armistace/beer_data
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Compare commits

base: armistace/beer_data:863cbb93dcfb181c8460d33e3499fcdfa2cc32fa
Branches Tags
armistace/beer_data:master armistace/beer_data:dev
..
compare: armistace/beer_data:687339bb9ef02bb49ab8bf52e28c6f7c23b164e0
Branches Tags
armistace/beer_data:master armistace/beer_data:dev
3 Commits
863cbb93dc .. 687339bb9e
Author SHA1 Message Date
hermes 687339bb9e fix(ci): self-heal a stale cluster CA in the deploy job
Build and Push Image / Unit tests (push) Successful in 55s
Details
Build and Push Image / Build and push image (push) Skipped
Details
Build and Push Image / Deploy to the cluster (push) Skipped
Details 
The deploy job failed on its first run:

    error: error validating "kube/beer_namespace.yaml": error validating
    data: failed to download openapi: Get "https://192.168.178.160:6443/openapi/v2":
    tls: failed to verify certificate: x509: certificate signed by unknown authority

This is the same class of problem as the buildx driver earlier: the
certificate-authority-data embedded in the kubeconfig secret does not match
the CA the API server is currently presenting.

Rather than requiring the secret to be regenerated by hand every time the
cluster's CA is rotated, the job now refreshes it:

- The API server publishes its own CA at `/cacerts`.
- If kubectl cannot verify the server, the job fetches that CA (over an
  insecure connection — verifying it is the problem being solved) and pins
  it explicitly with `kubectl config set-cluster`.
- It then retries, and fails with a clear message if that still does not
  work.

Verified by deliberately corrupting the CA in a working kubeconfig: the
failure reproduces exactly, and the recovery path restores connectivity
(`Server Version: v1.34.5+k3s1`).

The secret is also switched from `KUBEC_CONFIG_BUILDX` to
`KUBEC_CONFIG_BUILDX_NEW_2`, which is the one the working `wedding-photos`
workflow uses.
 2026-11-09 12:08:49 +10:00
hermes c28553a1b8 feat(ci): add the deploy job and the kubernetes manifests (#8)
Build and Push Image / Unit tests (push) Successful in 43s
Details
Build and Push Image / Build and push image (push) Successful in 1m22s
Details
Build and Push Image / Deploy to the cluster (push) Failing after 1m29s
Details 
feat(ci): add the deploy job and the kubernetes manifests (#8)
 2026-11-09 12:00:35 +10:00
hermes 0f93cbea70 fix: build the image on Python 3.14 (#7)
Build and Push Image / Unit tests (push) Successful in 1m14s
Details
Build and Push Image / Build and push image (push) Successful in 9m47s
Details 
fix: build the image on Python 3.14 (#7)
 2026-11-09 11:26:29 +10:00
Expand all files Collapse all files

Diff Content Not Available