fix: use k8s git mirror source snapshots

2026-07-01 10:32:05 +00:00
parent 79e419ce98
commit c90ad04bff
19 changed files with 481 additions and 168 deletions
@@ -22,6 +22,16 @@ sentinel:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority:
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot:
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder:
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -22,6 +22,16 @@ sentinel:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority:
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot:
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder:
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -22,6 +22,16 @@ sentinel:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority:
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot:
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder:
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -23,6 +23,16 @@ sentinel:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority:
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot:
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder:
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -22,6 +22,16 @@ sentinel:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority:
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot:
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder:
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -57,6 +57,16 @@ baselines:
        - package.json
        - bun.lock
        - bun.lockb
+    sourceAuthority: &cicd-source-authority
+      mode: gitMirrorSnapshot
+      resolver: k8s-git-mirror
+      allowHostGit: false
+      allowGithubDirectInPipeline: false
+    sourceSnapshot: &cicd-source-snapshot
+      stageRefPrefix: refs/unidesk/snapshots/web-probe-sentinel/{branch}
+      missingObjectPolicy: fail-fast
+      refreshPolicy: sync-before-snapshot
+      cacheRef: source.gitMirrorReadUrl
    builder: &cicd-builder
      namespace: devops-infra
      sourceMode: sparse-git-checkout
@@ -159,6 +169,10 @@ nodes:
      controlPlaneConfigRef: config/hwlab-node-control-plane.yaml#targets[1]
      source:
        <<: *cicd-source
+      sourceAuthority:
+        <<: *cicd-source-authority
+      sourceSnapshot:
+        <<: *cicd-source-snapshot
      argo: &jd01-argo
        namespace: argocd
        projectName: hwlab-jd01