From 4b927e39ea276633fe7bcf40218c140bd8b7b068 Mon Sep 17 00:00:00 2001 From: Nicacio Oliveira Date: Tue, 18 Aug 2026 23:07:49 -0300 Subject: [PATCH 1/2] fix(previews): bump to 0.1.1 so namespaceLabels actually ships MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit #6213 added namespaceLabels to the ApplicationSet template but only bumped the studio chart. release-sandbox-charts.yaml skips the push when the version is already published — correctly, since OCI tags should be immutable — so 0.1.0 in the registry is still the version without it. Without this the preview's Namespace renders with no gateway selector label and the HTTPRoute attaches to nothing: a 404 with a green Argo, which is the exact failure #6213 set out to make impossible. --- deploy/helm/studio-previews/Chart.yaml | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/deploy/helm/studio-previews/Chart.yaml b/deploy/helm/studio-previews/Chart.yaml index 1cf7f0e805..443751fe27 100644 --- a/deploy/helm/studio-previews/Chart.yaml +++ b/deploy/helm/studio-previews/Chart.yaml @@ -14,4 +14,9 @@ description: | ApplicationSet that generates previews, and preview policy must be able to change without bumping — and therefore rolling — the application chart. type: application -version: 0.1.0 +# 0.1.1: pass namespaceLabels through to the studio chart, which renders the +# preview's Namespace itself as of chart-deco-studio 0.14.3. Without this the +# namespace is created with no gateway selector label and the HTTPRoute +# attaches to nothing. + +version: 0.1.1 From f74e0374de1c58ccffa9e3ad68dac1238e7cfe0e Mon Sep 17 00:00:00 2001 From: Nicacio Oliveira Date: Tue, 18 Aug 2026 23:13:10 -0300 Subject: [PATCH 2/2] fix(ci): the preview render must pass the namespace labels the AppSet passes MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The Namespace assertion added alongside the chart change reported exactly the condition it was written for — a namespace with no gateway selector label — but against the test render rather than a real one, because the step never supplied preview.namespaceLabels. --- .github/workflows/helm-test.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/.github/workflows/helm-test.yml b/.github/workflows/helm-test.yml index 04ae27a9e6..24a26d4217 100644 --- a/.github/workflows/helm-test.yml +++ b/.github/workflows/helm-test.yml @@ -174,6 +174,7 @@ jobs: --set externalSecret.secretPath=preview/studio/application \ --set externalSecret.secretStoreName=aws-secrets-manager \ --set externalSecret.secretStoreKind=ClusterSecretStore \ + --set 'preview.namespaceLabels.decocms\.com/preview=true' \ --api-versions gateway.networking.k8s.io/v1 \ > /tmp/preview.yaml