This commit is contained in:
+6
-5
@@ -175,17 +175,18 @@ Kubernetes/SWS provides static hosting for the published Packwiz repositories.
|
||||
The publishing workflow runs [`scripts/build-site.sh`](../scripts/build-site.sh),
|
||||
which exports committed Git revisions into the documented URL layout, then
|
||||
builds the multi-architecture image
|
||||
`tea.ahmza.com/ahmza/mcpacks-site`.
|
||||
`tea.ahmza.com/ahmza.com/mcpacks-site`.
|
||||
|
||||
The workflow finally commits that image's immutable OCI digest to
|
||||
`apps/mcpacks/deployment.yaml` in the `ahmza/k8s-starter-pack` repository.
|
||||
`apps/mcpacks/deployment.yaml` in the `ahmza.com/k8s-starter-pack` repository.
|
||||
Argo CD notices that commit and performs the rollout; the workflow does not
|
||||
hold Kubernetes credentials or change the cluster directly.
|
||||
|
||||
The Gitea Actions repository secret `GITEATOKEN` must be able to:
|
||||
The Gitea Actions repository secret `GITEATOKEN` must belong to `ci-bot`
|
||||
and be able to:
|
||||
|
||||
- push packages owned by `ahmza`
|
||||
- read and write `ahmza/k8s-starter-pack`
|
||||
- push packages owned by the `ahmza.com` organization
|
||||
- read and write `ahmza.com/k8s-starter-pack`
|
||||
|
||||
The `latest` image tag exists only to bootstrap the first Argo CD sync and for
|
||||
human inspection. Normal rollouts use the exact content digest recorded in the
|
||||
|
||||
Reference in New Issue
Block a user