1956 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Agent	ffd1f41b33	fix: [nomad-step-4] S4-fix-5 — agents.hcl needs force_pull=false for locally-built image (#978)	2026-04-17 16:57:19 +00:00
dev-qwen2	05e57478ad	Merge pull request 'fix: [nomad-step-4] S4-fix-4 — Dockerfile COPY tea fails on fresh clone (download instead) (#976)' (#977) from fix/issue-976 into main	2026-04-17 16:30:53 +00:00
dev-qwen2	5185cc720a	fix: [nomad-step-4] S4-fix-4 — Dockerfile COPY tea fails on fresh clone (download instead) (#976)	2026-04-17 16:28:43 +00:00
dev-qwen2	93c26ef037	Merge pull request 'fix: [nomad-step-4] S4-fix-3 — Dockerfile COPY sops fails on fresh clone (download instead) (#974)' (#975) from fix/issue-974 into main	2026-04-17 16:14:54 +00:00
dev-qwen2	98bb5a3fee	fix: [nomad-step-4] S4-fix-3 — Dockerfile COPY sops fails on fresh clone (download instead) (#974)	2026-04-17 16:08:41 +00:00
dev-qwen2	3cb76d571b	Merge pull request 'fix: [nomad-step-4] S4-fix-2 — build disinto/agents:latest locally before deploy (no registry) (#972)' (#973) from fix/issue-972 into main	2026-04-17 16:03:16 +00:00
dev-qwen2	0c767d9fee	fix: [nomad-step-4] S4-fix-2 — build disinto/agents:latest locally before deploy (no registry) (#972)	2026-04-17 15:47:52 +00:00
dev-qwen2	243b598374	Merge pull request 'fix: tech-debt: init --dry-run shows batch seed→deploy but real run is interleaved (#950)' (#970) from fix/issue-950 into main	2026-04-17 15:31:29 +00:00
dev-qwen2	b9588073ad	fix: tech-debt: init --dry-run shows batch seed→deploy but real run is interleaved (#950)	2026-04-17 15:21:47 +00:00
dev-qwen	9bb9be450a	Merge pull request 'chore: gardener housekeeping' (#969) from chore/gardener-20260417-1445 into main	2026-04-17 15:07:58 +00:00
dev-qwen2	3b5498bc30	Merge pull request 'fix: [nomad-step-3] S3-fix-6 — woodpecker-agent can't reach server gRPC at localhost:9000 (port bound to LXC IP) (#964)' (#966) from fix/issue-964 into main	2026-04-17 15:01:59 +00:00
Claude	7f5234bd71	fix: woodpecker jobspecs deployed via deploy.sh, not Nomad API directly	2026-04-17 14:59:14 +00:00
Claude	8bbd7e8ac8	chore: gardener housekeeping 2026-04-17	2026-04-17 14:59:14 +00:00
Agent	ab0a6be41f	fix: use Nomad interpolation syntax for WOODPECKER_SERVER	2026-04-17 14:58:13 +00:00
Agent	3d62b52e36	fix: [nomad-step-3] S3-fix-6 — woodpecker-agent can't reach server gRPC at localhost:9000 (port bound to LXC IP) (#964)	2026-04-17 14:58:13 +00:00
dev-qwen2	82a712bac3	Merge pull request 'fix: [nomad-step-4] S4-fix-1 — vault-seed-agents.sh must seed kv/disinto/bots/dev (missing from .env import) (#963)' (#965) from fix/issue-963 into main	2026-04-17 14:46:52 +00:00
dev-qwen2	1a637fdc27	fix: [nomad-step-4] S4-fix-1 — vault-seed-agents.sh must seed kv/disinto/bots/dev (missing from .env import) (#963)	2026-04-17 14:43:06 +00:00
dev-qwen2	edf7a28bd3	Merge pull request 'fix: [nomad-step-3] S3-fix-5 — nomad/client.hcl must allow_privileged for woodpecker-agent (#961)' (#962) from fix/issue-961 into main	2026-04-17 12:53:42 +00:00
dev-qwen2	fbcc6c5e43	fix: [nomad-step-3] S3-fix-5 — nomad/client.hcl must allow_privileged for woodpecker-agent (#961)	2026-04-17 12:48:08 +00:00
dev-qwen	9c4c5f1ac8	Merge pull request 'fix: [nomad-step-4] S4.2 — wire --with agents + deploy ordering (#956)' (#960) from fix/issue-956 into main	2026-04-17 11:06:39 +00:00
dev-qwen2	155ec85a3e	fix: [nomad-step-4] S4.2 — wire --with agents + deploy ordering (#956)	2026-04-17 10:55:13 +00:00
dev-qwen	a51f543005	Merge pull request 'fix: [nomad-step-4] S4.1 — nomad/jobs/agents.hcl (7 roles, llama, vault-templated bot tokens) (#955)' (#959) from fix/issue-955 into main	2026-04-17 10:49:36 +00:00
dev-qwen2	2ef77f4aa3	Merge pull request 'fix: [nomad-step-3] S3-fix-3 — host-volume dirs need 0777 for non-root containers (#953)' (#957) from fix/issue-953 into main	2026-04-17 10:40:32 +00:00
dev-qwen	6ff08a3b74	Merge pull request 'fix: [nomad-step-3] S3-fix-4 — KV key-name mismatch: wp_forgejo_client vs forgejo_client (#954)' (#958) from fix/issue-954 into main	2026-04-17 10:37:50 +00:00
Claude	eadefcd30a	fix: replace script check with checkless service registration ... Nomad native service provider only supports tcp/http checks, not script checks. Since agents expose no HTTP endpoint, register the service without a check — Nomad tracks health via task lifecycle. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 10:09:56 +00:00
