fix: disable the production startup check

Jc-965 commented

2026-10-03 21:29:15 +00:00

Member

Summary

Production has returned 502 since the Sep 26 deploy of #20, and the agent refuses to start because the new production check expects an AGENT_SHARED_SECRET of at least 32 characters, and OpenBao's prod profile does not provide one. Thus, Kennel's health check fails, and the unit is stopped.

This turns the check off by removing the AGENT_ENV default from the prod profile, so production starts as it did before. Note that this is a temporary change and the check will be turned back on once the secret is stored in OpenBao.

Changes

Remove the AGENT_ENV default from [profiles.prod] in secretspec.toml
Update the matching comment in settings.py and the README.

AI use

None
Minor: autocomplete or suggestions for a few lines
Some: AI drafted parts of the change, the rest was written by hand
Most: AI wrote the bulk of the change, edited by hand
All: AI wrote the whole change, reviewed and tested by hand

Checklist

DATABASE_URL="" uv run pytest passes
uv run pytest evals run, if prompts or tool selection changed
Hooks pass (devenv shell -- prek run --all-files, or ruff and ty directly)
README updated if a variable, route, or command changed
No secrets, keys, or .env values in the diff
Commits follow Conventional Commits, one change each, rebased onto main
Title written like a commit subject

## Summary  Production has returned 502 since the Sep 26 deploy of #20, and the agent refuses to start because the new production check expects an `AGENT_SHARED_SECRET` of at least 32 characters, and OpenBao's prod profile does not provide one. Thus, Kennel's health check fails, and the unit is stopped. This turns the check off by removing the `AGENT_ENV` default from the prod profile, so production starts as it did before. Note that this is a temporary change and the check will be turned back on once the secret is stored in OpenBao. ## Changes  - Remove the `AGENT_ENV` default from `[profiles.prod]` in `secretspec.toml` - Update the matching comment in `settings.py` and the README. ## AI use  - [ ] None - [ ] Minor: autocomplete or suggestions for a few lines - [x] Some: AI drafted parts of the change, the rest was written by hand - [ ] Most: AI wrote the bulk of the change, edited by hand - [ ] All: AI wrote the whole change, reviewed and tested by hand ## Checklist  - [x] `DATABASE_URL="" uv run pytest` passes - [x] `uv run pytest evals` run, if prompts or tool selection changed - [x] Hooks pass (`devenv shell -- prek run --all-files`, or ruff and ty directly) - [x] README updated if a variable, route, or command changed - [x] No secrets, keys, or `.env` values in the diff - [x] Commits follow Conventional Commits, one change each, rebased onto `main` - [x] Title written like a commit subject

Jc-965 added 1 commit

2026-10-03 21:29:15 +00:00

fix: disable the production startup check

kennel/build build succeeded

Details

kennel/deploy deployment healthy

Details

CI / check-1 (pull_request) Failing after 1m59s

Details

CI / build (pull_request) Failing after 45s

Details

CI / check (pull_request) Failing after 0s