-
v0.1.93 Stable
released this
2026-07-23 16:54:39 +00:00 | 108 commits to main since this releaseChanged
- Kernel residue rehomes to the bare
workflowsns (Track B2). The cosign-sign-kernel
Job (kernel-chain 5-sign), the node-snapshot-bake Workflow, and the hcloud-token +
bake-ssh-key Secret deliveries all move workflows-alice → workflows (targetNamespace only —
the -source namespace.yaml objects stay until B8; removing them early prunes the alice ns).
kernel-deploy RBAC + the kernel-deploy-guard VAP widen to accept the bare
pipeline-deploy-kernel SA alongside alice (narrow-back at B8). OpenBao + forge-guard already
admit the bare ns; signing runs bare today.
Included changes (v0.1.92 -> v0.1.93)
25ffaf07a0d7feat(kernel): rehome bake/sign residue to bare 'workflows' + widen deploy trust (B2)
Downloads
-
Source code (ZIP)
0 downloads
-
Source code (TAR.GZ)
0 downloads
- Kernel residue rehomes to the bare