sean/pipelines
Watch
1
0
Fork
You've already forked pipelines
 0
Code Issues Pull requests 12 Projects Releases 282 Packages Wiki Activity
282 releases 282 tags
  • v0.1.222 cf4a59e437

    v0.1.222 Stable

    pipeline-bot released this 2026-07-21 10:55:22 +00:00 | 255 commits to main since this release

    • CR-registry control flip, steps 3–5 (the gate flips). Repoint every live gate CR read/write from workflows-alice
      to workflows now that the history is mirrored there and the SAs are authorized: I1 land gate (pipeline-assert-ready
      reads pipelinebuild), I2 deploy gate (pipeline-deploy reads pipelinerelease), the promote release row
      (pipeline-promote-images write+status), the operator-autodeploy declare CR (pipeline-deploy-operator-pin), and
      shipd.js (Ship-button create — depends on the step-1 grant). Also fix the dead Argo deep-links in dashboard.html
      (×4) + the pipeline-build-buildkit commit-status target_url (runs execute in workflows now). No *-rbac.yaml or
      workflows-alice grants removed — those retire at B4. Both read gates fail open, so the cutover degrades to no-op, never blocks.

    Included changes (v0.1.221 -> v0.1.222)

    • 8ef92d9c5f37 feat(cr-registry): flip live gate CR reads/writes workflows-alice->workflows (steps 3-5)
    Downloads
  • v0.1.221 67aecc229f

    v0.1.221 Stable

    pipeline-bot released this 2026-07-21 10:43:08 +00:00 | 259 commits to main since this release

    • CR-registry control flip, step 1 (additive shipd RBAC). Add bundle/workflows-infra-bare/shipd-rbac-bare.yaml — a
      Role+RoleBinding granting shipd (SA pkg-alice/pipelines-shipd) create pipelinereleases + get pipelineprojects in the
      bare workflows ns, an exact additive mirror of the workflows-alice grant in dashboard/shipd.yaml (which stays,
      retire-at-B4). Prerequisite for repointing shipd.js NS workflows-alice→workflows; removes nothing, so shipd stays
      authorized in both namespaces across the transition.

    Included changes (v0.1.220 -> v0.1.221)

    • 27bd7800d888 feat(cr-registry): additive shipd RBAC in workflows (control-flip step 1)
    Downloads
  • v0.1.220 a067443232

    v0.1.220 Stable

    pipeline-bot released this 2026-07-21 09:57:55 +00:00 | 263 commits to main since this release

    • Raise Argo run retention to 28 days across all pipeline CWTs + the controller default. Build/deploy/release/merge/
      validate/promote workflows GC'd 1h after completion (inline ttlStrategy override); the controller default was 14d. Both
      raised to 28d (secondsAfterCompletion 3600/86400/1209600 → 2419200) so recent runs stay visible in the dashboard's
      drill-downs through a demo horizon. The suspended pipeline-build-backfill cron keeps its 1h TTL. NOT touched: the
      retentionPolicy 1000/status count cap — that is the memory-safe ceiling (informer cache ∝ count; raising it OOMs the
      controller). Durable run history is a future Argo Workflow Archive (postgres) concern; the dashboard build/release HISTORY
      is already durable + independent (it lives in PipelineBuild/Release CRs, not the runs).

    Included changes (v0.1.219 -> v0.1.220)

    • 6044c4c8e587 feat(ttl): raise Argo run retention 1h/14d -> 28d across pipeline CWTs
    Downloads
  • v0.1.219 c22246be41

    v0.1.219 Stable

    pipeline-bot released this 2026-07-21 08:33:32 +00:00 | 267 commits to main since this release

    • Re-home pipeline-build-backfill to workflows for the CR-registry migration (step 2). The dashboard's durable build
      history lives as PipelineBuild CRs; ~1,318 historical ones are frozen in workflows-alice and would vanish at the B4 teardown.
      Re-home the (superseded, suspended) backfill CronWorkflow + its SA/Role/RoleBindings to workflows and point it at the
      workflows MinIO bucket (the mirror-superset), so a one-time run reconstructs the build-history CRs in workflows from the
      durable MANIFESTs. Kept suspend: true (bmeta folds supersede the hourly job; this is now the migration tool). Prereq
      dashboardread-s3 landed in step 1.

