sean/seanfarm
Watch
1
0
Fork
You've already forked seanfarm
 0
Code Issues Pull requests 7 Projects Releases 117 Packages Wiki Activity
117 releases 126 tags
  • v0.1.96 fe6cc2490c

    v0.1.96 Stable

    pipeline-bot released this 2026-07-24 00:38:23 +00:00 | 88 commits to main since this release

    Changed

    • shipd-guard VAPs match the bare pkg shipd SA (Track B5 widen). Both matchConditions
      pinned system:serviceaccount:pkg-alice:pipelines-shipd; when the dashboard rehomes the SA to
      ns pkg, an unwidened matchCondition silently stops matching — the guard would be OFF for the
      new identity (the forge-guard workflows-* lesson). Alice entry narrows out at delta-C.

    Included changes (v0.1.95 -> v0.1.96)

    • 6b54f363c30d fix(kyverno): shipd-guard matches the bare pkg shipd SA (B5 widen)
    Downloads
  • v0.1.95 cb6bc0c547

    v0.1.95 Stable

    pipeline-bot released this 2026-07-23 18:15:38 +00:00 | 92 commits to main since this release

    • Deploy Kratos identity operator v0.5.16 and make Flux image automation source
      and check out canonical Forgejo trunk, matching the branch autoland updates.
      This stops the same operator bump from being regenerated every 15 minutes
      while release-only main waits for the next pipectl ship.

    Included changes (v0.1.94 -> v0.1.95)

    • 2b50b650f82d fix(images): base automation on Forgejo trunk
    • 4b7041115a23 chore(images): update v0.5.15 -> v0.5.16
    • e7c71ce01a6f chore(images): update v0.5.15 -> v0.5.16
    • db7aa9f5d218 chore(images): update v0.5.15 -> v0.5.16
    • 53e37a88b99a chore(images): update v0.5.15 -> v0.5.16
    Downloads
  • v0.1.94 c5a2d7efcc

    v0.1.94 Stable

    pipeline-bot released this 2026-07-23 17:08:32 +00:00 | 104 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.93 -> v0.1.94)

    • 47a598399317 fix(operators): automate immutable release pins
    Downloads
  • v0.1.93 11460a50c0

    v0.1.93 Stable

    pipeline-bot released this 2026-07-23 16:54:39 +00:00 | 108 commits to main since this release

    Changed

    • Kernel residue rehomes to the bare workflows ns (Track B2). The cosign-sign-kernel
      Job (kernel-chain 5-sign), the node-snapshot-bake Workflow, and the hcloud-token +
      bake-ssh-key Secret deliveries all move workflows-alice → workflows (targetNamespace only —
      the -source namespace.yaml objects stay until B8; removing them early prunes the alice ns).
      kernel-deploy RBAC + the kernel-deploy-guard VAP widen to accept the bare
      pipeline-deploy-kernel SA alongside alice (narrow-back at B8). OpenBao + forge-guard already
      admit the bare ns; signing runs bare today.

    Included changes (v0.1.92 -> v0.1.93)

    • 25ffaf07a0d7 feat(kernel): rehome bake/sign residue to bare 'workflows' + widen deploy trust (B2)
    Downloads
  • v0.1.92 4360a6c698

    v0.1.92 Stable

    pipeline-bot released this 2026-07-23 16:34:29 +00:00 | 112 commits to main since this release

    Fixed

    • run-reconcile-platform-instances.sh: fix the GitRepository name and drop the phantom bob
      check (alice-residue audit).       platform-seanfarm-source is not a GitRepository (the source
      is platform-seanfarm) so the first reconcile always errored; openbaopolicy database-bob
      has not existed since the bob removal. Also retitles the stale VaultPolicy wording.

    Removed

    • Delete 17 dead debug scripts + the unreferenced build-pipeline-base dir (alice-residue
      audit).       The run-check/monitor/sign scripts targeted pre-collapse per-tenant namespaces
      (cnpg-alice/bob, vault-alice/bob, minio-alice, bob root-CA) and the retired VaultPolicy API —
      none can run against the collapsed singletons and they only mislead.
      kubernetes/flux/infrastructure/build-pipeline-base/ is rendered by no Flux Kustomization
      (superseded by sean/pipelines infra/build-pipeline + workflows-infra-bare). Also repoint
      scripts/zelnet/why.sh at the bare workflows ns (zelnet CI moved in the CI-spine cutover).

    Included changes (v0.1.91 -> v0.1.92)

    • 3ea264780fab chore(scripts): delete 17 dead per-tenant debug scripts + build-pipeline-base
    • cf98668f2d6c fix(scripts): repair run-reconcile-platform-instances (source name, phantom bob check)
    Downloads
  • v0.1.91 d5d277b23c

    v0.1.91 Stable

    pipeline-bot released this 2026-07-23 15:58:23 +00:00 | 118 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.90 -> v0.1.91)

    • f83d8d242235 chore(openbao): pin operator source v0.12.27
    Downloads
  • v0.1.90 20320631ce

    v0.1.90 Stable

    pipeline-bot released this 2026-07-23 15:53:04 +00:00 | 122 commits to main since this release

    Fixed

    • Drop the phantom Stack/bob healthCheck from platform-seanfarm-instances. bob.yaml has
      been commented out of the platform-seanfarm instances since 2026-06-11 (GCP roleset wedge);
      the healthCheck was inert only because wait: true supersedes healthChecks — a future
      wait: false edit would have wedged the rebuild gate on a nonexistent claim.

    Included changes (v0.1.89 -> v0.1.90)

    • 919f4a284c5e chore(flux): drop phantom Stack/bob healthCheck (bob removed 2026-06-11)
    • 99408f1c2390 chore(changelog): detangle header-stranded bullets into their dated releases
    Downloads
  • v0.1.89 833f47a112

    v0.1.89 Stable

    pipeline-bot released this 2026-07-23 15:29:29 +00:00 | 128 commits to main since this release

    Changed

    • Rehome the olly-backup CronWorkflow to the bare workflows ns (Track B). The
      sean/olly Forgejo→codeberg backup cron moved workflows-alice → workflows alongside the
      28 XGitMirror backup crons (B0d). Prereqs (build-pipeline SA, codeberg-creds,
      forgejo-admin-token) all exist in workflows. olly-argocd KS is prune:false, so the
      old alice-ns copy needs a one-off manual delete.

    Included changes (v0.1.88 -> v0.1.89)

    • a68f3dfa2703 chore(olly-argocd): rehome olly-backup cron to bare 'workflows' ns (Track B)
    Downloads
  • v0.1.88 1ee359dc3f

    v0.1.88 Stable

    pipeline-bot released this 2026-07-23 14:24:31 +00:00 | 132 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.87 -> v0.1.88)

    • 9a31499718d6 chore(openbao): pin operator source v0.12.24
    Downloads
  • v0.1.87 02d2fb5587

    v0.1.87 Stable

    pipeline-bot released this 2026-07-23 13:44:11 +00:00 | 136 commits to main since this release

    Changed

    • Incremental release.

    Included changes (v0.1.86 -> v0.1.87)

    • 86571ecc965f cnpg(p6): point database-bob reconcile check at ns cnpg (decoy tidy)
    Downloads