3 Commits

Author SHA1 Message Date
Niklas Ye 295dc3a9ec Set the chart's placeholder version to 0.6.1
Release / image (push) Successful in 6m45s
CI / chart (push) Successful in 1s
CI / security (push) Successful in 1m32s
Release / chart (push) Successful in 1s
Release / scan-image (push) Successful in 36s
CI / test (push) Successful in 7m24s
Release / test (push) Successful in 1m36s
Cosmetic: make helm-package passes --version and --app-version from the tag,
so these fields decide nothing about what is published. They are kept in
step so the tree does not state an older number than the release it heads
for, as in 3036abf.

Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN
2026-10-22 09:35:04 +02:00
Niklas Ye 69e610a5c2 Scan and build with Go 1.26.10
govulncheck fails on GO-2026-6809, a crypto/x509 flaw in the standard
library that is fixed in 1.26.10. Move the workflows' golang image off 1.26.9
the way terdut-server did, so the scan and the shipped binary agree.

Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN
2026-10-21 22:07:54 +02:00
Niklas Ye 93d2a00a00 Pin the demo to terdut-server v0.48.0
v0.43.0 predates v0.47.2, which lets the instance service account list a
team's dead man's switches. Without it GET /api/teams/{id}/deadman/switches
404s for the operator's key, so a TerdutTeam never becomes ready against the
demo's server. The demo is meant to track the current release.

Claude-Session: https://claude.ai/code/session_016mBLURvJoMuUEr9cB2RpUN
2026-10-21 22:07:50 +02:00
4 changed files with 7 additions and 7 deletions
+2 -2
View File
@@ -55,7 +55,7 @@ jobs:
test:
runs-on: ubuntu-latest
container:
image: golang:1.26.9-bookworm
image: golang:1.26.10-bookworm
volumes:
- go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build
@@ -85,7 +85,7 @@ jobs:
security:
runs-on: ubuntu-latest
container:
image: golang:1.26.9-bookworm
image: golang:1.26.10-bookworm
volumes:
- go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build
+1 -1
View File
@@ -26,7 +26,7 @@ jobs:
test:
runs-on: ubuntu-latest
container:
image: golang:1.26.9-bookworm
image: golang:1.26.10-bookworm
volumes:
- go-mod-cache:/go/pkg/mod
- go-build-cache:/root/.cache/go-build
+2 -2
View File
@@ -6,8 +6,8 @@ type: application
# These fields decide nothing: `make helm-package` passes --version and
# --app-version from the release tag (same reasoning as terdut-server's own
# chart). They're for whoever reads the tree before a tag exists.
version: 0.6.0
appVersion: "v0.6.0"
version: 0.6.1
appVersion: "v0.6.1"
keywords:
- kubernetes
+2 -2
View File
@@ -15,7 +15,7 @@ spec:
image:
repository: git.ryuvia.com/niklas/terdut-server
# v0.36.0 is the floor now that replicas below is 2 (this demo pins
# the current release, v0.43.0, so it shows the current web UI too): that
# the current release, v0.48.0, so it shows the current web UI too): that
# release put the sweeper, the notifier and the migration runner each
# behind a Postgres advisory lock, and gave incident creation its own
# conflict resolution, which is what makes a second replica safe
@@ -24,7 +24,7 @@ spec:
# can adopt/rotate a key on a team-scoped account it didn't just create
# in the same call -- without which terdutteam-* can wedge permanently
# on the crash-window race this demo hit live, niklas/terdut-operator#3.)
tag: v0.43.0
tag: v0.48.0
# Matches this CRD's own spec.replicas default (v0.4.0) -- stated
# explicitly, like every other field in this file, rather than left to
# the default. RollingUpdate follows automatically; this operator does