    Included changes (v0.1.218 -> v0.1.219)

    • fa06d3473bca feat(ci-spine): re-home pipeline-build-backfill to workflows (CR-registry step 2)
    Downloads
  • v0.1.218 cdda684fb6

    v0.1.218 Stable

    pipeline-bot released this 2026-07-21 08:02:33 +00:00 | 271 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.217 -> v0.1.218)

    • f3dc32f2e80b fix(ci-spine): make the workflows provisioner RB a PreSync hook wave -1 (CR-registry step 1c)
    • 976791d7ef1b fix(ci-spine): grant alice provisioner SA secret-write in workflows for dashboardread (CR-registry step 1b)
    • 72a32c755d50 feat(ci-spine): union dashboardread to the workflows bucket + provision into workflows (CR-registry step 1)
    Downloads
  • v0.1.217 595d7c1f94

    v0.1.217 Stable

    pipeline-bot released this 2026-07-21 07:46:20 +00:00 | 277 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.216 -> v0.1.217)

    • 407adfd31673 fix(ci-spine): grant alice provisioner SA secret-write in workflows for dashboardread (CR-registry step 1b)
    • 48e03f937642 feat(ci-spine): union dashboardread to the workflows bucket + provision into workflows (CR-registry step 1)
    Downloads
  • v0.1.216 7995a2c856

    v0.1.216 Stable

    pipeline-bot released this 2026-07-21 07:30:51 +00:00 | 282 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.215 -> v0.1.216)

    • 89039343d21b feat(ci-spine): union dashboardread to the workflows bucket + provision into workflows (CR-registry step 1)
    Downloads
  • v0.1.215 b2ea3e1fdf

    v0.1.215 Stable

    pipeline-bot released this 2026-07-20 23:40:12 +00:00 | 286 commits to main since this release

    • Prune the idle workflows-alice linux sensors after the kernel hook flip (CI-spine collapse B0b, cutover step C). With
      sean/linux CI now on the bare workflows eventsource (hook flipped; workflows-infra-bare/linux serves the live sensors),
      the workflows-alice linux-ci/linux-staging sensors + linux-ci-artifacts CM never fire — drop them from
      projects/linux/kustomization.yaml. Only branch-protection (forgejo-alice) remains, retiring with the alice overlay at B4.

    Included changes (v0.1.214 -> v0.1.215)

    • 6c5c0ee87648 cutover(ci-spine): prune idle workflows-alice linux sensors (B0b step C)
    Downloads
  • v0.1.214 1bd0046be5

    v0.1.214 Stable

    pipeline-bot released this 2026-07-20 22:42:53 +00:00 | 290 commits to main since this release

    • Drop the alice linux re-pointer ahead of the kernel hook flip (CI-spine collapse B0b, cutover step A). Remove
      provision-hook.yaml from projects/linux/kustomization.yaml. That PreSync hook's provision.sh re-PATCHes the sean/linux
      Forgejo webhook back to the workflows-alice eventsource on every pipeline-workflows-infra sync; removing it FIRST (while
      the alice linux-ci/linux-staging sensors stay live) lets the out-of-band flip to the bare workflows eventsource stick
      with no flap. The bare workflows overlay already mints the linux keys (webhook OFF). sensor-ci/staging + ci-artifacts stay
      until step C prunes the now-idle alice sensors after the flip; branch-protection (forgejo-alice) retires at B4. No node roll.

    Included changes (v0.1.213 -> v0.1.214)

    • 9312663f3f19 cutover(ci-spine): drop alice linux re-pointer before the kernel hook flip (B0b step A)
    Downloads
  • v0.1.213 0c9186815b

    v0.1.213 Stable

    pipeline-bot released this 2026-07-20 22:22:01 +00:00 | 294 commits to main since this release

    • Provision the bare workflows kernel CI plumbing additively (CI-spine collapse B0b, additive phase). Stand up the
      sean/linux build plumbing in ns workflows alongside the still-live workflows-alice copies, with NO cutover yet (the
      hook still points at workflows-alice). bundle/workflows-infra-bare/kernel-build-rbac-bare.yaml: SA pipeline-build-kernel
      • executor RoleBinding (reuse Role workflows-argo-workflows-workflow) + a DISTINCT-named cross-ns RoleBinding
        pipeline-build-kernel-workflows into shipwright-build (reuses the shared Role pipeline-build-kernel — NOT re-declared, to
        avoid an ArgoCD name collision). bundle/workflows-infra-bare/linux/: hand-authored bare overlay (linux has no
        PipelineProject CR and the operator no kernel-bootc taxonomy, so a CR renders 0 sensors) — linux-ci + linux-staging Sensors
        (Sensor ns AND submitted-Workflow ns = workflows), the linux-ci-artifacts log-archival CM, and a key-minting PreSync
        (webhook OFF in the bare provision.sh). Bare sensors go live-but-idle; branch-protection stays with the alice overlay
        (forgejo-alice) to avoid a dual-ownership prune race. Fully reversible; the live hook flip is a separate later step.

    Included changes (v0.1.212 -> v0.1.213)

    • a18a1f2e68a4 feat(ci-spine): provision bare workflows kernel CI plumbing additively (B0b additive phase)
    Downloads