Homelab/workflows
Homelab/workflows
Watch
5
0
Fork
You've already forked workflows
 0
Code Issues 7 Pull requests Projects Releases 95 Packages Wiki Activity Actions
95 releases 129 tags
  • v1.4.0 1f86bcfe3a

    v1.4.0
    All checks were successful
    Repository security / security-1 (push) Successful in 1m30s
    Details
    Repository security / security (push) Successful in 0s
    Details
    Library checks / tests (push) Successful in 1m48s
    Details
    Stable

    gitchegumi released this 2026-09-07 21:09:27 -05:00 | 267 commits to main since this release

    Automatic deployment credentials

    Adds automatic deployment credential issuance through Forgejo OpenID Connect and OpenBao, removing the need to manually refresh Kubernetes credentials for each deployment.

    Added

    • Optional OpenBao credential mode for reusable bundle deployments.
    • Inspection mode to review Forgejo identity claims without deploying.
    • Repository-specific permission contracts that verify required access and reject excessive permissions before deployment.
    • Documentation for configuring identity trust and onboarding applications.

    Security

    • Validates the issued service account and remaining credential lifetime.
    • Masks credentials, removes Forgejo identity-request credentials from the deployment subprocess, and revokes the OpenBao token after execution.
    • Fails explicitly when credential issuance or permission validation fails.

    Compatibility and adoption

    Existing kubeconfig-based deployments remain supported. OpenBao mode requires platform configuration and caller workflow updates.

    Environment selection and promotion of the same tested artifact from dev to prod remain follow-up work.

    Downloads