• v0.1.201 08be8f9ca2

    v0.1.201 Stable

    pipeline-bot released this 2026-07-20 09:14:51 +00:00 | 382 commits to main since this release

    • Bare CI-spine RBAC for the images/deploy/gate shapes (cutover Wave D/E). Add
      bundle/workflows-infra-bare/deploy-rbac-bare.yaml: the pipeline-build-images (dockerfile-set),
      pipeline-deploy (gitops-deploy), pipeline-deploy-flux (gitops-flux) and pipeline-gate
      ServiceAccounts in the bare workflows namespace, plus -bare-suffixed RoleBindings/
      ClusterRoleBindings that reuse the SHARED deploy Roles/ClusterRoles already delivered by
      pipeline-base (argocd Application nudge, flux-system reconcile, the per-namespace dry-run gate).
      Additive + byte-identical powers to the alice SAs — lets builder-images and the self-hosting gitops
      repos build/deploy on bare. Retire with the rest of the bare stack at Phase B.

    • Deploy pipelines-operator v0.1.44. Auto-bump the operator app pin (targetRevision + controller image) v0.1.43 -> v0.1.44 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.200 -> v0.1.201)

    • 53b7455c0ab7 feat(ci-spine): bare RBAC for images/deploy/gate shapes (Wave D/E)
    Downloads
  • v0.1.200 4bc6e0bfb4

    v0.1.200 Stable

    pipeline-bot released this 2026-07-20 08:36:36 +00:00 | 386 commits to main since this release

    • Deploy pipelines-operator v0.1.44. Auto-bump the operator app pin (targetRevision + controller image) v0.1.43 -> v0.1.44 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.199 -> v0.1.200)

    • 32736c9fd129 deploy(operator): pin pipelines-operator v0.1.43 -> v0.1.44
    Downloads
  • v0.1.199 b05de19989

    v0.1.199 Stable

    pipeline-bot released this 2026-07-19 23:46:30 +00:00 | 390 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.198 -> v0.1.199)

    • 521677d3483a fix(ci-spine): provisioner emits UNION MinIO policies (dual-run safety)
    • e4e55f781940 fix(ci-spine): drop pkg-host HTTPRoutes (dangling portal-platform) for Stage 1
    Downloads
  • v0.1.198 b035a91758

    v0.1.198 Stable

    pipeline-bot released this 2026-07-19 17:52:30 +00:00 | 395 commits to main since this release

    • Deploy pipelines-operator v0.1.43. Auto-bump the operator app pin (targetRevision + controller image) v0.1.42 -> v0.1.43 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.197 -> v0.1.198)

    • 47f96af1ee8a deploy(operator): pin pipelines-operator v0.1.42 -> v0.1.43
    Downloads
  • v0.1.197 a769a930c1

    v0.1.197 Stable

    pipeline-bot released this 2026-07-19 17:09:05 +00:00 | 399 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.196 -> v0.1.197)

    • ccb3f1c4b3ed fix(ci-spine): disable bare argo-server SSO + drop PreSync dashboard hook
    Downloads
  • v0.1.196 91c3a5733b

    v0.1.196 Stable

    pipeline-bot released this 2026-07-19 16:06:54 +00:00 | 403 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.195 -> v0.1.196)

    • c99c140a2cca fix(ci-spine): argo-workflows-sync RBAC ns argocd -> argocd-platform
    Downloads
  • v0.1.195 213b3cc2c2

    v0.1.195 Stable

    pipeline-bot released this 2026-07-19 15:47:35 +00:00 | 407 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.194 -> v0.1.195)

    • 90e3fbd60ec5 feat(ci-spine): create bare workflows namespace via ArgoCD (defer hcloud-token)
    • dfdfc7d5c926 feat(ci-spine): bare workflows CI content (eventing + RBAC + provisioner)
    • cd8363df4517 feat(ci-spine): bare workflows/buildkit/pkg substrate as ArgoCD bundles
    Downloads
  • v0.1.194 c710a819b6

    v0.1.194 Stable

    pipeline-bot released this 2026-07-19 13:23:14 +00:00 | 413 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.193 -> v0.1.194)

    • 84e3ae99d378 chore(provisioner): atomic hook PATCH-by-path + retire -platform provisioner
    Downloads
  • v0.1.193 10c1e3ac15

    v0.1.193 Stable

    pipeline-bot released this 2026-07-18 22:00:36 +00:00 | 417 commits to main since this release

    Fixed

    • Kernel bake: carry PKG_CACHE into the node-bootc BuildRun. pipeline-build-kernel reconstructs
      the node-bootc BuildRun's build-args, and since Shipwright build-args is one array param that an
      override REPLACES wholesale, only restating KERNEL_IMG+ZFS_IMG silently DROPPED the Build's
      PKG_CACHE. node-bootc's dnf installs then went direct to packages.hetzner.com — a SPOF that 404'd
      on hc-utils-0.0.9 when Hetzner removed that RPM, breaking every release-mode kernel bake cluster-wide.
      Now also read PKG_CACHE from the node-bootc Build (like ZFS_IMG) and restate it (fail loud if
      absent), so node-bootc keeps routing through the pkg-cache proxy.

    Included changes (v0.1.192 -> v0.1.193)

    • 164a2f65c0c9 fix(kernel): carry PKG_CACHE into the node-bootc BuildRun
    Downloads
  • v0.1.192 15e8a62072

    v0.1.192 Stable

    pipeline-bot released this 2026-07-18 20:35:20 +00:00 | 421 commits to main since this release

    • Dual-run the kernel-build RBAC in workflows-platform (platform-collapse Phase 2).
      templates/platform/pipeline-build-kernel-rbac.yaml stands the pipeline-build-kernel SA + argo
      executor binding + the shipwright-build BuildRun RBAC up in workflows-platform ALONGSIDE alice's
      templates/base copy (the shipwright-build Role/RoleBinding renamed pipeline-build-kernel-platform to
      avoid clobbering alice's in that shared ns). Lets the North-Star kernel bake run in workflows-platform
      for the pre-cutover smoke gate WITHOUT rolling the operator, and removes the shipwright cross-ns RBAC
      from the Stage-C flip. Additive + reversible; nothing touches alice.

    Included changes (v0.1.191 -> v0.1.192)

    • d94fdecceef7 feat(platform-collapse): dual-run kernel-build RBAC in workflows-platform
    Downloads