sean/pipelines
Watch
1
0
Fork
You've already forked pipelines
 0
Code Issues Pull requests 12 Projects Releases 294 Packages Wiki Activity
294 releases 294 tags
  • v0.1.91 730584696d

    v0.1.91 Stable

    gitea_admin released this 2026-07-06 23:31:53 +00:00 | 899 commits to main since this release

    Changed

    • De-admin (data-plane, pass 1): the 8 standard pipeline legs (land, staging,
      promote, promote-tag, promote-image, deploy, deploy-flux, release-cadence) now mount
      the non-admin forgejo-pipeline-bot-token instead of the site-admin
      forgejo-admin-token. Mounted at the SAME path (items: {key: token, path: admin_token}) so the read logic + git URLs are untouched — only the token identity
      changes. pipeline-bot is a write collaborator + (when enabled) merge/tag-whitelisted,
      so it can clone/push, open+merge PRs to protected branches, and cut tags/releases.
      The kernel + builder-images build/promote legs, the provisioner webhook, and
      forgejo-sync still use the admin token (follow-up passes).

    Fixed

    • pipeline-promote-image (go-operator-image taxonomy) now pushes each operator
      release image to codeberg (codeberg.org/someara/<project>:v<version>) in
      addition to registry.sean.farm. The operator Deployments pull from codeberg —
      it is rebuild-durable (survives make destroy, present at cold-rebuild before
      zot exists), whereas a registry.sean.farm-pinned operator would
      ImagePullBackOff-deadlock a cold rebuild. Previously releases only reached
      registry.sean.farm, so every operator (forgejo/openbao/kratos/pipelines) was
      stranded at whatever version was last hand-pushed to codeberg. Uses the existing
      codeberg-push-secret (same cred builder-images uses); same OCI tar → identical
      signed digest.

    Included changes (v0.1.90 -> v0.1.91)

    • 2f9164365e02 feat(de-admin): standard data-plane legs run as pipeline-bot (pass 1)
    • 8ac04f12f7cf fix(promote-image): push operator release images to codeberg too
    Downloads