Haitao Pan
97e7a4a3bb
chore(ci): trigger pipeline for ssh verify wrapper changes
2026-04-13 08:44:40 +08:00
Haitao Pan
107e9879a6
Validate releases over SSH origin
2026-04-12 19:15:18 +08:00
Haitao Pan
0c6ed2a0c4
Decouple console DNS sync from deploy validation
2026-04-12 19:05:23 +08:00
Haitao Pan
318f407222
Align console release verification with build image ref
2026-04-12 18:54:56 +08:00
Haitao Pan
c622d0b1d2
fix(ci): pin playbooks deploy revision
2026-04-12 18:51:48 +08:00
Haitao Pan
65a7555e18
ci: reconcile console deploy dns flow
2026-04-12 18:14:14 +08:00
Haitao Pan
d054b35116
Align frontend release contract across www and console domains
2026-04-12 17:55:14 +08:00
Haitao Pan
37c5788263
remove secondary console domain
2026-04-12 16:41:07 +08:00
Haitao Pan
b8cd175ecc
fix: tighten release validation flow
2026-04-12 16:17:50 +08:00
Haitao Pan
68102491e2
Extract console pipeline scripts
2026-04-12 15:42:02 +08:00
Haitao Pan
9c6cc4ade5
fix(ci): align deploy job with bridge workflow
2026-04-11 14:30:10 +08:00
Haitao Pan
9d3ae1e169
fix(ci): provide deploy ssh key
2026-04-11 14:28:54 +08:00
Haitao Pan
03df4c0c2b
fix(ci): use public playbooks repo
2026-04-11 13:59:00 +08:00
Haitao Pan
3d36f8dd30
Fix GitHub Actions policy pins
2026-04-11 11:23:59 +08:00
Haitao Pan
1ec1cbf9cc
Finalize deploy workflow env and playbook args
2026-04-11 10:31:09 +08:00
Haitao Pan
4a08ff360f
Simplify deploy playbook invocation
2026-04-11 10:13:47 +08:00
Haitao Pan
d6d891c809
Upgrade GitHub Actions runtime-compatible actions
2026-04-11 09:22:11 +08:00
Haitao Pan
bb693ce463
Fix GitHub Actions env references in pipeline
2026-04-11 09:11:47 +08:00
Haitao Pan
b84d0079a6
Align console deploy job with playbooks contract
2026-04-11 09:00:35 +08:00
Haitao Pan
a6fa674ca5
Refactor frontend release workflow into pipeline stages
2026-04-11 08:58:58 +08:00
Haitao Pan
2eb72e4aea
fix(ci): map cloudflare dns token secret
2026-04-04 16:56:13 +08:00
Haitao Pan
69802dace7
refactor(ci): merge frontend publish workflow
2026-04-02 18:08:43 +08:00
Haitao Pan
fa64d666b8
fix(ci): remove blocked marketplace actions
2026-04-02 18:06:18 +08:00
Haitao Pan
484734352d
add workflows: build-push-ghcr-images
2026-04-02 17:44:29 +08:00
Haitao Pan
343a93864f
ci(frontend): publish console image to ghcr
2026-04-01 16:20:41 +08:00
Haitao Pan
634614340a
move workflows -> cloud-neutral-toolkit org repo
2026-03-19 09:18:45 +08:00
Haitao Pan
2810be58af
fix(ci): read single-node ssh key from org secret
2026-03-19 08:37:42 +08:00
Haitao Pan
8a5d6af1d7
refactor(ci): rename single-node ssh key env
2026-03-19 08:24:25 +08:00
Haitao Pan
8c9c83c845
refactor(ci): matrix frontend dns updates
2026-03-19 08:04:00 +08:00
Haitao Pan
1708a233e9
refactor(ci): rename cloudflare dns token
2026-03-19 07:50:25 +08:00
Haitao Pan
c36e65de49
fix(ci): use svc-design for frontend ghcr auth
2026-03-19 07:42:27 +08:00
Haitao Pan
cdcb9c1455
feat(ci): rebuild frontend release workflow
2026-03-19 00:19:41 +08:00
Haitao Pan
122d1186ad
clean all old pipelines
2026-03-19 00:12:14 +08:00
Haitao Pan
b5bec9722d
chore(ci): use verified build push action
2026-03-19 00:05:30 +08:00
Haitao Pan
34231e29ed
merge console frontend release
2026-03-18 23:59:17 +08:00
Haitao Pan
5a90b8e95f
update
2026-03-18 23:56:38 +08:00
Haitao Pan
04fabe7ee3
chore(ci): compute frontend metadata via script
2026-03-18 23:53:04 +08:00
Haitao Pan
896a1fb711
chore(ci): pin GH actions to shas
2026-03-18 23:51:51 +08:00
9190e60d13
Update service_release_frontend-deploy.yml
2026-03-18 23:49:42 +08:00
Haitao Pan
b66caaed3d
chore(ci): wrap docker actions for policy
2026-03-18 23:46:07 +08:00
Haitao Pan
58fbf7e8bd
chore(ci): compute frontend metadata via script
2026-03-18 23:32:26 +08:00
Haitao Pan
a8f7b00efa
chore(ci): pin GH actions to shas
2026-03-18 23:26:35 +08:00
Haitao Pan
fea1ab6640
feat(console): add single-node frontend release flow
2026-03-18 22:54:44 +08:00
Haitao Pan
3f4f7d9c92
refactor(ci): extract workflow scripts
2026-03-18 16:37:21 +08:00
Haitao Pan
e2c0cb8fd5
ci: default GHCR namespace to github.repository_owner
2025-12-24 12:43:53 +08:00
Haitao Pan
5997114ef9
fix(ci): stabilize GHCR multi-arch push by per-arch builds + manifest merge
...
- build per-arch images with unique temporary tags to avoid parallel tag contention
- generate multi-arch manifests via buildx imagetools for final tags
- copy multi-arch image to Docker Hub with skopeo instead of re-tagging a single arch
- keep existing security scan/signing and runtime mount validation flow
2025-12-24 10:34:29 +08:00
175f9e735a
Fix security job condition in build workflow
2025-12-23 18:11:50 +08:00
1b5842bae6
Fix security stage image availability
2025-12-23 18:05:15 +08:00
Haitao Pan
727d04e51e
Refactor build-images workflow pipeline
2025-12-23 17:03:03 +08:00
Haitao Pan
bbe939173a
ci: refactor build-images workflow with gated security and parallel push
2025-12-23 16:58:06 +08:00
