Files
KNELBMS/packages/deploy_pipeline.yaml
T
mrcharles 02e6df0340 fix(deploy): !secret must be the whole header value, not inline [#734]
gitea got no auth (401: only signed in user) - secrets do not
concatenate. Secret now holds the full 'Bearer <token>' header.
Detail: https://projects.knownelement.com/issues/734
2026-09-02 22:46:31 -05:00

19 lines
918 B
YAML

# Deploy pipeline [#734]: gitea master-HEAD sha watcher. Feeds the
# sha-watch deploy automation (reload-only apply). The gitea webhook
# (gitea hook #10 -> pfv_deploy_git_webhook automation) is the fast path
# with full restart mapping, but gitea cannot deliver webhooks to
# CGNAT-range targets until its [webhook] ALLOWED_HOST_LIST is widened
# (founder action via Cloudron file manager); this watcher is the
# always-works safety net.
rest:
- resource: https://git.knownelement.com/api/v1/repos/KNEL/pfv-bms/commits?limit=1
headers:
Authorization: !secret gitea_auth_header
User-Agent: pfv-bms-deploy-watch
scan_interval: 300
verify_ssl: true
sensor:
- name: PFV deploy gitea master head
unique_id: pfv_deploy_gitea_master_head
value_template: "{{ value_json[0].sha if value_json is list and value_json | length > 0 else (value_json | string | truncate(90)) }}"