• v0.1.56 7984c3170e

    v0.1.56 Stable

    pipeline-bot released this 2026-07-18 18:08:16 +00:00 | 377 commits to trunk since this release

    Added

    • registryStore seam on the Workflows XRD (platform-collapse Phase 2, gate-prep). Mirrors the
      minioStore seam: the zot registry ExternalSecrets in argo-workflows-base now reference
      zot-${REGISTRY_STORE}-registry-credentials, where REGISTRY_STORE defaults to tenantName (tenants
      unchanged) and the Optional spec.registryStore overrides it. instances/workflows-platform.yaml sets
      registryStore: alice so the platform singleton borrows zot-alice-registry-credentials during dual-run
      (registry/zot is still per-tenant registry-alice; no zot-platform store exists until Phase 3). Fixes
      the registry-credentials/zot-admin-credentials SecretSyncedError in workflows-platform. Requires the
      matching seanfarm argo-workflows-base change (zot-${TENANT}-zot-${REGISTRY_STORE}-).

    Included changes (v0.1.55 -> v0.1.56)

    • b37b5da71e9a feat(workflows): registryStore seam → platform borrows zot-alice store (gate-prep)
    Downloads
  • v0.1.55 00ee66eb7b

    v0.1.55 Stable

    pipeline-bot released this 2026-07-18 04:20:52 +00:00 | 381 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.54 -> v0.1.55)

    • d69c4dbc8733 feat(workflows): Workflows/platform singleton claim (platform-collapse P2 A2)
    Downloads
  • v0.1.54 5b37e5a9c6

    v0.1.54 Stable

    pipeline-bot released this 2026-07-18 03:47:23 +00:00 | 385 commits to trunk since this release

    Added

    • Platform workflows MinIO slice + minioStore seam (platform-collapse Phase 2, A4). apis/obsbucket
      now also creates the platform-workflows + platform-sccache buckets (the existing olly-platform
      scoped user's s3:* on platform-* policy covers them) and a scoped ClusterSecretStore
      minio-platform-workflows-s3-credentials (conditions: workflows/buildkit/pkg-platform) exposing the
      scoped key — NOT the MinIO root store minio-platform-s3-credentials (deliberately cnpg-scoped per
      audit M26/H2). Adds an Optional spec.minioStore to XWorkflows + a MINIO_STORE substitute on the
      argo-workflows-base Kustomization (defaults to tenantName), so the platform singleton can point its S3
      ExternalSecrets at the scoped store. Additive — alice/bob unaffected (MINIO_STORE=tenantName).

    Included changes (v0.1.53 -> v0.1.54)

    • 525efbb73b5f feat(workflows): platform MinIO slice + minioStore seam (platform-collapse P2 A4)
    Downloads
  • v0.1.53 03037c82b3

    v0.1.53 Stable

    pipeline-bot released this 2026-07-17 20:50:15 +00:00 | 389 commits to trunk since this release

    Changed

    • XWorkflows singleton seams (platform-collapse Phase 2, foundation). Add optional
      spec.oidcTenant + spec.portalTenant to the XWorkflows XRD and the matching Optional
      override patches in apis/workflows/composition.yaml (mirrors the argocd Phase-1 seams), plus a
      platform: "1236" key in the BUILDKIT_HOSTPORT map. Purely additive — the alice XR sets neither
      field so it re-renders identically; this prepares a future Workflows/platform singleton claim.

    Changed

    • Wire the argocd-platform browser route (argocd-platform.sean.farm). After the Phase 1
      argocd consolidation dropped argocd-alice, the platform instance's HTTPRoutes dangled on the
      nonexistent portal-platform gateway. Add an optional spec.portalTenant to XArgoCD
      (mirrors oidcTenant) so the platform instance's routes attach to portal-alice's apex-edge
      gateway (instances/argocd-platform.yaml sets portalTenant: alice), and repoint the
      apis/portal argocd listener + cert + tile from argocd.%s to argocd-platform.%s with
      allowedRoutes → the argocd-platform namespace (mirrors the olly grafana/vm singleton pattern).

