_verireel_preview_driver tests.test_service.LaunchplaneServiceTests.test_verireel_preview_refresh_driver_executes_for_authorized_workflow tests.test_service.LaunchplaneServiceTests.test_verireel_preview_refresh_driver_writes_failed_generation_record tests.test_service.LaunchplaneServiceTests.test_verireel_preview_refresh_config_error_is_recorded_as_failed_generation tests.test_service.LaunchplaneServiceTests.test_verireel_preview_refresh_payload_validation_still_rejects_bad_slug
  • uv run --extra dev ruff format --check control_plane/workflows/verireel_preview_driver.py tests/test_verireel_preview_driver.py
  • uv run --extra dev ruff check control_plane/workflows/verireel_preview_driver.py tests/test_verireel_preview_driver.py
  • uv run --extra dev mypy control_plane/workflows/verireel_preview_driver.py tests/test_verireel_preview_driver.py
  • uv run --extra dev markdownlint-cli2 docs/secrets.md

Fixes #943 follow-up preview runtime secret blocker.

@cbusillo cbusillo merged commit b58461d into main May 28, 2026
12 checks passed
@cbusillo cbusillo deleted the fix/verireel-preview-database-url-safety branch May 28, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

VeriReel preview-refresh rejected with invalid_request after image publish

1 participant