ad3637303f
- gitea-push eventsource (:12000/push) + gitea-deploy sensor (filter ref main/master -> submit fxhnt-cockpit, commit-sha from body.after). Pods NOT part-of:foxhunt (stay default-allow, matching working workflow-trigger pattern). - gitea netpol: egress 12000 namespace-wide (eventsource not part-of -> can't target by label) - gitea values: webhook.ALLOWED_HOST_LIST=private (Gitea blocked delivery to in-cluster 10.32.x) Verified: push to fxhnt master auto-fires a cockpit build+deploy. Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
57 lines
1.7 KiB
YAML
57 lines
1.7 KiB
YAML
# On push to fxhnt main/master in Gitea, submit the fxhnt-cockpit build+deploy workflow (Phase 2B).
|
|
# Gitea push payload: { "ref": "refs/heads/main", "after": "<new-sha>", ... }
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Sensor
|
|
metadata:
|
|
name: gitea-deploy
|
|
namespace: foxhunt
|
|
labels:
|
|
app.kubernetes.io/name: gitea-deploy
|
|
app.kubernetes.io/part-of: foxhunt
|
|
spec:
|
|
template:
|
|
# pod intentionally NOT part-of:foxhunt (avoids default-deny-all; matches working sensors)
|
|
serviceAccountName: argo-workflow
|
|
nodeSelector:
|
|
k8s.scaleway.com/pool-name: platform
|
|
dependencies:
|
|
- name: gitea-push-dep
|
|
eventSourceName: gitea-push
|
|
eventName: push
|
|
filters:
|
|
data:
|
|
- path: body.ref
|
|
type: string
|
|
value:
|
|
- "refs/heads/main"
|
|
- "refs/heads/master"
|
|
triggers:
|
|
- template:
|
|
name: deploy-cockpit
|
|
conditions: gitea-push-dep
|
|
argoWorkflow:
|
|
operation: submit
|
|
source:
|
|
resource:
|
|
apiVersion: argoproj.io/v1alpha1
|
|
kind: Workflow
|
|
metadata:
|
|
generateName: fxhnt-cockpit-
|
|
namespace: foxhunt
|
|
spec:
|
|
serviceAccountName: argo-workflow
|
|
podGC:
|
|
strategy: OnPodCompletion
|
|
ttlStrategy:
|
|
secondsAfterCompletion: 3600
|
|
workflowTemplateRef:
|
|
name: fxhnt-cockpit
|
|
arguments:
|
|
parameters:
|
|
- name: commit-sha
|
|
parameters:
|
|
- src:
|
|
dependencyName: gitea-push-dep
|
|
dataKey: body.after
|
|
dest: spec.arguments.parameters.0.value
|