    Included changes (v0.1.52 -> v0.1.53)

    • ec7f9c670854 feat(workflows): XWorkflows singleton seams (platform-collapse P2 foundation)
    Downloads
  • v0.1.52 4e0dd8a72c

    v0.1.52 Stable

    pipeline-bot released this 2026-07-17 20:04:12 +00:00 | 393 commits to trunk since this release

    Changed

    • Wire the argocd-platform browser route (argocd-platform.sean.farm). After the Phase 1
      argocd consolidation dropped argocd-alice, the platform instance's HTTPRoutes dangled on the
      nonexistent portal-platform gateway. Add an optional spec.portalTenant to XArgoCD
      (mirrors oidcTenant) so the platform instance's routes attach to portal-alice's apex-edge
      gateway (instances/argocd-platform.yaml sets portalTenant: alice), and repoint the
      apis/portal argocd listener + cert + tile from argocd.%s to argocd-platform.%s with
      allowedRoutes → the argocd-platform namespace (mirrors the olly grafana/vm singleton pattern).

    Included changes (v0.1.51 -> v0.1.52)

    • 70db0f9ac4c6 feat(argocd): wire argocd-platform.sean.farm browser route via portal-alice
    Downloads
  • v0.1.51 3bf43ccf37

    v0.1.51 Stable

    pipeline-bot released this 2026-07-17 19:44:43 +00:00 | 397 commits to trunk since this release

    Changed

    • Drop XArgoCD from the tenant Stack (platform-collapse Phase 1). apis/stack/composition.yaml
      no longer renders a per-tenant argocd-{tenant}; the pipelines CD engine now runs on the
      cluster-singleton argocd-platform (instances/argocd-platform.yaml). The apis/argocd
      XRD/Composition is retained — it backs that platform instance.

    Included changes (v0.1.50 -> v0.1.51)

    • b72484bf3892 feat(stack): drop XArgoCD child — argocd is a platform singleton (P1)
    Downloads
  • v0.1.50 ba36d02ee0

    v0.1.50 Stable

    pipeline-bot released this 2026-07-17 16:08:46 +00:00 | 401 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.49 -> v0.1.50)

    • 573fb1fc57c4 chore(gitmirror): retire seanfarm-workflows
    Downloads
  • v0.1.49 dbe1be823d

    v0.1.49 Stable

    pipeline-bot released this 2026-07-17 15:53:24 +00:00 | 405 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.48 -> v0.1.49)

    • 9852aab15b57 chore(staticsite): remove dead someara-resume StaticSite instance
    Downloads
  • v0.1.48 d67209c134

    v0.1.48 Stable

    pipeline-bot released this 2026-07-17 15:38:41 +00:00 | 409 commits to trunk since this release

    Changed

    • Incremental release.

    Included changes (v0.1.47 -> v0.1.48)

    • 610286677177 fix(registry): mayastor StorageClass -> mayastor-repl5
    Downloads
  • v0.1.47 acaba96e2e

    v0.1.47 Stable

    pipeline-bot released this 2026-07-17 12:38:49 +00:00 | 414 commits to trunk since this release

    Changed

    • Forgejo app 15.0.3 → 16.0.0-rootless. Bumped the forgejoVersion XRD default
      (apis/forgejo) and the Stack composition value. Verified compatible: shared CNPG is
      PG18 (v16 minimum is PG12); no reverse-proxy auth configured (the v16
      REVERSE_PROXY_TRUSTED_PROXIES default change from * is inert here); forgejo-operator
      drives the stable REST API and clears every SDK version gate (Forgejo advertises its
      product major at /api/v1/version). Watch on next make rebuild: v16's git-mirror SSRF
      hardening sets http.followRedirects=false, so a ForgejoRepository seed from a redirecting
      clone URL would fail (codeberg canonical URLs are direct — low risk).

    Included changes (v0.1.46 -> v0.1.47)

    • 3825aa3292db feat(forgejo): app 15.0.3 -> 16.0.0-rootless
    Downloads