From cd974baeeb5696fa5f72719dfbf3993070305051 Mon Sep 17 00:00:00 2001 From: jenkins Date: Thu, 6 Aug 2026 15:48:57 -0300 Subject: [PATCH] fix(demo): print the triage allowlist as a list, not raw config The allowlist is the outermost safety boundary - a job absent from it is never touched, whatever fails - so it is worth reading at a glance rather than as a comma-separated setting value echoed verbatim. Co-Authored-By: Claude Opus 5 --- scripts/ops/hermes_triage_demo.sh | 9 ++++++++- 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/scripts/ops/hermes_triage_demo.sh b/scripts/ops/hermes_triage_demo.sh index 1cbfe14ca..f1d654a00 100755 --- a/scripts/ops/hermes_triage_demo.sh +++ b/scripts/ops/hermes_triage_demo.sh @@ -82,7 +82,14 @@ cmd_preflight() { note "fixture state: $(kubectl -n "$DEMO_NS" get cm hermes-triage-demo-fixture -o jsonpath='{.data.state}' 2>/dev/null || echo MISSING)" note "ariadne image: $(kubectl -n maintenance get deploy ariadne -o jsonpath='{.spec.template.spec.containers[0].image}')" note "autoremediation: $(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOREMEDIATION_ENABLED 2>/dev/null)" - note "allowlisted jobs: $(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOTRIAGE_JOB_ALLOWLIST 2>/dev/null)" + # Printed as a list rather than the raw comma-separated setting: this is the + # outermost safety boundary, so it is worth being able to read at a glance. + local allowlist count + allowlist="$(kubectl -n maintenance exec deploy/ariadne -c ariadne -- printenv ARIADNE_HERMES_AUTOTRIAGE_JOB_ALLOWLIST 2>/dev/null | tr ',' ' ')" + count=0 + for _job in $allowlist; do count=$((count + 1)); done + note "jobs Ariadne may triage ($count):" + for _job in $allowlist; do note " - $_job"; done note "hermes: $(kubectl -n hermes get pods -l app=hermes --no-headers | awk '{print $2, $3}')" local queued queued="$(jenkins_get '/queue/api/json' | python3 -c 'import json,sys; print(len(json.load(sys.stdin)["items"]))')"