Merge remote-tracking branch 'gitea/main' into codex/p0-obs-002-credential-20260722
Some checks failed
CD Pipeline / select-latest-carrier (push) Successful in 58s
CD Pipeline / workflow-shape (push) Successful in 0s
CD Pipeline / cancel-stale-cd (push) Has been skipped
CD Pipeline / revalidate-deploy-carrier (push) Has been cancelled
CD Pipeline / build-and-deploy (push) Has been cancelled
CD Pipeline / revalidate-post-deploy-carrier (push) Has been cancelled
CD Pipeline / post-deploy-checks (push) Has been cancelled
CD Pipeline / tests (push) Has been cancelled

This commit is contained in:
Your Name
2026-07-22 16:40:36 +08:00
4 changed files with 6 additions and 6 deletions

View File

@@ -157,12 +157,12 @@ spec:
- name: AWOOOI_BUILD_COMMIT_SHA
# 2026-06-29 Codex: CD rewrites this to the deployed image tag so
# production deploy readback does not rely on a stale static snapshot.
value: "521fb7e3ac6f91ba5ffa33b0a6a027be28d8059e"
value: "18b5ba25fa9c6aeaeb66260efe937ee79fe461b8"
- name: AWOOOI_DESIRED_API_IMAGE_TAG
# 2026-06-30 Codex: CD rewrites this alongside AWOOOI_BUILD_COMMIT_SHA.
# Production readback compares runtime image truth against this
# GitOps desired tag instead of doing a slow Gitea raw fetch.
value: "521fb7e3ac6f91ba5ffa33b0a6a027be28d8059e"
value: "18b5ba25fa9c6aeaeb66260efe937ee79fe461b8"
- name: DATABASE_POOL_SIZE
# 2026-07-01 Codex: production role `awoooi` currently has a low
# connection limit. Keep API pool conservative until DB role

View File

@@ -66,7 +66,7 @@ spec:
- name: DATABASE_NULL_POOL
value: "true"
- name: AWOOOI_BUILD_COMMIT_SHA
value: "521fb7e3ac6f91ba5ffa33b0a6a027be28d8059e"
value: "18b5ba25fa9c6aeaeb66260efe937ee79fe461b8"
- name: ENABLE_AWOOOP_ANSIBLE_CANDIDATE_BACKFILL_WORKER
value: "false"
- name: ENABLE_AWOOOP_ANSIBLE_CHECK_MODE_WORKER

View File

@@ -178,7 +178,7 @@ spec:
- name: DATABASE_BOOTSTRAP_DDL_ENABLED
value: "false"
- name: AWOOOI_BUILD_COMMIT_SHA
value: "521fb7e3ac6f91ba5ffa33b0a6a027be28d8059e"
value: "18b5ba25fa9c6aeaeb66260efe937ee79fe461b8"
- name: ENABLE_AWOOOP_ANSIBLE_CANDIDATE_BACKFILL_WORKER
value: "true"
- name: ENABLE_SECURITY_CONTROL_PLANE_MAINTENANCE_WORKER

View File

@@ -40,9 +40,9 @@ resources:
# ⚠️ 重要: name 必須與 deployment YAML 中的 image 完全匹配 (含 tag)
# newName + newTag 由 CI 透過 kustomize edit set image 注入
images:
- digest: sha256:640e8c5dca2af8ab0d3ac22ba34a90aa8e0f92f548e4ce71a938dbe61ef8b79a
- digest: sha256:08e5af922d5c971e247177e55a3cfe7ae533c5520eea17b3e1be5a9b5bc4387a
name: 192.168.0.110:5000/library/api:IMAGE_TAG_PLACEHOLDER
newName: 192.168.0.110:5000/awoooi/api
- digest: sha256:d2d57ed18a94e9d46552a4a2ffc6108f683f6a9b5ca8bcf749290975cf09d4c9
- digest: sha256:861f404d1e5c76a04133f23281ef0a67e7adaaa664f46383f3406a022ec5e1e7
name: 192.168.0.110:5000/library/web:IMAGE_TAG_PLACEHOLDER
newName: 192.168.0.110:5000/awoooi/web