sean/platform-seanfarm
Watch
1
0
Fork
You've already forked platform-seanfarm
 0
Code Issues Pull requests 10 Projects Releases 120 Packages Wiki Activity
120 releases 120 tags
  • v0.1.59 f2351d0878

    v0.1.59 Stable

    pipeline-bot released this 2026-07-19 10:30:46 +00:00 | 257 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.58 -> v0.1.59)

    • 84b6fb9da785 feat(portal): point komoplane/tekton listeners at olly-platform + cutover runbook
    Downloads
  • v0.1.58 8f398fd5e2

    v0.1.58 Stable

    pipeline-bot released this 2026-07-18 21:39:22 +00:00 | 261 commits to main since this release

    Changed

    • Rename the platform ArgoCD browser host argocd-platform.sean.farm → argocd.sean.farm. The
      short apex host is free now that argocd-alice is retired, so the singleton takes the clean name.
      instances/argocd-platform.yaml hostPrefix: argocd-platform → argocd (drives ARGOCD_HOST →
      the argocd-base server url + OIDC redirectURI + the Hydra client redirect_uris), and
      apis/portal/composition.yaml moves the gateway listener hostname + the argocd-gateway-tls
      cert dnsNames + the portal apps.json link to argocd.%s. The K8s NAMESPACE stays argocd-platform
      (only the hostname moved); the listener's allowedRoutes still select the argocd-platform ns.
      Deploy note: the completed Hydra registrar Job may need a re-run to update the client redirect_uris.

    Included changes (v0.1.57 -> v0.1.58)

    • 72428c1f35df feat(argocd): rename browser host argocd-platform.sean.farm -> argocd.sean.farm
    Downloads
  • v0.1.57 944ecd221b

    v0.1.57 Stable

    pipeline-bot released this 2026-07-18 19:49:01 +00:00 | 265 commits to main since this release

    Changed

    • cosign auth role trusts workflows-platform (platform-collapse Phase 2, gate-prep). The
      vault-build-pipeline-auth-role (OpenBaoKubernetesAuthRole build-pipeline-{stackName}) now binds
      pipeline-cosign-signer in BOTH workflows-{stackName} and (static) workflows-platform, so the
      platform kernel-bake cosign sign step can assume the role and sign with the shared cosign-ec transit
      key during dual-run. Transitional bridge — removed when the cosign auth role relocates to the platform
      singleton at cutover.

    Included changes (v0.1.56 -> v0.1.57)

    • 6bbac394ca36 feat(stack): cosign auth role trusts workflows-platform (gate-prep)
    Downloads
  • v0.1.56 7984c3170e

    v0.1.56 Stable

    pipeline-bot released this 2026-07-18 18:08:16 +00:00 | 269 commits to main since this release

    Added

    • registryStore seam on the Workflows XRD (platform-collapse Phase 2, gate-prep). Mirrors the
      minioStore seam: the zot registry ExternalSecrets in argo-workflows-base now reference
      zot-${REGISTRY_STORE}-registry-credentials, where REGISTRY_STORE defaults to tenantName (tenants
      unchanged) and the Optional spec.registryStore overrides it. instances/workflows-platform.yaml sets
      registryStore: alice so the platform singleton borrows zot-alice-registry-credentials during dual-run
      (registry/zot is still per-tenant registry-alice; no zot-platform store exists until Phase 3). Fixes
      the registry-credentials/zot-admin-credentials SecretSyncedError in workflows-platform. Requires the
      matching seanfarm argo-workflows-base change (zot-${TENANT}- → zot-${REGISTRY_STORE}-).

    Included changes (v0.1.55 -> v0.1.56)

    • b37b5da71e9a feat(workflows): registryStore seam → platform borrows zot-alice store (gate-prep)
    Downloads
  • v0.1.55 00ee66eb7b

    v0.1.55 Stable

    pipeline-bot released this 2026-07-18 04:20:52 +00:00 | 273 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.54 -> v0.1.55)

    • d69c4dbc8733 feat(workflows): Workflows/platform singleton claim (platform-collapse P2 A2)
    Downloads
  • v0.1.54 5b37e5a9c6

    v0.1.54 Stable

    pipeline-bot released this 2026-07-18 03:47:23 +00:00 | 277 commits to main since this release

