17 Commits

Author	SHA1	Message	Date
Andriy Oblivantsev	8e99fe7614	Add Trivy CVE scan, container registry docs, and update diagrams ... - Add Trivy vulnerability scan step to CI (HIGH/CRITICAL, warn-only) - Add Container Registry section to README with pull examples - Update architecture doc and HLD with crane + Trivy details Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:38:05 +00:00
Andriy Oblivantsev	bd723dbd05	Rename container package to flamingo-tech-test ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:30:33 +00:00
Andriy Oblivantsev	55d7345854	Fix CI: lowercase OCI reference and use REPO_TOKEN secret ... OCI spec requires lowercase repository names; eSlider was causing crane to reject the reference. Use secrets.REPO_TOKEN for registry authentication. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:25:43 +00:00
Andriy Oblivantsev	87ce0ec6ee	Fix CI: use owner-scoped registry path for crane copy ... Gitea OCI registry expects host/owner/package:tag format, not host/owner/repo/package:tag. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:24:12 +00:00
Andriy Oblivantsev	53da6fe547	Fix CI: use crane to mirror image (no Docker daemon in runner) ... The Gitea Actions runner container lacks Docker. Use crane (daemonless) to copy the upstream FleetDM image directly to the Gitea OCI registry. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:22:59 +00:00
Andriy Oblivantsev	6adc52830f	Fix CI: mirror upstream FleetDM image instead of docker build ... No Dockerfile exists — this is a Helm chart project. Mirror the upstream fleetdm/fleet image to the Gitea container registry, tagged with both appVersion and chart version. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:21:22 +00:00
Andriy Oblivantsev	e6176999c1	Add containerisation strategy details and CI image build step ... Expand architecture doc section 4.5 with image building process, container registry management, and deployment pipeline prose. Add Docker build & push to Gitea OCI registry in CI workflow. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 21:19:31 +00:00
Andriy Oblivantsev	a44aef5381	Simplify docs exclusion: use paths-ignore on push trigger ... Replace in-job file check with paths-ignore filter. Workflow won't trigger at all for docs-only changes. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 20:58:48 +00:00
Andriy Oblivantsev	4a278b1419	Fix CI checkout: use token auth for git clone ... Repo requires authentication; use gitea.token in clone URLs. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 20:56:50 +00:00
Andriy Oblivantsev	698c977511	Skip release for docs-only changes ... Semantic release now checks changed files and skips tag/publish when only docs, README, STATUS, AGENTS, or .gitignore are modified. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 20:54:42 +00:00
Andriy Oblivantsev	25d4610903	Fix release: use Gitea API directly instead of gitea-release-action ... The action requires Node 18+ (Headers API) but runner uses Node 16. Use curl against Gitea API for release creation and asset upload. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 20:02:43 +00:00
Andriy Oblivantsev	9c3caeef17	Add semantic release: auto-version on push to master ... - Patch bump for regular commits/fixes (0.1.0 → 0.1.1) - Major bump when merging feature/* branches (0.1.1 → 1.0.0) - Auto-tags, updates Chart.yaml version, packages and publishes Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 19:59:18 +00:00
Andriy Oblivantsev	2ee57f0093	Fix CI lint: remove head pipe that causes SIGPIPE exit 141 ... helm template piped to head -20 exits with 141 when head closes early. Redirect to /dev/null instead - lint result is what matters. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 19:43:04 +00:00
Andriy Oblivantsev	dddfd432a7	Fix Gitea Actions: replace actions/checkout with manual git clone ... Runner job containers cannot resolve internal 'gitea' hostname. Use public URL (git.produktor.io) for checkout instead. Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 19:42:20 +00:00
Andriy Oblivantsev	3ff3a30838	Fix Gitea workflow: remove path filter, add server_url for release ... Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 17:14:26 +00:00
Andriy Oblivantsev	b5c22e84ec	Configure Gitea Actions for Helm chart CI and release ... - Replace GitHub chart-releaser with Gitea-compatible workflow - Lint job: helm lint, template validation on push to main/master - Release job: package and publish to Gitea releases on tag push (v*) - Use gitea-release-action for creating releases - Support both main and master branches Co-authored-by: Cursor <cursoragent@cursor.com>	2026-02-19 17:13:53 +00:00
Andriy Oblivantsev	cd358ce28a	Add initial Helm chart for FleetDM Stack with MySQL and Redis, including README, CI pipeline, and architecture documentation. Update .gitignore for local development files.	2026-02-19 16:25:44 +00:00