justme
8dd3209a65
Probes connect to the panel directly and get the agent list as desired state. CI signs the image digest of agent and probe releases, the panel forwards the manifest, and a host updater verifies it with a local public key, pulls by digest and rolls back when the new version is unhealthy.
64 lines
1.5 KiB
YAML
64 lines
1.5 KiB
YAML
labels:
|
|
ci: domain-linux-native
|
|
platform: linux/amd64
|
|
|
|
clone:
|
|
- name: git
|
|
image: plugin-git
|
|
settings:
|
|
lfs: false
|
|
|
|
when:
|
|
- event: push
|
|
branch: main
|
|
evaluate: 'CI_COMMIT_MESSAGE contains "[CI]"'
|
|
|
|
concurrency: 1
|
|
|
|
steps:
|
|
- name: build-linux-amd64-backend
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
commands:
|
|
- bash ci/build-main-amd64.sh backend
|
|
depends_on: []
|
|
|
|
- name: build-linux-amd64-agent
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
RELEASE_API_URL: https://mo.oeo.one
|
|
RELEASE_SIGNING_KEY:
|
|
from_secret: release_signing_key
|
|
RELEASE_API_TOKEN:
|
|
from_secret: release_api_token
|
|
commands:
|
|
- bash ci/build-main-amd64.sh agent
|
|
depends_on: []
|
|
|
|
- name: build-linux-amd64-probe
|
|
image: bash
|
|
environment:
|
|
NUGET_PACKAGES: /home/justme/.nuget/packages
|
|
ZOT_REGISTRY: registry.oeo.one
|
|
ZOT_USERNAME: justme
|
|
ZOT_SECRET:
|
|
from_secret: zot_secret
|
|
RELEASE_API_URL: https://mo.oeo.one
|
|
RELEASE_SIGNING_KEY:
|
|
from_secret: release_signing_key
|
|
RELEASE_API_TOKEN:
|
|
from_secret: release_api_token
|
|
commands:
|
|
- bash ci/build-main-amd64.sh probe
|
|
depends_on: []
|