• v0.1.93 11460a50c0

    v0.1.93 Stable

    pipeline-bot released this 2026-07-23 16:54:39 +00:00 | 108 commits to main since this release

    Changed

    • Kernel residue rehomes to the bare workflows ns (Track B2). The cosign-sign-kernel
      Job (kernel-chain 5-sign), the node-snapshot-bake Workflow, and the hcloud-token +
      bake-ssh-key Secret deliveries all move workflows-alice → workflows (targetNamespace only —
      the -source namespace.yaml objects stay until B8; removing them early prunes the alice ns).
      kernel-deploy RBAC + the kernel-deploy-guard VAP widen to accept the bare
      pipeline-deploy-kernel SA alongside alice (narrow-back at B8). OpenBao + forge-guard already
      admit the bare ns; signing runs bare today.

    Included changes (v0.1.92 -> v0.1.93)

    • 25ffaf07a0d7 feat(kernel): rehome bake/sign residue to bare 'workflows' + widen deploy trust (B2)
    Downloads