sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 117 Packages Wiki Activity
117 releases 126 tags
  • v0.1.116 5252a369a5

    v0.1.116 Stable

    pipeline-bot released this 2026-07-24 16:53:34 +00:00 | 0 commits to main since this release

    • fix(sso): retarget the ory-session-keys Flux KS ory-alice->ory. The ory-alice ns was deleted at the SSO cutover, wedging this KS Ready=False (namespaces ory-alice not found) and failing every seanfarm deploy's flux-converge gate. (The session-key secrets are currently unused — nothing envFroms them — but retargeting is the minimal safe fix; deleting the dead source is a later cleanup.)

    Included changes (v0.1.115 -> v0.1.116)

    • 1ea3c7cfb472 fix(sso): retarget ory-session-keys KS ory-alice->ory (unblock deploys)
    Downloads
  • v0.1.115 a3108e5236

    v0.1.115 Stable

    pipeline-bot released this 2026-07-24 16:39:22 +00:00 | 4 commits to main since this release

    • feat(sso): make the ory-argocd seed rebuild-durable — add an ory-backup CronWorkflow (Forgejo->codeberg every 10min) + create ns ory in the seed (Forgejo->codeberg every 10min, Argo v4 spec.schedules) so the ory-user-passwords SOPS KS converges on cold rebuild before ArgoCD syncs. (ForgejoRepository importSource deferred — immutable on the existing repo; needs a codeberg-seed + delete/recreate.)
    • chore(sso): delete 7 dead ory-alice debug scripts (run-check-kratos-*/run-verify-kratos-identities/run-reconcile-users/run-check-tenant-network-policies/run-check-operator-network) — the ory-alice ns is gone.

    Included changes (v0.1.114 -> v0.1.115)

    • b102753e7dc7 feat(sso): rebuild-durable ory seed + cleanup dead ory-alice scripts
    Downloads
  • v0.1.114 087499a7e3

    v0.1.114 Stable

    pipeline-bot released this 2026-07-24 15:19:37 +00:00 | 8 commits to main since this release

    Fixed

    • Migrate the olly Forgejo backup CronWorkflow to Argo v4's spec.schedules
      list, and reject future v3 spec.schedule regressions in GitOps manifests.

    Included changes (v0.1.113 -> v0.1.114)

    • cb6fd9640b1c test(argo): group v4 schedule assertions
    • 25dfdb670403 fix(argo): migrate olly backup schedule to v4
    Downloads
  • v0.1.113 3cd90b6177

    v0.1.113 Stable

    pipeline-bot released this 2026-07-24 15:02:49 +00:00 | 13 commits to main since this release

    Security

    • Remove shipd's obsolete Workflow admission policy now that its RBAC is
      PipelineRelease-only, and make the remaining exact-ServiceAccount CEL match
      safe for admission requests without a username.

    Included changes (v0.1.112 -> v0.1.113)

    • d0e3e9f13ad2 fix(admission): retire obsolete shipd workflow guard
    Downloads
  • v0.1.112 418c7fbc41

    v0.1.112 Stable

    pipeline-bot released this 2026-07-24 14:38:01 +00:00 | 17 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.111 -> v0.1.112)

    • 9c77964b152b feat(argo): vendor v4.0.8 workflow CRDs
    Downloads
  • v0.1.111 bc46e6fce3

    v0.1.111 Stable

    pipeline-bot released this 2026-07-24 14:30:34 +00:00 | 21 commits to main since this release

    • feat(sso): stand up the ory-argocd app-of-apps seed + ory-user-passwords SOPS source for the Ory SSO stack move into the dedicated sean/ory ArgoCD repo (ory-alice→ory singleton). Additive/parallel: the new ns ory stack runs alongside live ory-alice against the same shared alice_hydra/alice_kratos DBs; ory-push.sh bot-pushes content. Session keys unused live (CHANGEME crypto reproduced via ODS) so continuity is automatic; the 5 per-user Kratos passwords are frozen as SOPS (ESO generator re-mints). No LE-prod cert issuance (auth-tls byte-copied at cutover).

    Included changes (v0.1.110 -> v0.1.111)

    • 77ae5023e535 feat(sso): ory-argocd seed + user-passwords SOPS for the sean/ory move
    Downloads
  • v0.1.110 e267ed337e

    v0.1.110 Stable

    pipeline-bot released this 2026-07-24 12:34:35 +00:00 | 25 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.109 -> v0.1.110)

    • 28a0cb908c21 chore(images): update v0.3.10 -> v0.3.11
    Downloads
  • v0.1.109 c0e716da27

    v0.1.109 Stable

    pipeline-bot released this 2026-07-24 11:58:42 +00:00 | 29 commits to main since this release

    Fixed

    • Roll the persistent Shipwright BuildKit daemon whenever its registry
      configuration changes, so newly added Zot mirrors take effect immediately
      instead of waiting for an unrelated pod restart.

    Included changes (v0.1.108 -> v0.1.109)

    • 0e4b3b6c9552 fix(buildkit): roll Shipwright daemon on config changes
    Downloads
  • v0.1.108 264eb85916

    v0.1.108 Stable

    pipeline-bot released this 2026-07-24 11:42:29 +00:00 | 33 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.107 -> v0.1.108)

    • dfefc396d495 chore(dns): rebuild-hygiene after the static-key cutover
    Downloads
  • v0.1.107 81b2d2f680

    v0.1.107 Stable

    pipeline-bot released this 2026-07-24 11:11:59 +00:00 | 37 commits to main since this release

    Performance

    • Reduce unexplained inter-step Argo workflow pauses by shortening the
      controller's safety requeue from 10s to 2s, and raise its Kubernetes client
      limits from 20/30 to the documented 50 QPS / 75 burst because the controller
      was visibly client-throttled during scheduled workflow waves.

    Included changes (v0.1.106 -> v0.1.107)

    • a5efe23469e0 feat(dns): permanent static dns.admin GCP key via Flux-SOPS (Option B)
    • 3d51d8f7b6aa perf(workflows): reduce inter-step controller latency
    Downloads