• v0.1.206 c3b0a552a3

    v0.1.206 Stable

    pipeline-bot released this 2026-07-20 13:42:24 +00:00 | 340 commits to main since this release

    • Provisioner triple-grant: add the bare workflows bucket (CI-spine Stage 1c). The per-project MinIO
      key policies now union workflows alongside platform-workflows + alice-workflows, so the Stage-3
      WorkBucketPrefix flip (platform-workflowsworkflows) never hits AccessDenied. Each gsub runs on
      the pristine platform-workflows resource set, so they don't chain-rewrite and pkg/* stays untouched.

    Included changes (v0.1.205 -> v0.1.206)

    • 43dedbe9bf19 feat(ci-spine): provisioner triple-grant workflows bucket (Stage 1c)
    Downloads
  • v0.1.205 d6ee2eca26

    v0.1.205 Stable

    pipeline-bot released this 2026-07-20 13:18:55 +00:00 | 344 commits to main since this release

    • Restore prune:true on pipeline-workflows-infra. Stage 2 of the workflows-alice→workflows collapse
      is complete (the 18 CRs relocated, the old alice CRs gone), so this app tracks no finalizer'd resource and
      prune:true can no longer trigger the operator's pruneChildren against the live workflows sensors. It
      was temporarily prune:false only to keep the CR relocation from pruning the live alice CRs and blacking out CI.

    Included changes (v0.1.204 -> v0.1.205)

    • ffbcbfe03f87 fix(ci-spine): restore prune:true on pipeline-workflows-infra (collapse Stage 2 complete)
    Downloads
  • v0.1.204 cc111a3c1c

    v0.1.204 Stable

    pipeline-bot released this 2026-07-20 12:15:21 +00:00 | 348 commits to main since this release

    • Relocate the 18 PipelineProject CRs workflows-aliceworkflows (collapse Stage 2). The
      operator renders every project's sensors into the fixed render.WorkflowsNS ("workflows")
      regardless of the CR's own namespace, so the CR location is a pure registry choice — moving it is
      behaviour-neutral for CI and lets workflows-alice retire. git mv the 18 CR files into a new
      bundle/project-crs-bare (namespace: workflows overlay), unioned by workflows-infra-bare;
      workflows-infra drops them (its project-crs base is now the auxiliaries only). pipeline-workflows-infra
      set prune:false so dropping the CRs from its render leaves the live workflows-alice CRs as harmless
      ArgoCD orphans instead of pruning them — a prune would trip the operator finalizer's pruneChildren
      against the LIVE workflows sensors (childNamespaces spans both) → CI outage. The orphans are reaped
      out-of-band under a brief operator pause. Restore prune:true / retire the app once workflows-alice drains.

    Included changes (v0.1.203 -> v0.1.204)

    • 93d0875fdbf2 docs(changelog): note the workflows-alice -> workflows CR relocation (Stage 2)
    • 385cde053890 feat(ci-spine): relocate 18 PipelineProject CRs workflows-alice -> workflows (Stage 2)
    Downloads
  • v0.1.203 51f9b491cb

    v0.1.203 Stable

    pipeline-bot released this 2026-07-20 10:16:48 +00:00 | 354 commits to main since this release

    • Bare pipeline-deploy dry-run gate: add the workflows-alice binding. The pipelines repo
      still deploys templates/base + projects/linux into workflows-alice during dual-run, but the
      bare deploy SA only had dry-run RBAC in workflows (the cutover swapped workflows-alice
      workflows). Add a pipeline-deploy-dryrun-bare RoleBinding in workflows-alice so the deploy
      gate can validate those manifests. Drop it once templates/base migrates to workflows.

    Included changes (v0.1.202 -> v0.1.203)

    • ac6b190b114c fix(ci-spine): bare pipeline-deploy needs workflows-alice dry-run binding
    Downloads
  • v0.1.202 59b59a9b44

    v0.1.202 Stable

    pipeline-bot released this 2026-07-20 10:03:25 +00:00 | 358 commits to main since this release

    • Repoint builder-images to the bare buildkit fleet. pipeline-build-images non-HEAVY
      builds now target buildkit.buildkit.svc:1234 (was buildkit.buildkit-alice.svc), completing
      the CI-spine buildkit cutover — the bare fleet was stood up but unreferenced. Unblocks retiring
      the buildkit-alice DaemonSet + its ephemeral cache PVCs.

    Included changes (v0.1.201 -> v0.1.202)

    • f57618b5d25e feat(ci-spine): repoint builder-images to bare buildkit fleet
    Downloads
  • v0.1.201 08be8f9ca2

    v0.1.201 Stable

    pipeline-bot released this 2026-07-20 09:14:51 +00:00 | 362 commits to main since this release

    • Bare CI-spine RBAC for the images/deploy/gate shapes (cutover Wave D/E). Add
      bundle/workflows-infra-bare/deploy-rbac-bare.yaml: the pipeline-build-images (dockerfile-set),
      pipeline-deploy (gitops-deploy), pipeline-deploy-flux (gitops-flux) and pipeline-gate
      ServiceAccounts in the bare workflows namespace, plus -bare-suffixed RoleBindings/
      ClusterRoleBindings that reuse the SHARED deploy Roles/ClusterRoles already delivered by
      pipeline-base (argocd Application nudge, flux-system reconcile, the per-namespace dry-run gate).
      Additive + byte-identical powers to the alice SAs — lets builder-images and the self-hosting gitops
      repos build/deploy on bare. Retire with the rest of the bare stack at Phase B.

    • Deploy pipelines-operator v0.1.44. Auto-bump the operator app pin (targetRevision + controller image) v0.1.43 -> v0.1.44 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.200 -> v0.1.201)

    • 53b7455c0ab7 feat(ci-spine): bare RBAC for images/deploy/gate shapes (Wave D/E)
    Downloads
  • v0.1.200 4bc6e0bfb4

    v0.1.200 Stable

    pipeline-bot released this 2026-07-20 08:36:36 +00:00 | 366 commits to main since this release

    • Deploy pipelines-operator v0.1.44. Auto-bump the operator app pin (targetRevision + controller image) v0.1.43 -> v0.1.44 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.199 -> v0.1.200)

    • 32736c9fd129 deploy(operator): pin pipelines-operator v0.1.43 -> v0.1.44
    Downloads
  • v0.1.199 b05de19989

    v0.1.199 Stable

    pipeline-bot released this 2026-07-19 23:46:30 +00:00 | 370 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.198 -> v0.1.199)

    • 521677d3483a fix(ci-spine): provisioner emits UNION MinIO policies (dual-run safety)
    • e4e55f781940 fix(ci-spine): drop pkg-host HTTPRoutes (dangling portal-platform) for Stage 1
    Downloads
  • v0.1.198 b035a91758

    v0.1.198 Stable

    pipeline-bot released this 2026-07-19 17:52:30 +00:00 | 375 commits to main since this release

    • Deploy pipelines-operator v0.1.43. Auto-bump the operator app pin (targetRevision + controller image) v0.1.42 -> v0.1.43 in apps/applications.yaml; rides the next pipelines release to main, where the pipelines-deploy sensor syncs the operator.

    Included changes (v0.1.197 -> v0.1.198)

    • 47f96af1ee8a deploy(operator): pin pipelines-operator v0.1.42 -> v0.1.43
    Downloads
  • v0.1.197 a769a930c1

    v0.1.197 Stable

    pipeline-bot released this 2026-07-19 17:09:05 +00:00 | 379 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.196 -> v0.1.197)

    • ccb3f1c4b3ed fix(ci-spine): disable bare argo-server SSO + drop PreSync dashboard hook
    Downloads