oleks/ci-scripts
1
0
Fork 0
Code Issues 8 Pull Requests Actions Packages Projects Releases Wiki Activity

Centralize registry/host constants #4

New Issue
Closed
opened 2026-07-04 19:08:28 +03:00 by oleks · 1 comment
oleks commented 2026-07-04 19:08:28 +03:00
Owner
Copy Link
Copy Source

git.oleks.space/oleks/nix-ci* images, git.oleks.space netrc machine, tcp://buildkit-arm64.infra.svc.cluster.local:1234 (the-eye/container.yaml:44,78), nameserver 169.254.20.10 (lxml-s390x:44) are inlined dozens of times. Introduce central variables/secrets or a documented constants convention.

git.oleks.space/oleks/nix-ci* images, git.oleks.space netrc machine, tcp://buildkit-arm64.infra.svc.cluster.local:1234 (the-eye/container.yaml:44,78), nameserver 169.254.20.10 (lxml-s390x:44) are inlined dozens of times. Introduce central variables/secrets or a documented constants convention.
oleks added this to the CI Scripts Optimization milestone 2026-07-04 19:08:28 +03:00
repo-worker commented 2026-07-04 19:23:11 +03:00
Collaborator
Copy Link
Copy Source

Documented at docs/constants.md (commit 4ab389d, on main). Since Woodpecker has no cross-repo variables or include:, the practical mechanism is: secret-shaped values → Woodpecker/org secret (already true for gitea_clone_token, registry_token, attic_token); public infra values (image refs, buildkit addresses, netrc host, node-selector pins) → a field in the per-repo manifest consumed by the generator/render.py generator (oleks/ci-scripts#2), which stamps them into every rendered pipeline. Full inventory + convention table is in the doc. Closing.

Documented at `docs/constants.md` (commit 4ab389d, on `main`). Since Woodpecker has no cross-repo variables or `include:`, the practical mechanism is: secret-shaped values → Woodpecker/org secret (already true for `gitea_clone_token`, `registry_token`, `attic_token`); public infra values (image refs, buildkit addresses, netrc host, node-selector pins) → a field in the per-repo manifest consumed by the `generator/render.py` generator (oleks/ci-scripts#2), which stamps them into every rendered pipeline. Full inventory + convention table is in the doc. Closing.
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
bug
Bug or defect (requires fix)
 epic:modern-ci
p1
No labels
Milestone
No items
No Milestone CI Scripts Optimization
Projects
Clear projects
No projects
Assignees
Clear assignees
repo-worker oleks
No Assignees
2 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: oleks/ci-scripts#4
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?