• v0.1.249 95d572d941

    v0.1.249 Stable

    pipeline-bot released this 2026-07-24 00:21:10 +00:00 | 132 commits to main since this release

    Fixed

    • Unwedge both bare apps after the early workflows-alice prune. argo-workflows: strip the
      registrar sync-waves — wave health-gating deadlocked on the Degraded workflows-oidc ES that
      the wave-1 registrar Job itself feeds (same-wave apply + ESO error-backoff converges).
      workflows-infra-bare: drop the pipeline-deploy-dryrun-bare twin binding rendered into the
      now-deleted workflows-alice ns (its comment already scheduled the drop; a render into a
      missing ns fails the whole app).

    Included changes (v0.1.248 -> v0.1.249)

    • 2b157f976e7e fix(bare): unwedge argo-workflows + workflows-infra-bare post-alice-prune
    Downloads
  • v0.1.248 dd685b0144

    v0.1.248 Stable

    pipeline-bot released this 2026-07-24 00:10:06 +00:00 | 136 commits to main since this release

    Fixed

    • argo-workflows: bare workflows.sean.farm HTTPRoutes (B4 pulled forward — OUTAGE FIX).
      The alice routes died with the early workflows-alice ns prune, 404ing the hostname. These
      bare-ns routes (https + 301 redirect) attach to portal-alice's gateway; the listener
      selector flip lands lockstep on the platform-seanfarm side.

    Included changes (v0.1.247 -> v0.1.248)

    • 98866e3c045e fix(argo-workflows): bare workflows.sean.farm routes (B4 pulled forward)
    Downloads
  • v0.1.247 66d9f56d02

    v0.1.247 Stable

    pipeline-bot released this 2026-07-23 17:00:50 +00:00 | 140 commits to main since this release

    Added

    • argo-workflows: bare SSO registrar + workflows-oidc ES (Track B3, step 1 of 2). A NEW
      hydra client workflows-platform registers against alice's shared Hydra and materialises
      workflows-oidc-credentials in ns workflows; the re-added workflows-oidc ExternalSecret
      reshapes it for the argo-server sso block. The server still runs auth-mode=client — the
      sso flip lands separately once the secret is verified (sso-before-secret crashloops).

    Included changes (v0.1.246 -> v0.1.247)

    • 3131dbfb8436 feat(argo-workflows): bare SSO registrar + workflows-oidc ES (B3 step 1)
    Downloads
  • v0.1.246 a7a57f1e50

    v0.1.246 Stable

    pipeline-bot released this 2026-07-23 16:54:51 +00:00 | 144 commits to main since this release

    Added

    • workflows-infra-bare: kernel-deploy RBAC + cosign-key-extractor bare twins (Track B2).
      pipeline-deploy-kernel SA + executor RB + -bare CRB (shared fleet-roll ClusterRole), and
      the kyverno cosign-public-key extractor Sync-hook Job twinned into ns workflows
      (byte-identical live-proven script; only the ns differs). Pairs with the seanfarm
      kernel-deploy rbac/vap widen and the platform-seanfarm cosign-key-writer bare subject.
      Alice twins retire at B8.

    Included changes (v0.1.245 -> v0.1.246)

    • 1e728fbc87c6 feat(workflows-infra-bare): kernel-deploy RBAC + cosign extractor bare twins (B2)
    Downloads
  • v0.1.245 84d047d719

    v0.1.245 Stable

    pipeline-bot released this 2026-07-23 16:38:31 +00:00 | 148 commits to main since this release

    • Fix pipelines-operator deploy projection. Resolve the deployed version
      from the pipelines-operator Argo CD Application in sean/pipelines, its
      actual carrier, instead of the retired seanfarm Flux pin.

    Included changes (v0.1.244 -> v0.1.245)

    • 6f07d0c8cd46 fix(pipelines-operator): follow Argo deploy carrier
    Downloads
  • v0.1.244 4838ed1d47

    v0.1.244 Stable

    pipeline-bot released this 2026-07-23 16:29:52 +00:00 | 152 commits to main since this release

    • Deploy pipelines-operator v0.1.52. Auto-bump the operator app pin (targetRevision + controller image) v0.1.51 -> v0.1.52 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.243 -> v0.1.244)

    • 95b1b157f9f5 deploy(operator): pin pipelines-operator v0.1.51 -> v0.1.52
    Downloads
  • v0.1.243 19359d2e04

    v0.1.243 Stable

    pipeline-bot released this 2026-07-23 15:43:24 +00:00 | 156 commits to main since this release

    Fixed

    • obsbucket: bucket-init Job sync-options Replace=trueForce=true,Replace=true. Plain
      Replace does kubectl replace, which 409s on a live completed Job (immutable auto-selector);
      Force delete+recreates. Also enable automated: {selfHeal: true} on the obsbucket Application
      now that adoption is verified (all 5 resources Synced, scoped-key Secret UID unchanged) — prune
      stays off until the Crossplane claim retires.

    Included changes (v0.1.242 -> v0.1.243)

    • b3ed7e297a61 fix(obsbucket): Force+Replace on the init Job; enable selfHeal post-adoption
    Downloads
  • v0.1.242 2654d22d9f

    v0.1.242 Stable

    pipeline-bot released this 2026-07-23 15:31:53 +00:00 | 160 commits to main since this release

    Added

    • bundle/obsbucket: adopt the MinIO CI-spine/observability slice from Crossplane (Phase 1).
      Five manifests transplanted content-identical from the retiring apis/obsbucket composition
      (Password minio-olly-platform-key, ExternalSecrets minio-olly-platform-secret-key +
      minio-platform-s3-credentials, ClusterSecretStore minio-platform-workflows-s3-credentials,
      Job minio-olly-platform-bucket-init with Replace=true against the immutable-Job wedge).
      New Application obsbucket (ns minio) starts with MANUAL sync only — adopt-in-place; prune
      stays off until the Crossplane claim is deleted and verified.

    Included changes (v0.1.241 -> v0.1.242)

    • d04536d8973d feat(obsbucket): adopt the MinIO slice from Crossplane (manual-sync Application)
    Downloads
  • v0.1.241 f23829ff46

    v0.1.241 Stable

    pipeline-bot released this 2026-07-23 15:14:46 +00:00 | 164 commits to main since this release

    • Deploy pipelines-operator v0.1.51. Auto-bump the operator app pin (targetRevision + controller image) v0.1.50 -> v0.1.51 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.240 -> v0.1.241)

    • 8f6a780d40dd deploy(operator): pin pipelines-operator v0.1.50 -> v0.1.51
    Downloads
  • v0.1.240 9941e0bceb

    v0.1.240 Stable

    pipeline-bot released this 2026-07-23 01:38:35 +00:00 | 168 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.239 -> v0.1.240)

    • a332a3666cb8 fix(pindeploy): poll workflows/pipelines (not retired alice-workflows) + prune dead forgejo-alice AppProject dest
    Downloads