fix(cicd): inject runtime gitops guard in native refresh

This commit is contained in:
Codex
2026-07-04 11:05:21 +00:00
parent bdd7fcfc7b
commit 7cc6f24293
5 changed files with 290 additions and 2 deletions
+7
View File
@@ -164,6 +164,9 @@ export function renderControllerManifests(registry: BranchFollowerRegistry): Rec
"hwlab-node-control-plane-refresh.mjs": nativeCicdScript("hwlab-node-control-plane-refresh.mjs"),
"github-proxy-connect.mjs": nativeCicdScript("github-proxy-connect.mjs"),
"git-ssh-proxy.sh": nativeCicdScript("git-ssh-proxy.sh"),
"runtime-gitops-observability.mjs": nativeHwlabScript("runtime-gitops-observability.mjs"),
"runtime-gitops-postprocess.mjs": nativeHwlabScript("runtime-gitops-postprocess.mjs"),
"runtime-gitops-verify.mjs": nativeHwlabScript("runtime-gitops-verify.mjs"),
};
const controllerConfigSha = sha256(JSON.stringify(controllerConfigData));
return [
@@ -302,6 +305,10 @@ function nativeCicdScript(name: string): string {
return readFileSync(rootPath("scripts/native/cicd", name), "utf8");
}
function nativeHwlabScript(name: string): string {
return readFileSync(rootPath("scripts/native/hwlab", name), "utf8");
}
function sha256(value: string): string {
return createHash("sha256").update(value).digest("hex");
}
+1
View File
@@ -83,6 +83,7 @@ function nativeHwlabControlPlaneRefreshJobManifest(
{ name: "FIELD_MANAGER", value: spec.controlPlaneFieldManager },
{ name: "TEKTON_NAMESPACE", value: tektonNamespace },
{ name: "KUBE_REQUEST_TIMEOUT_SECONDS", value: String(timeoutSeconds) },
{ name: "RUNTIME_GITOPS_CONFIGMAP_NAME", value: registry.controller.configMapName },
{ name: "HWLAB_RENDER_OVERLAY_B64", value: overlay },
],
}],