test(omada): prove isolated site bootstrap and metadata contract #4
Loading…
Reference in a new issue
No description provided.
Delete branch "feat/site-bootstrap-proof"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Adds an opt-in network-none disposable-controller proof at the exact production image digest. Verifies local bootstrap, site create/read/rename/delete, duplicate-name and unsupported-path failures, empty inventory before deletion, and preserved device credentials and switch-support metadata. No production configuration or provider resource changes. Synthetic credentials remain in process memory; cleanup removes the container and its anonymous volumes. Unit tests fail closed on malformed/API-error responses. Validation: full unit suite, vet, lint, vulnerability scan, syntax/diff checks; real fresh-controller contract proof passed. Documents remaining import, permission, rotation, delivery and ownership-transfer gates in SITE_BOOTSTRAP_PROOF.md. Relates to issue #3.
The final committed harness completed from a fresh exact-digest controller with exit 0: isolated_bootstrap=pass, metadata_only_device_account_preserved=pass, site_identity_and_unmodified_metadata=pass, empty_device_inventory=pass, isolated_site_contract=pass, controller_cleanup=pass. The container and its anonymous volumes are gone; only the downloaded image and public UI assets remain cached locally. Production check: omada-controller ready 1/1, Terraform omada Ready=True / TerraformPlannedNoChanges. No provider or production configuration change in this PR.