b2e6b6334c
fix: add buildkit registry mirrors to pull Docker Hub/GHCR through Harbor cache
2026-04-19 09:11:50 +00:00
d76c8ffe59
fix: use host network for buildkit driver to resolve registry.celestium.life
2026-04-19 09:10:03 +00:00
4ebf75134f
ci: clear proxy env in minio-bucket-init, capture seed pod logs on failure
2026-04-19 08:55:52 +00:00
0acb787892
feat: pull Woodpecker step images through Harbor dockerhub-cache
...
Only affects .woodpecker.yml (Gitea/local CI). Dockerfiles and
GitHub Actions workflow unchanged — external builds still pull
from Docker Hub directly.
2026-04-19 08:11:03 +00:00
98764dd3f3
fix: add Harbor registry login to Woodpecker build steps
2026-04-19 07:56:55 +00:00
911e42996b
fix: use HARBOR_USERNAME secret in CI, add idempotent Harbor API setup to deploy script
...
- GitHub Actions: login with secrets.HARBOR_USERNAME + HARBOR_PASSWORD
- deploy.sh step 7: creates stonks-oracle project, robot account, tag retention
- All API calls are idempotent (safe to re-run)
2026-04-19 07:45:58 +00:00
5be3ce2db9
feat: migrate CI/CD from GHCR to local Harbor registry
...
- Makefile: GHCR -> registry.celestium.life/stonks-oracle
- GitHub Actions: login to Harbor, use HARBOR_PASSWORD secret
- infra/k8s/*.yaml: all image refs -> registry.celestium.life
- inttest pipeline: remove GHCR pull secret (local registry, no auth)
- Steering docs: update registry/git endpoints
2026-04-19 07:34:28 +00:00
0f2cb41b29
ci: trigger after registry ingress fix
2026-04-19 07:26:45 +00:00
920fed735c
ci: trigger after registry ingress restore
2026-04-19 07:12:31 +00:00
c2372ccd1e
ci: add NO_PROXY to minio-bucket-init to bypass proxy for internal services
2026-04-19 07:02:27 +00:00
2d40d70975
ci: remove remaining ghcr-credentials from inttest seed/minio pod overrides
2026-04-19 06:45:46 +00:00
ebafe795c1
fix: bump seed pod timeout to 5m and add debug diagnostics on pipeline failures
2026-04-19 06:34:58 +00:00
19b63dd369
ci: migrate inttest images from GHCR to local registry, remove ghcr-credentials
2026-04-19 06:22:35 +00:00
e3e1531847
ci: add Docker Hub auth + proxy CA to inttest namespace, fix MinIO pull secret
2026-04-19 06:09:56 +00:00
f140f68c1a
ci: use logins setting for Docker Hub auth in buildkit (fixes 429 rate limit)
2026-04-19 05:58:37 +00:00
998d915b6e
ci: add Docker Hub auth to buildx steps to avoid rate limits
2026-04-19 05:52:10 +00:00
a73b40bf50
ci: add no_proxy with .celestium.life to all buildx steps for DinD proxy bypass
2026-04-19 05:40:34 +00:00
529dd2b0c8
ci: trigger pipeline
2026-04-19 05:30:47 +00:00
dad9b46fa2
ci: pre-create kargo-controller SA with Helm labels, fix JSON pod annotations, remove --wait from woodpecker helm
2026-04-19 05:28:09 +00:00
00a6485e70
ci: sync esnixi changes - CA download, dockerhub auth, local-path storage, proxy exclusions, pod annotations
2026-04-19 05:14:13 +00:00
dba79b1dae
ci: grant cluster-admin to default SA in woodpecker ns for inttest step pods
2026-04-19 04:52:24 +00:00
b38f4c4766
ci: use .local suffix in NO_PROXY to cover all cluster-internal traffic
2026-04-19 03:03:34 +00:00
9e39d59afa
ci: add woodpecker Kyverno proxy CA policy with NO_PROXY for gRPC
2026-04-19 03:00:06 +00:00
76dd58c1dc
ci: final pipeline fixes - kargo SA workaround, oauth2 flow, timeouts
2026-04-19 02:41:41 +00:00
cd4f84a949
ci: trigger with fixed webhook and oauth2
2026-04-19 02:06:18 +00:00
94054c0439
ci: trigger after oauth2 credential refresh
2026-04-19 02:05:33 +00:00
3069102f1b
ci: add frontend/.dockerignore to override root exclusions for dashboard build
2026-04-19 02:04:14 +00:00
8bee515bd4
ci: fix runmelast hanging, add proxy CA injection, clean SA/CRD leftovers on redeploy
2026-04-19 02:01:18 +00:00
47baacedf5
ci: use 192.168.42.1 as custom_dns for buildx to resolve registry via local DNS
2026-04-18 22:28:27 +00:00
039221ea52
ci: add no_cache to dashboard build to prevent stale layer issue
2026-04-18 22:19:29 +00:00
2406ee8e91
ci: make mirror-github step failure-tolerant, skip if no SSH key
2026-04-18 22:12:48 +00:00
4759c6bd41
ci: trigger pipeline with proper TLS registry
2026-04-18 22:10:22 +00:00
1b621861d3
ci: use registry.celestium.life with letsencrypt TLS for builds
2026-04-18 21:25:30 +00:00
d8738083b6
ci: use internal registry URL for builds (HTTP, no TLS timeout)
2026-04-18 21:16:37 +00:00
1607baba90
ci: persist live fixes to pipeline scripts - grpc addr, storage, remove netpol, webhook config
2026-04-18 21:14:51 +00:00
ee28db684f
ci: exclude tests/integration from unit test step (needs live cluster)
2026-04-18 21:05:16 +00:00
5f6d23888a
ci: fix lint errors across project, update ruff.toml per-file ignores
2026-04-18 21:02:28 +00:00
4d1894c652
ci: revert to python:3.12-slim for lint, ruff image has no shell
2026-04-18 20:58:39 +00:00
896cefbe07
ci: lint entire project, not just services/
2026-04-18 20:55:39 +00:00
2f27fdb8bf
ci: use official ruff image for faster lint step
2026-04-18 20:55:03 +00:00
b48b02f938
ci: retry with storage config restored
2026-04-18 20:53:05 +00:00
860a9bd7a4
ci: remove || true - test failures are regressions
2026-04-18 20:51:48 +00:00
ca173f3585
ci: add hypothesis dep and allow pre-existing test failures
2026-04-18 20:51:14 +00:00
586d856552
ci: test with fixed agent storage settings
2026-04-18 20:47:09 +00:00
91c75e3bd1
ci: retry with github_ssh_key secret added
2026-04-18 20:40:29 +00:00
d498b1c355
ci: fix woodpecker v3 syntax - secrets, when blocks
2026-04-18 20:37:06 +00:00
6a8ab5ec97
ci: test with privileged plugins enabled
2026-04-18 20:34:56 +00:00
a374864b88
ci: test fresh webhook token
2026-04-18 20:30:39 +00:00
14cf0f8714
ci: test webhook after gitea webhook config
2026-04-18 20:28:56 +00:00
b7a3f7c101
ci: add .woodpecker.yml pipeline file
2026-04-18 20:27:55 +00:00
Celes Renata