Pre-upgrade ConfigDb checks for DEV/QA before deploying master ≥ 0e96dd08 (#783, #791, #792 deploy errors; #782 certs) #793

New Issue

2026-11-10T07:49:27-05:00

dohertj2 commented

2026-11-10 07:49:27 -05:00

Before deploying OtOpcUa master (≥ 0e96dd08) to DEV vd03 or QA vq03/vq04, run three checks against each environment's OtOpcUa ConfigDb. Each covers a change that can turn a currently accepted configuration into a deploy-time error or a behaviour change.

#783 — VirtualTagNoEffectiveTrigger (blocking): list enabled virtual tags with neither a timer (TimerIntervalMs unset or 0) nor any driver/VT dependency. These now refuse to deploy.
#791 — VT→VT reads + VirtualTagDependencyCycle (blocking for cycles): list virtual tags whose script reads another VT (ctx.GetTag("<EquipmentId>/<Name>"), or a bare VT name, which never resolved). These will start producing values where they produced none before. Any loop (A→B→A, self-read, or through a Calculation tag) now refuses to deploy.
#792 — newly forbidden script APIs (compile failure on load): search every script body (VTs, Calculation tags, scripted alarms) for AppContext, Console., GCSettings, ProfileOptimization, EncodingProvider, CodePagesEncodingProvider, TypeDescriptor, CryptoConfig, CultureInfo.CurrentCulture / CurrentUICulture / DefaultThreadCurrent*, and TimeZoneInfo.ClearCachedData. Fix any that match first (use CultureInfo.InvariantCulture, for example).

Also before upgrading:

#782 (SDK 1.5.378.182): CA certificates must carry the keyCertSign/cRLSign KeyUsage, or they are now rejected. Check the OPC UA PKI trust between ScadaBridge and OtOpcUa on each box.
#780: Scripting:Runner stays InProcess unless set. Don't enable Shadow/OutOfProcess there yet; the installer work for the worker account, pipe ACL and firewall rule is still open.

Blocked: the available SQL login (HISTORIAN_SQL_USER) cannot open the OtOpcUa database on wonder-app-vd03 or wonder-sql-vq03, the same block as ScadaBridge#70. This needs a read-only login on the OtOpcUa ConfigDb, or the owner runs the checks.

Before deploying OtOpcUa master (≥ `0e96dd08`) to DEV vd03 or QA vq03/vq04, run three checks against each environment's OtOpcUa ConfigDb. Each covers a change that can turn a currently accepted configuration into a deploy-time error or a behaviour change. 1. **#783 — `VirtualTagNoEffectiveTrigger` (blocking):** list enabled virtual tags with neither a timer (`TimerIntervalMs` unset or 0) nor any driver/VT dependency. These now refuse to deploy. 2. **#791 — VT→VT reads + `VirtualTagDependencyCycle` (blocking for cycles):** list virtual tags whose script reads another VT (`ctx.GetTag("<EquipmentId>/<Name>")`, or a bare VT name, which never resolved). These will **start producing values** where they produced none before. Any loop (A→B→A, self-read, or through a Calculation tag) now refuses to deploy. 3. **#792 — newly forbidden script APIs (compile failure on load):** search every script body (VTs, Calculation tags, scripted alarms) for `AppContext`, `Console.`, `GCSettings`, `ProfileOptimization`, `EncodingProvider`, `CodePagesEncodingProvider`, `TypeDescriptor`, `CryptoConfig`, `CultureInfo.CurrentCulture` / `CurrentUICulture` / `DefaultThreadCurrent*`, and `TimeZoneInfo.ClearCachedData`. Fix any that match first (use `CultureInfo.InvariantCulture`, for example). Also before upgrading: - **#782 (SDK 1.5.378.182):** CA certificates must carry the keyCertSign/cRLSign KeyUsage, or they are now rejected. Check the OPC UA PKI trust between ScadaBridge and OtOpcUa on each box. - **#780:** `Scripting:Runner` stays `InProcess` unless set. Don't enable `Shadow`/`OutOfProcess` there yet; the installer work for the worker account, pipe ACL and firewall rule is still open. **Blocked:** the available SQL login (`HISTORIAN_SQL_USER`) cannot open the `OtOpcUa` database on wonder-app-vd03 or wonder-sql-vq03, the same block as ScadaBridge#70. This needs a read-only login on the OtOpcUa ConfigDb, or the owner runs the checks.

dohertj2 added the type:deploy-gate priority:p2 blocked labels 2026-11-10 07:49:27 -05:00

dohertj2 referenced this issue

2026-11-10 08:59:05 -05:00

Implement the out-of-process script runner (design #750) — code on master; QA shadow week (#793, #794) + P3 flip remain #780

dohertj2 referenced this issue

2026-11-10 09:41:01 -05:00

Implement the out-of-process script runner (design #750) — code on master; QA shadow week (#793, #794) + P3 flip remain #780

dohertj2 referenced this issue

2026-11-10 13:11:07 -05:00

SDK2 deploy gate: Windows native install and reused-PKI restart validation #800

Sign in to join this conversation.