fix(binjovi): serve the Forgejo writer token to the flux deploy agents #770

Merged

binjovi-bot merged 1 commit from fix/writer-store-workflows into trunk 2026-09-14 21:12:17 +00:00

Conversation 0 Commits 1 Files changed 2 +9 -1

sean commented 2026-09-14 21:06:14 +00:00

Owner

Copy link

What

The binjovi-forgejo-writer ClusterSecretStore now serves namespace workflows as well as binjovi. The flux deploy agents run there; in the chain shape (Flux reads the packet.town mirror of Forgejo main) a rollback moves Forgejo main and needs this identity's token.

Pairs with binjovi (mirror_url flux targets, agents mount the token) and builder-images (binjovi-flux-deployer v12, --mirror-url).

Verified

• tests/binjovi.sh, tests/binjovi-service-handoff.sh pass.

https://claude.ai/code/session_01XdBRc9CHgFhAxCyHbdVtt6

## What The `binjovi-forgejo-writer` ClusterSecretStore now serves namespace `workflows` as well as `binjovi`. The flux deploy agents run there; in the chain shape (Flux reads the packet.town mirror of Forgejo `main`) a rollback moves Forgejo `main` and needs this identity's token. Pairs with binjovi (`mirror_url` flux targets, agents mount the token) and builder-images (`binjovi-flux-deployer` v12, `--mirror-url`). ## Verified - `tests/binjovi.sh`, `tests/binjovi-service-handoff.sh` pass. https://claude.ai/code/session_01XdBRc9CHgFhAxCyHbdVtt6

sean added 1 commit 2026-09-14 21:06:14 +00:00

fix(binjovi): serve the Forgejo writer token to the flux deploy agents ... 17b5801655

The off-cluster chain makes Forgejo main the deploy pointer: a Forgejo push
mirror carries it to the copy Flux reads. A failed deploy then rolls back by
moving Forgejo main, and that is a write by Binjovi's own identity. The flux
deploy agents run in namespace workflows, and the binjovi-forgejo-writer
ClusterSecretStore served namespace binjovi only. Now it serves both. Same
token, same identity, Binjovi's other namespace.

Pairs with binjovi's mirror_url flux targets and builder-images'
binjovi-flux-deployer v12, which reads --mirror-url and rolls back through
Forgejo instead of a Codeberg deploy key.

Claude-Session: https://claude.ai/code/session_01XdBRc9CHgFhAxCyHbdVtt6

binjovi-bot merged commit 17b5801655 into trunk 2026-09-14 21:12:17 +00:00

binjovi-bot deleted branch fix/writer-store-workflows 2026-09-14 21:12:17 +00:00

Sign in to join this conversation.

Reviewers

No reviewers

Labels

Clear labels

No items

No labels

Milestone

Clear milestone

No items

No milestone

Projects

Clear projects

No items

No project

Assignees

Clear assignees

No assignees

1 participant

Notifications

Subscribe

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

sean/seanfarm!770

No description provided.