sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 118 Packages Wiki Activity
118 releases 127 tags
  • v0.1.7 28697d696e

    v0.1.7 Stable

    pipeline-bot released this 2026-07-07 10:25:17 +00:00 | 502 commits to main since this release

    Added

    • pkg-cache — in-cluster nginx proxy_cache pull-through for build-time package
      fetches.       ONE singleton (namespace pkg-cache, athens-clone: mayastor-repl2
      rebuildable tier, Recreate, no gateway) caching builder-images builds' distro
      packages (apt/dnf/apk) + nix (cache.nixos.org) + stable raw binaries, so a
      cache-busting rebuild pulls from the cluster instead of the internet. nginx
      (event-driven, proxy_cache_lock collapses concurrent misses) — not squid /
      apt-cacher-ng (single-threaded) or Pulp (over-complex). $eco→origin via two
      maps; two ordered regex tiers split short-TTL metadata from 30d immutable blobs;
      proxy_ignore_headers + proxy_hide_header Set-Cookie so Cloudflare-fronted
      indexes (archive.ubuntu.com) still cache. Inert until a build opts in via the
      PKG_CACHE build-arg (follow-up) — an unwired image is byte-identical to today.

    Fixed

    • make forgejo-cred read-only flip now actually takes effect on macOS, and make push-branch
      works from a codeberg-origin clone. forgejo-cred now erases the cached code.sean.farm credential
      (macOS keychain) + resets the URL helper chain so the read-only token is used (before, a stale
      keychain-cached admin cred let git push through). pipeline-push-branch.sh fetches the canonical
      trunk from Forgejo instead of assuming a local origin/trunk (seanfarm/platform clone from
      codeberg, which has no trunk ref). First change landed via the new read-only + push-branch flow.
    • make land now works for seanfarm-org-owned repos. scripts/pipeline-land.sh hardcoded
      REPO="sean/${PROJECT}", so landing builder-images / tester-images / seanfarm-workflows (owned by
      the seanfarm org, not the sean user) resolved the wrong repo → Forgejo 404 → cannot resolve <branch> HEAD. Now derives owner/repo from the PipelineProject CR's spec.repo (source of truth),
      falling back to sean/<project>.

    Changed

    • Laptop code.sean.farm credential is now READ-ONLY. make forgejo-cred mints a
      read:repository token as sean (password from forgejo-user-password) instead of wiring the
      gitea_admin site-admin token — the laptop can clone/fetch but git push is rejected (no
      accidental derp branches, no git-side god-mode). New make push-branch PROJECT=<p> BRANCH=<b>
      (scripts/pipeline-push-branch.sh) bundles a local branch's commits and the pipeline-bot pushes
      them to Forgejo (fires CI as usual → make land); owner comes from the PipelineProject CR. Old
      behavior preserved as break-glass make forgejo-cred-admin. Docs updated (DEVELOPMENT-WORKFLOW.md).

    Included changes (v0.11.0 -> v0.1.7)

    • 5992f75d8fd4 docs(changelog): note pkg-cache under [Unreleased]
    • ff1d07311c6b fix(cred): make read-only flip stick (erase macOS keychain) + push-branch trunk fetch
    • 68db90b44384 feat(pkg-cache): in-cluster nginx proxy_cache for build-time package fetches
    • 830eb560159c feat(cred): read-only laptop token + make push-branch (bot-mediated land)
    • 238c96279655 fix(land): derive repo owner from PipelineProject, not hardcoded sean/
    • 57825c5f7833 chore(pipelines-operator): pin v0.1.20 (tag-protection RBAC fix)
    • 6211d8deb49d chore(pipelines-operator): pin v0.1.19 (trunk/main + tag lockdown to pipeline-bot)
    • 70168881ab00 feat(de-admin): gitops-resync + forge-guard for pipeline-bot token
    • 7c19a9f84f08 feat(build-pipeline): fan pipeline-bot token into workflows-{tenant}
    • 8e73c9956b2b chore(forgejo-operator): bump source ref v0.6.1 -> v0.6.9
    • 49c35a69f4a3 feat(pipelines): onboard builder-images as a dockerfile-set PipelineProject
    • 4cd5cb77cc42 chore: deploy pipelines-operator v0.1.17 image (gitops-flux staging renderRoot fix)
    • 72a9e581dbef feat(gitops-flux): switch seanfarm + platform-seanfarm to the release beat
    • 10fefe67f322 chore: adopt semver (VERSION + CHANGELOG) for the gitops-flux release beat
    • d1a75b328848 feat(pipelines): register seanfarm, platform-seanfarm (gitops-flux) + pipelines (gitops-deploy) CRs
    • 8144a6863c89 Reapply "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • c52be382eb00 Revert "Merge pull request 'land chore/bump-pipelines-operator-0.1.15 (ece9714a3e)' (#211) from chore/bump-pipelines-operator-0.1.15 into trunk"
    • ece9714a3e57 chore: bump pipelines-operator v0.1.14 -> v0.1.15 (gitops-flux + gitops-deploy renderers)
    • abf652c425cc feat(pipelines): register zdns, zerotea (server-package) + zelnet (desktop-package) CRs
    • dc512c6c6411 chore: bump pipelines-operator v0.1.13 -> v0.1.14 (server + desktop renderers)
    • 4bc34068f73d feat(pipelines): register rpg-* ibmi-rpg PipelineProject CRs (re-land)
    • 64783958de7e Revert "Merge pull request 'land feat/pproj-rpg-ibmi (cf751fdf3c)' (#201) from feat/pproj-rpg-ibmi into trunk"
    • cf751fdf3c1f feat(pipelines): register rpg-{hello,demo,lemonade,munchers} as ibmi-rpg PipelineProject CRs
    • ebcf146d8a4a chore: bump pipelines-operator v0.1.12 -> v0.1.13 (ibmi-rpg renderer)
    • 8962b7cb0eda feat(pipelines): register libseanfarm-operator as PipelineProject CR (re-land)
    • 9572e0a2eee7 Revert "Merge pull request 'land feat/pproj-libseanfarm-operator (e35c4472dc)' (#193) from feat/pproj-libseanfarm-operator into trunk"
    • e35c4472dc12 feat(pipelines): register libseanfarm-operator as PipelineProject CR
    • cbbcbca59ce0 Revert "Merge pull request 'land fix/zfs-exporter-oom-reapply (cf4f817cab)' (#189) from fix/zfs-exporter-oom-reapply into trunk"
    • cf4f817cab14 fix(zfs-exporter): reapply 64Mi->256Mi memory limit post-kernel-roll
    • 9facfbba078f Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""""""""
    • 8b4073889caa Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""""""
    • 42a7c34978a4 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""""""
    • bd0d699a8a0e Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""""""
    • 2c903feb94de Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""""""
    • 10377e5d4207 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""""
    • ac16715adb91 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""""
    • 1c21635ea537 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""""
    • 91fb3311f3bb Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""""
    • 0607c311dc2b Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""
    • cd16f795be99 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""""
    • 665fadd0cb73 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""
    • f1c35947329d Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""""
    • a0af6308d60d Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""
    • 8dcac122dc13 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""""
    • 94998b0fb866 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""
    • 5d92e68caee1 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""""
    • 5d2a5cc555d2 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""
    • aede003727f6 Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk""""""""""""
    • 33d827d20eb9 Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""
    • 758c4bd20aab Revert "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Reapply "Merge pull request 'land fix/zfs-exporter-oom (5398b53a07)' (#105) from fix/zfs-exporter-oom into trunk"""""""""""
    Downloads