feat(binjovi): isolate native BuildKit workers #221

Merged

binjovi-bot merged 2 commits from codex/native-buildkit-infra into trunk 2026-09-03 15:24:56 +00:00

Conversation 0 Commits 2 Files changed 7 +321 -4

sean commented 2026-09-03 14:54:08 +00:00

Owner

Copy link

Adds separate admission and release BuildKit workers on official rootless BuildKit 0.30 with the OCI overlayfs worker. Each worker uses its own 30 GiB zfs-nvme-128k PVC and required node anti-affinity. Adds the OAuth client and scoped credentials for the outbound-only Binjovi agent. The agent deployment remains at zero replicas until the Binjovi release enables it.\n\nChecks: bash tests/binjovi-agent-oauth.sh; bash tests/binjovi-buildkit-cache.sh; kubectl kustomize; server-side dry-run.\n\nRollout order: merge and verify this PR before sean/ory and sean/binjovi. Do not activate sean/binjovi-plans v11 until all three dependencies are live.

Adds separate admission and release BuildKit workers on official rootless BuildKit 0.30 with the OCI overlayfs worker. Each worker uses its own 30 GiB zfs-nvme-128k PVC and required node anti-affinity. Adds the OAuth client and scoped credentials for the outbound-only Binjovi agent. The agent deployment remains at zero replicas until the Binjovi release enables it.\n\nChecks: bash tests/binjovi-agent-oauth.sh; bash tests/binjovi-buildkit-cache.sh; kubectl kustomize; server-side dry-run.\n\nRollout order: merge and verify this PR before sean/ory and sean/binjovi. Do not activate sean/binjovi-plans v11 until all three dependencies are live.

sean added 1 commit 2026-09-03 14:54:08 +00:00

feat(binjovi): isolate native BuildKit workers 6c338a921e

sean added 1 commit 2026-09-03 15:21:36 +00:00

test(binjovi): run native agent infrastructure guards 45d16bc7d1

binjovi-bot merged commit 45d16bc7d1 into trunk 2026-09-03 15:24:56 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/seanfarm!221

No description provided.