Deploy the independent identity broker from Harbor #19

Merged

karpfen merged 1 commit from feat/harbor-broker-cutover into main

2026-09-27 10:17:53 +00:00

karpfen commented

2026-09-27 10:17:05 +00:00

Owner

The new reader has been projected through SPIFFE/SPIKE and tested to deny publishing, administrator and other-project access. Broker CI passed its unit and HTTP regression tests. Rollout will be followed by fresh authorization redirect checks.

Pin harbor.karpfen.dev/forgejo-38/broker@sha256:c6098c56724871d4779a6e2ba44c735bfe6ff4befa189b6335f13825d9f15490, published by the independent broker’s successful run #9. Switch the image, pull Secret and entitlement environment name together; issuer policies and secret values remain unchanged. The new reader has been projected through SPIFFE/SPIKE and tested to deny publishing, administrator and other-project access. Broker CI passed its unit and HTTP regression tests. Rollout will be followed by fresh authorization redirect checks.

karpfen added 1 commit

2026-09-27 10:17:05 +00:00

deploy: use the independently published Harbor broker

validate generated manifests / validate (pull_request) Successful in 24s

Details

462b88dde0

karpfen merged commit 67e28ff2e2 into main

2026-09-27 10:17:53 +00:00

karpfen referenced this pull request from a commit

2026-09-27 10:17:55 +00:00

Merge pull request 'Deploy the independent identity broker from Harbor' (#19) from feat/harbor-broker-cutover into main