kacerr/gatewayapi-certificates-operator
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: gate the image build on vet/build/test, push sha tags, protect latest

Browse Source 
- check job runs go vet, go build and go test -short before the build
- images are pushed as :<tag> and :sha-<12>; :latest moves only on tag pushes
- GIT_COMMIT build arg and OCI source/created labels

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
kacerr
2026-10-08 20:36:22 +02:00
co-authored by Claude Opus 5.5
parent ab408403bc
commit 8c074288c6
3 changed files with 65 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files
CLAUDE.md
+4 -1
View File
@@ -209,7 +209,10 @@ Gitea Actions, workflows in `.gitea/workflows/`:
- `build.yaml` builds the image and pushes it to
`gitea.home.hrajfrisbee.cz/kacerr/gatewayapi-certificates-operator` on any tag push
or manual dispatch. Needs the `REGISTRY_TOKEN` repo secret.
or manual dispatch with a `tag` input. A `check` job (`go vet`, `go build`,
`go test -short`) gates the build. Every build pushes `:<tag>` and an immutable
`:sha-<12-char-commit>`; `:latest` moves only on real tag pushes. Needs the
`REGISTRY_TOKEN` repo secret.
- `kubernetes-deploy.yaml` applies `deploy/` to the home-lab cluster through a
Vault → Kanidm → OIDC auth chain.