    Added

    • Platform workflows MinIO slice + minioStore seam (platform-collapse Phase 2, A4). apis/obsbucket
      now also creates the platform-workflows + platform-sccache buckets (the existing olly-platform
      scoped user's s3:* on platform-* policy covers them) and a scoped ClusterSecretStore
      minio-platform-workflows-s3-credentials (conditions: workflows/buildkit/pkg-platform) exposing the
      scoped key — NOT the MinIO root store minio-platform-s3-credentials (deliberately cnpg-scoped per
      audit M26/H2). Adds an Optional spec.minioStore to XWorkflows + a MINIO_STORE substitute on the
      argo-workflows-base Kustomization (defaults to tenantName), so the platform singleton can point its S3
      ExternalSecrets at the scoped store. Additive — alice/bob unaffected (MINIO_STORE=tenantName).

    Included changes (v0.1.53 -> v0.1.54)

    • 525efbb73b5f feat(workflows): platform MinIO slice + minioStore seam (platform-collapse P2 A4)
    Downloads
  • v0.1.53 03037c82b3

    v0.1.53 Stable

    pipeline-bot released this 2026-07-17 20:50:15 +00:00 | 281 commits to main since this release

    Changed

    • XWorkflows singleton seams (platform-collapse Phase 2, foundation). Add optional
      spec.oidcTenant + spec.portalTenant to the XWorkflows XRD and the matching Optional
      override patches in apis/workflows/composition.yaml (mirrors the argocd Phase-1 seams), plus a
      platform: "1236" key in the BUILDKIT_HOSTPORT map. Purely additive — the alice XR sets neither
      field so it re-renders identically; this prepares a future Workflows/platform singleton claim.

    Changed

    • Wire the argocd-platform browser route (argocd-platform.sean.farm). After the Phase 1
      argocd consolidation dropped argocd-alice, the platform instance's HTTPRoutes dangled on the
      nonexistent portal-platform gateway. Add an optional spec.portalTenant to XArgoCD
      (mirrors oidcTenant) so the platform instance's routes attach to portal-alice's apex-edge
      gateway (instances/argocd-platform.yaml sets portalTenant: alice), and repoint the
      apis/portal argocd listener + cert + tile from argocd.%s to argocd-platform.%s with
      allowedRoutes → the argocd-platform namespace (mirrors the olly grafana/vm singleton pattern).

    Included changes (v0.1.52 -> v0.1.53)

    • ec7f9c670854 feat(workflows): XWorkflows singleton seams (platform-collapse P2 foundation)
    Downloads
  • v0.1.52 4e0dd8a72c

    v0.1.52 Stable

    pipeline-bot released this 2026-07-17 20:04:12 +00:00 | 285 commits to main since this release

    Changed

    • Wire the argocd-platform browser route (argocd-platform.sean.farm). After the Phase 1
      argocd consolidation dropped argocd-alice, the platform instance's HTTPRoutes dangled on the
      nonexistent portal-platform gateway. Add an optional spec.portalTenant to XArgoCD
      (mirrors oidcTenant) so the platform instance's routes attach to portal-alice's apex-edge
      gateway (instances/argocd-platform.yaml sets portalTenant: alice), and repoint the
      apis/portal argocd listener + cert + tile from argocd.%s to argocd-platform.%s with
      allowedRoutes → the argocd-platform namespace (mirrors the olly grafana/vm singleton pattern).

    Included changes (v0.1.51 -> v0.1.52)

    • 70db0f9ac4c6 feat(argocd): wire argocd-platform.sean.farm browser route via portal-alice
    Downloads
  • v0.1.51 3bf43ccf37

    v0.1.51 Stable

    pipeline-bot released this 2026-07-17 19:44:43 +00:00 | 289 commits to main since this release

    Changed

    • Drop XArgoCD from the tenant Stack (platform-collapse Phase 1). apis/stack/composition.yaml
      no longer renders a per-tenant argocd-{tenant}; the pipelines CD engine now runs on the
      cluster-singleton argocd-platform (instances/argocd-platform.yaml). The apis/argocd
      XRD/Composition is retained — it backs that platform instance.

    Included changes (v0.1.50 -> v0.1.51)

    • b72484bf3892 feat(stack): drop XArgoCD child — argocd is a platform singleton (P1)
    Downloads
  • v0.1.50 ba36d02ee0

    v0.1.50 Stable

    pipeline-bot released this 2026-07-17 16:08:46 +00:00 | 293 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.49 -> v0.1.50)

    • 573fb1fc57c4 chore(gitmirror): retire seanfarm-workflows
    Downloads