sean/platform-seanfarm
Watch
1
0
Fork
You've already forked platform-seanfarm
 0
Code Issues Pull requests 10 Projects Releases 120 Packages Wiki Activity
120 releases 120 tags
  • v0.1.2 b9f20ce9f4

    v0.1.2 Stable

    gitea_admin released this 2026-07-06 23:08:44 +00:00 | 511 commits to main since this release

    Added

    • pipeline-bot — a dedicated NON-ADMIN Forgejo machine identity for the CI/CD
      data-plane, so the pipeline legs stop authenticating as the site-admin
      gitea_admin. instances/pipeline-bot.yaml: a ForgejoUser (isAdmin:false), a
      token-issuer Job that basic-auths as the bot and mints a write:repository-only
      PAT (forgejo-pipeline-bot-token), and 18 ForgejoCollaborator CRs granting the
      bot write on every pipeline repo (the sean/* repos are user-owned, so a team
      can't reach them — direct collaborator is the only way). The forgejo-creds-reader
      Role resourceNames is extended so the token fans into workflows-{tenant} like the
      admin token. Additive: nothing consumes the bot token until the data-plane legs are
      swapped. Requires forgejo-operator >= v0.6.9 (ForgejoUser + ForgejoCollaborator).

    Included changes (v0.1.1 -> v0.1.2)

    • 2ac7fd101bc8 feat(pipeline-bot): provision dedicated non-admin CI/CD identity
    Downloads