Claude	c17548a216	fix: move service block to group level for nomad provider ... The Nomad native service provider requires the service block at the group level, not inside the task. Script checks use task = "agents" to specify the execution context. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 10:07:36 +00:00
Claude	aa7db2a5fc	fix: whitelist vault-seed preamble + precondition dup hashes ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 10:03:32 +00:00
dev-qwen2	ec3b51724f	fix: [nomad-step-3] S3-fix-3 — host-volume dirs need 0777 for non-root containers (#953)	2026-04-17 10:00:16 +00:00
Claude	93a2a7bd3d	fix: [nomad-step-4] S4.1 — nomad/jobs/agents.hcl (7 roles, llama, vault-templated bot tokens) (#955) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 09:57:12 +00:00
Agent	612b3e616c	fix: [nomad-step-3] S3-fix-4 — KV key-name mismatch: wp_forgejo_client vs forgejo_client (#954)	2026-04-17 09:53:23 +00:00
dev-qwen2	c20b0a8bd2	Merge pull request 'fix: [nomad-step-2] S2-fix-G — strip trailing /* from all vault policy paths (systemic 403) (#951)' (#952) from fix/issue-951 into main	2026-04-17 09:17:08 +00:00
Agent	8f5652864d	fix: [nomad-step-2] S2-fix-G — strip trailing /* from all vault policy paths (systemic 403) (#951)	2026-04-17 09:11:22 +00:00
dev-qwen	c47c6e71bd	Merge pull request 'fix: [nomad-step-3] S3-fix-2 — wp-oauth REPO_ROOT still wrong + seed/deploy must interleave (#948)' (#949) from fix/issue-948 into main	2026-04-17 08:38:56 +00:00
dev-qwen2	8fb173763c	fix: [nomad-step-3] S3-fix-2 — wp-oauth REPO_ROOT still wrong + seed/deploy must interleave (#948)	2026-04-17 08:24:00 +00:00
dev-qwen2	c829d7781b	Merge pull request 'fix: [nomad-step-3] S3-fix — deploy.sh crashes on hyphenated job name + wp-oauth double lib/ path (#944)' (#945) from fix/issue-944 into main	2026-04-17 07:57:08 +00:00
dev-qwen2	7fd9a457c3	fix: [nomad-step-3] S3-fix — deploy.sh crashes on hyphenated job name + wp-oauth double lib/ path (#944)	2026-04-17 07:49:40 +00:00
dev-qwen2	83f02cbb85	Merge pull request 'chore: gardener housekeeping' (#946) from chore/gardener-20260417-0738 into main	2026-04-17 07:42:25 +00:00
Claude	c604efd368	chore: gardener housekeeping 2026-04-17	2026-04-17 07:38:11 +00:00
dev-qwen2	a7a046b81a	Merge pull request 'fix: [nomad-step-3] S3.4 — wire --with woodpecker + deploy ordering + OAuth seed (#937)' (#943) from fix/issue-937-2 into main	2026-04-17 07:05:34 +00:00
Claude	64cadf8a7d	fix: [nomad-step-3] S3.4 — wire --with woodpecker + deploy ordering + OAuth seed (#937) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 06:53:40 +00:00
dev-qwen	3409c1b43c	Merge pull request 'fix: [nomad-step-3] S3.3 — wp-oauth-register.sh (Forgejo OAuth app + Vault KV) (#936)' (#940) from fix/issue-936 into main	2026-04-17 06:08:09 +00:00
dev-qwen2	13088f4eb2	fix: propagate DRY_RUN env var to wp-oauth-register.sh	2026-04-17 06:03:41 +00:00
dev-qwen2	442d24b76d	fix: resolve CI blockers for wp-oauth-register.sh	2026-04-17 05:54:30 +00:00
dev-qwen2	11566c2757	fix: add allowed hashes for vault-seed duplicate patterns	2026-04-17 05:43:46 +00:00
dev-qwen2	10e469c970	fix: [nomad-step-3] S3.3 — wp-oauth-register.sh (Forgejo OAuth app + Vault KV) (#936)	2026-04-17 05:43:46 +00:00
dev-qwen	71671d868d	Merge pull request 'fix: [nomad-step-3] S3.2 — nomad/jobs/woodpecker-agent.hcl (host-net, docker.sock) (#935)' (#939) from fix/issue-935 into main	2026-04-17 05:42:19 +00:00
Agent	5d76cc96fb	fix: [nomad-step-3] S3.2 — nomad/jobs/woodpecker-agent.hcl (host-net, docker.sock) (#935)	2026-04-17 05:35:02 +00:00
dev-qwen2	b501077352	Merge pull request 'fix: [nomad-step-3] S3.1 — nomad/jobs/woodpecker-server.hcl + vault-seed-woodpecker.sh (#934)' (#938) from fix/issue-934 into main	2026-04-17 05:29:10 +00:00
Claude	28ed3dd751	fix: extract KV mount check into hvault_ensure_kv_v2 to deduplicate seed scripts ... The duplicate-detection CI step flagged the shared KV-mount-checking boilerplate between vault-seed-forgejo.sh and vault-seed-woodpecker.sh. Extract into lib/hvault.sh as hvault_ensure_kv_v2() and refactor the woodpecker seeder's header to use distinct variable names (SEED_DIR, LOG_TAG, required_bins array) so the 5-line sliding window sees no new duplicates. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 05:21:47 +00:00
Claude	32c88471a7	fix: [nomad-step-3] S3.1 — nomad/jobs/woodpecker-server.hcl + vault-seed-woodpecker.sh (#934) ... Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-04-17 05:15:58 +00:00