-
v0.1.16 Stable
released this
2026-07-09 10:16:35 +00:00 | 543 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.15 -> v0.1.16)
5ec9860856c8fix(workflows): observe-only the workflows namespace (stop the flux↔crossplane SSA fight)
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.15 Stable
released this
2026-07-09 10:02:59 +00:00 | 548 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.14 -> v0.1.15)
1fe765cad1b8fix(staticsite): store ref zot-dev -> zot-alice (stale tenant name)b199849b139fchore(workflows): remove the build-pipeline flux Kustomization (ArgoCD owns it)e2b19020e44cchore(workflows): prune:false on build-pipeline Kustomization before ArgoCD takeover
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.14 Stable
released this
2026-07-09 01:06:12 +00:00 | 557 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.13 -> v0.1.14)
e03cdfbcef6cfix(governance): restore bot write for the non-mirror gitops repos (seanfarm, platform-seanfarm)
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.13 Stable
released this
2026-07-09 00:50:14 +00:00 | 562 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.12 -> v0.1.13)
f9def2938ffbchore(governance): retire the manual pipeline-bot collaborator list
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.12 Stable
released this
2026-07-08 23:36:17 +00:00 | 567 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.11 -> v0.1.12)
098f97b4450afeat(gitmirror): auto-grant pipeline-bot write per mirror (composed ForgejoCollaborator)
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.11 Stable
released this
2026-07-08 23:00:34 +00:00 | 572 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.10 -> v0.1.11)
6d68825c977cfeat(governance): pipeline-bot write + main protection for sean/pipelines-argocd
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.10 Stable
released this
2026-07-08 20:17:15 +00:00 | 577 commits to trunk since this releaseChanged
- Incremental release.
Included changes (v0.1.9 -> v0.1.10)
85a9e55d348bfeat(gitmirror): pipelines-argocd — in-cluster ArgoCD config repo9d3d73948bc5deploy(forgejo-operator): bump controller image v0.6.9 -> v0.6.10 (ForgejoToken controller)
Downloads
-
Source code (ZIP)
1 download
-
Source code (TAR.GZ)
1 download
-
v0.1.9 Stable
released this
2026-07-07 16:55:41 +00:00 | 584 commits to trunk since this releaseRemoved
- CNPG PgBouncer
Pooler(postgres-pooler-rw) removed — incompatible with this cluster's
external-CA design. CNPG must sign the pooler's pgbouncer client cert with the CA private
key, but our CA secret (postgres-server-tls) carries onlyca.crt— the private key lives
solely in OpenBao PKI and never enters the cluster (by design). The pooler wedged the CNPG
cluster reconcile withcannot create Cluster auxiliary objects: missing ca.key secret data,
latchingphase: Unable to create required cluster objects(data plane stayed 5/5 healthy).
max_connections=400+shared_buffers=2GB(v0.1.7) already deliver the concurrency relief;
a pooler would need ALL its TLS/auth secrets provided explicitly so CNPG never signs anything.
Included changes (v0.1.8 -> v0.1.9)
295155d0808efix(cnpg): remove PgBouncer Pooler — incompatible with external-CA
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
1 download
- CNPG PgBouncer
-
v0.1.8 Stable
released this
2026-07-07 16:24:23 +00:00 | 589 commits to trunk since this releaseAdded
- CNPG PgBouncer
Pooler(postgres-pooler-rw, transaction mode, 3 replicas). Multiplexes many
client conns onto ~25 server conns — the real scale fix beyondmax_connections=400. Service
postgres-pooler-rw.cnpg-platform.svc:5432.authQueryunset → CNPG auto-provisions the auth-query
user. Only transaction-pool-SAFE consumers repoint here (Forgejo, next commit); Ory kratos/hydra
(sslmode=require + prepared statements) + OpenBao/bootstrap Jobs (DDL/session) stay direct on -rw.
Changed
- openbao-operator manager cpu limit 500m->2 (crossplane XCluster patch; scheduling-free).
Included changes (v0.1.7 -> v0.1.8)
cda21f56f1aafeat(concurrency): add CNPG PgBouncer Pooler (postgres-pooler-rw) + openbao-op limit
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
1 download
- CNPG PgBouncer
-
v0.1.7 Stable
released this
2026-07-07 15:50:44 +00:00 | 594 commits to trunk since this releaseChanged
- Concurrency raise (platform singletons). CNPG shared cluster: limits cpu 2->4 / mem 2->6Gi,
requests 250m/768Mi->500m/2Gi,shared_buffers512MB->2GB,effective_cache_size1GB->4GB,
max_connections200->400 (the shared DB was the bottleneck for every land/CI; a PgBouncer Pooler
for the real 10x is a deferred follow-up). MinIO pool requests cpu 100m->300m (x10 servers). Zot
mem limit 512Mi->1Gi (tight under concurrent onDemand-sync). Requests kept modest — worker CPU is
~66-86%% committed after the mayastor io-engine 4-core bump.
Included changes (v0.1.6 -> v0.1.7)
5344a94ae574feat(concurrency): raise CNPG (limits+max_connections 400+shared_buffers 2GB) + MinIO/Zot
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Concurrency raise (platform singletons). CNPG shared cluster: limits cpu 2->4 / mem 2->6Gi,