PLAT-122 OCV-206: admit capable CMS validation, image and native Qodana agents #79

Open

moeardent wants to merge 2 commits from fix/PLAT-122-ci-agent-capability-cms into dev

moeardent commented

2026-11-11 18:35:14 +00:00

Owner

Validate, BuildImage and SecurityImage require Docker instead of the namespace selector.
QodanaBranch requires an enabled teamcity.agent.jvm.os.name = Linux requirement instead of env.POD_NAMESPACE = ci-ops. Its actual scanner uses --within-docker=false; the pinned CLI, checksum-verified native PHP distribution, branch/revision checks, cloud token and owned-zero-defect SARIF policy remain unchanged.
Each transition adds its capability before deleting the obsolete namespace selector, preserves unrelated requirements and reuses an existing enabled matching requirement. A disabled Linux requirement cannot satisfy admission. PromoteDev retains its namespace and deployment controls.

Scope: only ci/teamcity/setup_oculus_vita_cms_pipeline.sh and ci/teamcity/test_cms_agent_requirement_scope.py. Original reviewed Docker change remains in commit 372c17a895a4a384e5321e36adfcc0ed731fa88b; native Qodana extension is commit b5d9b0aac9aff8a32fc75e220785d66242f34960.

Verification: all nine focused requirement-transition tests pass, including add-before-delete, existing-capability reuse, missing-ID failure, partial-delete recovery, disabled-Linux handling and Promote retention. Bash syntax checks and the actual medcms_qodana_branch_lane_static_checks.py pass; git diff --check passes. Independent Anthropic Claude Haiku 5.5 final extension review PASS, bound to diff SHA256 5e2e16a27776b719539f69d10939f491042a79804ddfaf1c7433550b74ad06c9, attempt att-1922efbb-7866-40ed-b684-060d4da576af. The original Docker change has its separately retained independent review.

Canonical PR base is dev at 954060d606a848fedfa5fccd19e2e38c1a3e8ffd. No native setting, queue, merge, deploy or publication action was performed by the source worker. Agent183 explicitly reports Linux, but actual scanner execution, token custody, downloaded distribution/network access and final fleet readiness require operational qualification. Exact native preimages and root-owned activation sequence are retained under artifacts/verification/ci-docs-repair-20261111/cms-qodana; original evidence remains under artifacts/verification/ci-generic-compatibility-20261111.

Trace: PLAT-122; OCV-206.

CMS validation, image and branch Qodana builds use historical namespace placement requirements that exclude the approved multipurpose agents. Admit agents by the capability their commands consume while retaining deployment custody. - Validate, BuildImage and SecurityImage require Docker instead of the namespace selector. - QodanaBranch requires an enabled `teamcity.agent.jvm.os.name = Linux` requirement instead of `env.POD_NAMESPACE = ci-ops`. Its actual scanner uses `--within-docker=false`; the pinned CLI, checksum-verified native PHP distribution, branch/revision checks, cloud token and owned-zero-defect SARIF policy remain unchanged. - Each transition adds its capability before deleting the obsolete namespace selector, preserves unrelated requirements and reuses an existing enabled matching requirement. A disabled Linux requirement cannot satisfy admission. PromoteDev retains its namespace and deployment controls. Scope: only `ci/teamcity/setup_oculus_vita_cms_pipeline.sh` and `ci/teamcity/test_cms_agent_requirement_scope.py`. Original reviewed Docker change remains in commit `372c17a895a4a384e5321e36adfcc0ed731fa88b`; native Qodana extension is commit `b5d9b0aac9aff8a32fc75e220785d66242f34960`. Verification: all nine focused requirement-transition tests pass, including add-before-delete, existing-capability reuse, missing-ID failure, partial-delete recovery, disabled-Linux handling and Promote retention. Bash syntax checks and the actual `medcms_qodana_branch_lane_static_checks.py` pass; `git diff --check` passes. Independent Anthropic Claude Haiku 5.5 final extension review PASS, bound to diff SHA256 `5e2e16a27776b719539f69d10939f491042a79804ddfaf1c7433550b74ad06c9`, attempt `att-1922efbb-7866-40ed-b684-060d4da576af`. The original Docker change has its separately retained independent review. Canonical PR base is `dev` at `954060d606a848fedfa5fccd19e2e38c1a3e8ffd`. No native setting, queue, merge, deploy or publication action was performed by the source worker. Agent183 explicitly reports Linux, but actual scanner execution, token custody, downloaded distribution/network access and final fleet readiness require operational qualification. Exact native preimages and root-owned activation sequence are retained under `artifacts/verification/ci-docs-repair-20261111/cms-qodana`; original evidence remains under `artifacts/verification/ci-generic-compatibility-20261111`. Trace: PLAT-122; [OCV-206](https://moebiusol.youtrack.cloud/issue/OCV-206).

moeardent added 1 commit

2026-11-11 18:35:14 +00:00

PLAT-122 qualify CMS agent requirements 372c17a895

moeardent added 1 commit

2026-11-11 19:16:49 +00:00

PLAT-122 OCV-206: admit Linux agents for native CMS Qodana

teamcity/medcms/qodana-branch TeamCity OculusVitaCMS_QodanaBranch passed

Details

b5d9b0aac9

moeardent changed title from ~~PLAT-122 qualify CMS validation and image agents~~ to PLAT-122 OCV-206: admit capable CMS validation, image and native Qodana agents

2026-11-11 19:17:53 +00:00