• v1.6.0 941d22987e

    v1.6.0
    All checks were successful
    Repository security / security-1 (push) Successful in 1m23s
    Repository security / security (push) Successful in 0s
    Library checks / tests (push) Successful in 1m55s
    Stable

    gitchegumi released this 2026-09-09 10:30:05 -05:00 | 253 commits to main since this release

    Disposable DEV Namespace

    Automate disposable dev namespace recreation and remove dev’s availability as a prerequisite for production deployment.

    Features

    • Recreate the approved dev namespace and its deployment RoleBinding through Actions.
    • Check common permissions plus those for the selected environment, while retaining all forbidden-permission checks.
    • Allow production deployment when the dev namespace has been deleted.
    • Keep credential validation read-only.

    Reliability

    • Validate existing namespaces and bindings before use.
    • Stop deployment on conflicting bindings, terminating namespaces, denied access, or bootstrap failures.
    • Add independent permission inventories and end-to-end credential-path regression tests.
    • Verify credential cleanup when bootstrap or authorization fails.

    Upgrade requirements

    Install the platform bootstrap policies and permissions from Homelab/platform #31, then validate admission enforcement before updating caller pins to v1.6.0.

    No new OpenBao role or stored deployment credentials are required. Disposable namespace recreation remains subject to live acceptance testing.

    Includes Homelab/workflows #31.

    Downloads