wooo/awoooi
1
1
Fork 0
Code Issues 2 Pull Requests 1 Actions 2 Packages Projects Releases Wiki Activity
484 Commits 203 Branches 2 Tags
77d0fe784fa3fbb2bc7577faabbcdcd022c1d55e
Commit Graph

18 Commits

Author SHA1 Message Date
OG T
7ac654390c fix(cd): 改用 sudoers NOPASSWD (完全移除密碼)
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 3m39s
Details
E2E Health Check / e2e-health (push) Successful in 15s
Details 
2026-03-30 ogt: 更安全的方案

- 已在 192.168.0.121 設定 sudoers NOPASSWD
- /etc/sudoers.d/kubectl-deploy
- 完全移除 SUDO_PASSWORD 環境變數

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-03-30 01:34:02 +08:00
OG T
1cec655168 fix(security): P0 移除 sudo 密碼明文 
2026-03-30 ogt: 首席架構師審查 P0 修復

問題: cd.yaml 含明文 sudo 密碼
修復: 改用 ${{ secrets.SUDO_PASSWORD }}

⚠️ 需要在 Gitea 設定 SUDO_PASSWORD secret!

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-03-30 01:30:49 +08:00
OG T
71d6b332ff fix(cd): NEXT_PUBLIC_API_URL 改用公網域名
Some checks failed
E2E Health Check / e2e-health (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details 
問題:
- CD 建置時使用 http://192.168.0.125:32334 (內網 VIP)
- NEXT_PUBLIC_* 是 build-time 變數，寫死到 Docker Image
- 導致瀏覽器「存取區域網路上的其他裝置」權限對話框

永久修復:
- 改為 https://awoooi.wooo.work (公網域名)
- 符合 feedback_sentry_local_network.md 規範

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-03-30 01:26:34 +08:00
OG T
3b0b49845e ci(gitea): CD 佇列模式 - 等待前一個 run 完成
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 3m44s
Details
E2E Health Check / e2e-health (push) Successful in 15s
Details 
新增 concurrency 設定:
- group: cd-deploy-${{ github.ref }}
- cancel-in-progress: false

避免多個 CD 同時執行造成資源競爭

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-03-30 01:21:53 +08:00
OG T
5b256a1236 fix(ci): change curl to fail on error (-fS) for telegram notification
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 11s
Details
E2E Health Check / e2e-health (push) Successful in 15s
Details
2026-03-30 00:17:43 +08:00
OG T
76c7cafaa2 fix(ci): add awoooi-worker deployment to k8s deploy step
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 3m38s
Details
E2E Health Check / e2e-health (push) Successful in 16s
Details
2026-03-30 00:08:39 +08:00
OG T
e802600482 feat(ci): add telegram notifications for pipeline nodes
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 3m37s
Details
E2E Health Check / e2e-health (push) Successful in 18s
Details
2026-03-29 23:43:38 +08:00
OG T
c9b7e0f6cf fix(ci): fix k8s deployment container names
All checks were successful
CD Pipeline / build-and-deploy (push) Successful in 3m34s
Details
E2E Health Check / e2e-health (push) Successful in 17s
Details
2026-03-29 23:28:20 +08:00
OG T
97f9df28f2 fix(ci): run deploy and healthcheck on k8s node via ssh with sudo credentials
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 2m56s
Details
E2E Health Check / e2e-health (push) Successful in 19s
Details
2026-03-29 23:20:24 +08:00
OG T
84d52d5d5e fix(ci): provide ssh private key to runner for k8s deployment
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 2m53s
Details
E2E Health Check / e2e-health (push) Successful in 19s
Details
2026-03-29 23:09:50 +08:00
OG T
333c79fa93 chore(ci): retry cd pipeline
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 3m24s
Details
E2E Health Check / e2e-health (push) Successful in 21s
Details
2026-03-29 23:00:29 +08:00
OG T
e0d8017616 fix(ci): replace buildkit with standard docker build for http registry auth and only push to gitea
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 11s
Details
E2E Health Check / e2e-health (push) Successful in 18s
Details
2026-03-29 22:55:28 +08:00
OG T
482033d48c fix(ci): allow insecure http registry for harbor in buildx
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 1m13s
Details
E2E Health Check / e2e-health (push) Successful in 17s
Details
2026-03-29 22:50:06 +08:00
OG T
038ca67009 fix(ci): 修正 docker build context 以支援 monorepo 編譯
Some checks failed
E2E Health Check / e2e-health (push) Has been cancelled
Details
CD Pipeline / build-and-deploy (push) Has been cancelled
Details
2026-03-29 22:46:35 +08:00
OG T
9535e8b03a fix(ci): update cd.yaml triggers to ensure execution
Some checks failed
CD Pipeline / build-and-deploy (push) Failing after 27s
Details
E2E Health Check / e2e-health (push) Successful in 16s
Details
2026-03-29 22:40:31 +08:00
OG T
c96923f518 fix(ci): 在 runner 中安裝 curl 解決 health check HTTP 000 問題
All checks were successful
E2E Health Check / e2e-health (push) Successful in 17s
Details
2026-03-29 22:36:04 +08:00
OG T
68438da2a2 feat(ci): CD Pipeline with Harbor Registry Cache + Mirror 加速
Some checks failed
E2E Health Check / e2e-health (push) Failing after 11s
Details 
Changes:
- 加入 cache-from/cache-to (Harbor registry cache) 加速 Layer 重用
- 加入 HARBOR_MIRROR 環境變數 (192.168.0.110:5001 for DockerHub proxy)
- BUILDKIT_INLINE_CACHE=1 啟用 inline cache
- Health Check 改為 3 次重試，避免因冷啟動失敗
- 整理 env block 統一管理 registry URL

ADR-039: Gitea CI/CD 遷移
 2026-03-29 22:30:22 +08:00
OG T
d6b8224942 feat(cicd): ADR-039 Gitea CI/CD 遷移 
2026-03-29 Claude Code (統帥授權):
- 新增 .gitea/workflows/cd.yaml (Build → Harbor → K8s)
- 新增 .gitea/workflows/e2e-health.yaml (E2E 健康檢查)
- 新增 ADR-039 文檔記錄遷移決策

方案 B: GitHub → Gitea CI/CD 遷移
- Gitea 作為主倉和 CI/CD
- GitHub 降級為只讀備份

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
 2026-03-29 21:51:45 +08:00