sean/platform-seanfarm
Watch
1
0
Fork
You've already forked platform-seanfarm
 0
Code Issues Pull requests 10 Projects Releases 120 Packages Wiki Activity

merge feat/cosign-platform-bound-ns (c060c7b1b5) #307

Open
pipeline-bot wants to merge 1 commit from feat/cosign-platform-bound-ns into trunk
pull from: feat/cosign-platform-bound-ns
merge into: sean:trunk
Conversation 0 Commits 1 Files changed 2 +14
pipeline-bot commented 2026-07-18 19:04:46 +00:00
Collaborator
Copy link
No description provided. 
vault-build-pipeline-auth-role now binds pipeline-cosign-signer in BOTH
workflows-{stackName} AND (static) workflows-platform, so the platform
kernel-bake cosign sign step can assume build-pipeline-{tenant} and sign with
the shared cosign-ec transit key during dual-run. [0] is patched to
workflows-{stackName}; the static [1]=workflows-platform is the transitional
dual-run bridge (only alice is deployed), removed when the cosign auth role
relocates to the platform singleton at cutover.

Refs platform-collapse Phase 2 (gate-prep gap 2).
This pull request has changes conflicting with the target branch.
  • CHANGELOG.md
  • apis/stack/composition.yaml
View command line instructions

Manual merge helper

Use this merge commit message when completing the merge manually.

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin feat/cosign-platform-bound-ns:feat/cosign-platform-bound-ns
git switch feat/cosign-platform-bound-ns
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
sean/platform-seanfarm!307
No description provided.