• v0.1.99 233b4fbbc8

    v0.1.99 Stable

    pipeline-bot released this 2026-07-23 16:33:40 +00:00 | 83 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.98 -> v0.1.99)

    • 167de8e08307 chore(oidc): prune retired-ns references (dead registry rules + RG entries)
    • bdb6c1805f9e fix(tenantbucket): CSS ns condition admits bare 'forgejo' (rename residual)
    Downloads
  • v0.1.98 bec5c58519

    v0.1.98 Stable

    pipeline-bot released this 2026-07-23 16:18:56 +00:00 | 89 commits to main since this release

    Fixed

    • Drop the bob_ CNPG managed roles + the pooler leftover (alice-residue audit).* Tenant
      bob was removed 2026-06-11 but the shared Cluster still minted his four LOGIN roles
      (passwordless, so inert — but they don't belong); cnpg_pooler_pgbouncer lingered from the
      abandoned PgBouncer Pooler experiment. All five flip to ensure: absent (declarative DROP;
      bob entries stay as tombstones for a template re-add).

    Included changes (v0.1.97 -> v0.1.98)

    • 004b1755fe3a fix(postgres): drop bob_* managed roles + pooler leftover (ensure: absent)
    Downloads
  • v0.1.97 93aa7bec4e

    v0.1.97 Stable

    pipeline-bot released this 2026-07-23 16:05:18 +00:00 | 93 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.96 -> v0.1.97)

    • 655c0118e713 fix(forgejo): adopt legacy database secret safely
    Downloads
  • v0.1.96 3c0ff00bc9

    v0.1.96 Stable

    pipeline-bot released this 2026-07-23 15:52:21 +00:00 | 97 commits to main since this release

    Removed

    • Delete apis/obsbucket (XRD + Composition). The ObsBucket/platform claim retired last
      release with all 5 targets orphaned in place and adopted by the sean/pipelines obsbucket
      ArgoCD app (verified: zero XRs, scoped-key Secret UID invariant, CSS + CI consumers Ready).
      Composition and XRD delete together — no instances remain.

    Included changes (v0.1.95 -> v0.1.96)

    • eddb89139d60 retire(apis): delete apis/obsbucket — the slice is ArgoCD-owned now
    Downloads
  • v0.1.95 6dc18f25b2

    v0.1.95 Stable

    pipeline-bot released this 2026-07-23 15:42:33 +00:00 | 101 commits to main since this release

    Removed

    • Retire the ObsBucket/platform claim (Phase 1 of the ArgoCD move). Its 5 composed
      resources (olly-platform Password/ExternalSecrets, the minio-platform-workflows-s3-credentials
      ClusterSecretStore, the bucket-init Job) are now owned by the ArgoCD obsbucket app in
      sean/pipelines (adopted in place — Synced/Healthy, scoped-key Secret UID unchanged). The
      provider-kubernetes Objects were flipped to deletionPolicy: Orphan before this lands, so the
      claim/XR deletion leaves the live targets untouched. apis/obsbucket itself retires next.

    Included changes (v0.1.94 -> v0.1.95)

    • 396efe27562c retire(obsbucket): drop the ObsBucket/platform instance (ArgoCD owns the slice now)
    Downloads
  • v0.1.94 4791bc47f4

    v0.1.94 Stable

    pipeline-bot released this 2026-07-23 15:28:48 +00:00 | 105 commits to main since this release

    Removed

    • Retire the dead apis/registry + apis/staticsite composite APIs (~2k LOC). Zero
      XRs/claims for both (verified live): XRegistry was superseded by the bare ArgoCD-managed
      registry (sean/pipelines bundle/registry, 07-21 flip); XStaticSite was never instantiated.
      XRDs + Compositions + kustomization entries deleted; nothing composes or consumes them.

    Included changes (v0.1.93 -> v0.1.94)

    • 74dad2db5e1c retire(apis): delete dead registry + staticsite composite APIs
    Downloads
  • v0.1.93 6dc8b2d37e

    v0.1.93 Stable

    pipeline-bot released this 2026-07-23 14:42:22 +00:00 | 109 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.92 -> v0.1.93)

    • 4fa144486c4d chore(cluster): deploy openbao operator v0.12.24
    • 47223dcd2d19 chore(changelog): detangle header-stranded bullets into their dated releases
    Downloads
  • v0.1.92 683f3aaf8d

    v0.1.92 Stable

    pipeline-bot released this 2026-07-23 14:27:15 +00:00 | 115 commits to main since this release

    Fixed

    • De-parameterize the forgejo ns in platformuser + platformgroup (forgejo-alice→forgejo
      rename residual).
      The ForgejoUser/ForgejoTeam Objects still minted fmt: "forgejo-%s"
      forgejo-alice (CR ns, forgejoRef ns, and the forgejo-admin-token dependsOn gate), so
      all 5 XPlatformUsers + XPlatformGroup/admins-alice sat Ready=False on
      secrets "forgejo-admin-token" not found after the 07-22 ns rename. Hardcode the bare
      forgejo literal like the other consumer APIs (gitmirror) and drop the six patch blocks;
      ory-{stack} plumbing untouched.

    Included changes (v0.1.91 -> v0.1.92)

    • b74d6db0d57e rename(platformuser,platformgroup): de-parameterize forgejo-alice→forgejo ns
    Downloads
  • v0.1.91 b1ea36f1b9

    v0.1.91 Stable

    pipeline-bot released this 2026-07-23 13:47:17 +00:00 | 119 commits to main since this release

    Fixed

    • Roll the OpenBao controller image to v0.12.23 and the Forgejo controller
      image to v0.6.25, matching the CRD source tags already carried by seanfarm.
      Add a guard so a future CRD-only pin bump cannot silently leave the old
      controller binaries running.

    Included changes (v0.1.90 -> v0.1.91)

    • 34c6e7f0a94a fix(cluster): align operator controller images
    Downloads
  • v0.1.90 524accbf5a

    v0.1.90 Stable

    pipeline-bot released this 2026-07-23 13:42:09 +00:00 | 123 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.89 -> v0.1.90)

    • 66f6a7760f49 cnpg(p6): cert-SAN narrow-back + drop residual cnpg-platform comments
    Downloads