controller v0.271.0: automatic app updates — the update leg after the off-site copy, the backup gate waits, the switch (09 6.4 part 7; R-680, R-678, R-643)

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_0159rPz1ZhFKsS53msqPYxtS
2026-09-24 22:07:24 +02:00
parent 1495ca43fb
commit 9cf13a3add
33 changed files with 1672 additions and 14 deletions
@@ -227,6 +227,8 @@ type Manager struct {
 	updateHealthMetaFn func(ctx context.Context, name string, timeout time.Duration, meta *Metadata) (bool, string)
 	// unhealthy (v0.269.0, decision 28): RestartCount / OOM-kill samples per app for the crash-loop stop.
 	unhealthy unhealthyWatch
+	// leg (v0.271.0, `09` §6.4 part 7): the automatic update leg's state (unattended.go).
+	leg updateLegState
 	// selfUpdating (v0.261.0) reports whether the CONTROLLER is swapping itself. Set by
 	// SetSelfUpdatingCheck; nil means no gate. See update.go.
 	selfUpdating func() bool