feat(binjovi): prepare Bytey service ownership handoff #325

Merged

binjovi-bot merged 2 commits from feat/binjovi-bytey-service-handoff into trunk

2026-09-06 01:35:34 +00:00

sean commented

2026-09-06 01:26:11 +00:00

Owner

The component has prune:false: removing the branch CR declarations does not delete the live objects or the remote rules. Their explicit Retain handoff follows deployment of Binjovi PR749 and independently verified provider state.

Validation: the new source contract fails before the change and passes after it; the complete Binjovi guard, branch-policy fleet guard, caller inventory and Kustomize render pass.

Move the Bytey main/trunk branch-policy source to Binjovi service management and supply a separate writer credential store. Keep the retained Bytey tag rule and the existing credential issuer. The store can read only forgejo-binjovi-operator-token and serve only namespace binjovi. Binjovi owns its projection and mount. The component has prune:false: removing the branch CR declarations does not delete the live objects or the remote rules. Their explicit Retain handoff follows deployment of Binjovi PR749 and independently verified provider state. Validation: the new source contract fails before the change and passes after it; the complete Binjovi guard, branch-policy fleet guard, caller inventory and Kustomize render pass.

sean added 1 commit

2026-09-06 01:26:11 +00:00