Commit Graph
10 Commits
Author SHA1 Message Date
kevinveenbirkenbach fbc8444e6f ci(e2e): serialize deploy pipeline server -> universal -> workstation
- Run deployment tests sequentially for focused E2E stabilization
- Make universal depend on server
- Make workstation depend on server and universal
- Keep image build as single entry point

https://chatgpt.com/share/6967e809-7df4-800f-a234-b40ead86626f
2026-01-14 20:01:25 +01:00
kevinveenbirkenbach 64f7a7d54d ci: serialize PR/push/scheduled/release runs via concurrency groups
Add top-level concurrency blocks to CI entry workflows (PR, push, schedule,
version) to avoid overlapping runs and reduce resource contention on runners.

Also refactor code-analyses workflow dependencies so deploy:workstation waits
for deploy:server to complete (prioritize server debugging), and do minor
whitespace/newline cleanups in web-opt-rdr-domains role files.

https://chatgpt.com/share/6967cff2-1584-800f-a2d3-1ef7a824f62f
2026-01-14 18:18:31 +01:00
kevinveenbirkenbach 83fd1d83f3 fix(ci): allow packages:write for reusable image build workflow
https://chatgpt.com/share/69662b40-6938-800f-8ab5-c85424e13db4
2026-01-13 12:25:15 +01:00
kevinveenbirkenbach 392d15107b ci(release): build CI images, retag on release, gate stable on tests
- Add reusable build-ci-images workflow to build and push ci-<sha> images for all distros
- Make all deploy test workflows use prebuilt CI images (no local rebuilds)
- Replace ci-version workflow with release workflow
- Retag ci images to <version> and latest on tag push (no rebuild)
- Move stable git tag only if all analyses/tests succeed and version is highest
- Make compose image/pull policy configurable via env

https://chatgpt.com/share/69662869-ee1c-800f-9e6c-bbbf47284fad
2026-01-13 12:11:33 +01:00
kevinveenbirkenbach 142948a02f Added missing universal workflow 2026-01-13 05:43:53 +01:00
kevinveenbirkenbach 9e7d974f54 Removed test-deploy-workstation 2025-12-29 22:27:51 +01:00
kevinveenbirkenbach eee65b6c5d fix(ci): repair reusable workflow by renaming aggregator job
https://chatgpt.com/share/6943c243-33dc-800f-ab7c-794efbc5e4b3
2025-12-18 09:58:29 +01:00
kevinveenbirkenbach 653d56b4a4 fix(ci): allow SARIF uploads in reusable workflows
Grant security-events: write to CI callers and code-analyses, and drop unnecessary actions permission from Docker lint job to fix reusable workflow permission errors.

https://chatgpt.com/share/6943c031-bc04-800f-ae09-4ac1f9ff48c9
2025-12-18 09:49:48 +01:00
kevinveenbirkenbach d28e63bdf0 chore(ci): set explicit workflow permissions for GITHUB_TOKEN
https://chatgpt.com/share/6943bd97-5324-800f-94e2-68d25a45d03a
2025-12-18 09:39:07 +01:00
kevinveenbirkenbach af032d1801 ci: introduce reusable code-analyses pipeline and orchestrators
- Add reusable code-analyses workflow (workflow_call + dispatch)
- Split CI triggers into push, PR, schedule, and version orchestrators
- Remove duplicate triggers from reusable workflows
- Rename and align workflows for clearer CI structure

https://chatgpt.com/share/6943b12d-2c84-800f-b63d-68e4d1db6d0a
2025-12-18 09:30:28 +01:00