Homelab/workflows
Homelab/workflows
Watch
5
0
Fork
You've already forked workflows
 0
Code Issues 7 Pull requests Projects Releases 95 Packages Wiki Activity Actions
95 releases 129 tags
  • v1.3.0 899fd7a643

    v1.3.0
    All checks were successful
    Repository security / security-1 (push) Successful in 1m48s
    Details
    Repository security / security (push) Successful in 0s
    Details
    Library checks / tests (push) Successful in 1m53s
    Details
    Stable

    gitchegumi released this 2026-09-05 17:30:10 -05:00 | 288 commits to main since this release

    v1.3.0 — Retained NFS PV provisioning

    Adds a reusable workflow for provisioning retained, prebound NFS PersistentVolumes before application deployment.

    Added

    • Preview mode with server-side dry-run validation and explicit create mode.
    • Protected-branch and approved-actor checks, source scanning, and strict Kubernetes schema validation before cluster access.
    • Provisioning receipts recording the source commit, manifest checksum, PV name, and result.
    • Scoped kubeconfig validation requiring embedded CA data, complete authentication, and matching context references.

    Storage safeguards

    Matching unbound PVs remain unchanged. Conflicting specifications, unexpected fields, unverified claim identities, and Bound/Released/Failed volumes stop for owner review. The workflow never patches, replaces, deletes, or rebinds storage.

    Provisioning uses the UDS-bundled Kubernetes client and requires no Cosign keys. It does not mount data or deploy applications.

    Adoption

    Pin both the reusable workflow reference and library_ref to v1.3.0. Configure the provisioning identity and caller settings, then run preview before create.

    Validation

    All 50 unit tests, workflow acceptance, repository security, and library integration checks passed.

    Downloads