Skip to content

[Bug] deploy.sh prints "ACTION REQUIRED: update your Assured Workload" + "validated / updated" unconditionally on every run #134

Description

@JohnHales

Bug Description

Once a matching Assured Workloads folder is found, gemini-enterprise/deploy.sh (~Lines 1420–1434) always prints ACTION REQUIRED: Please update your Assured Workload environment manually and, after the operator presses Enter, Assured Workload folder <name> validated / updated. The underlying gcloud assured workloads list call only fetches the workload displayName — it never queries update or violation status — so the "ACTION REQUIRED" nag fires every run even when nothing is pending, and the "validated / updated" confirmation is cosmetic. The following Access Transparency prompt is the same unconditional acknowledge-nudge.

Environment and Deployment Context

  • Stellar Engine Version/Commit: main @ 3728fc98
  • Deployment Type:
    • US Region Restricted (e.g., Access Policy constraint)
    • FedRAMP Medium
    • FedRAMP High
    • DoD IL4
    • DoD IL5
    • Stand-alone / Custom
  • Affected Component: blueprints/fedramp-high/gemini-enterprise/deploy.sh — Assured Workloads check (~Lines 1420–1434) and the adjacent Access Transparency acknowledge prompt

Steps to Reproduce

  1. Run ./deploy.sh (Brownfield, Step 1) on any tenant with an existing, healthy Assured Workloads folder.
  2. Observe ACTION REQUIRED: Please update your Assured Workload environment manually even though no update is pending.
  3. Press Enter; observe the cosmetic Assured Workload folder <name> validated / updated line.

Expected Behavior

Only prompt when updates actually exist (query workload update/violation status), or reword to "please verify" and drop the false "validated / updated" confirmation.

Actual Behavior

Every run shows a false ACTION REQUIRED plus a false success line, training operators to ignore a message that could one day be real.

Relevant Logs and Errors

ACTION REQUIRED: Please update your Assured Workload environment manually
Press Enter to continue...
Assured Workload folder <name> validated / updated

Metadata

Metadata

Assignees

No one assigned

    Labels

    Level of Effort - LowQuick, well-defined tasks with no unknowns; takes a few hours up to one day to completePriority - LowMinor polish, typo fixes, or technical debt; nice to have; pick up when time permitsbugSomething isn't workinggemini for governmentGemini for Government (G4G) related

    Type

    Fields

    No fields configured for Bug.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions