coilyco-flight-deck/lunch-money-k8s

Watch

Migrate lunch-money-mcp image publishing to Forgejo OCI #34

New issue

Closed

opened 2026-07-27 02:41:31 +00:00 by coilyco-ops · 1 comment

coilyco-ops commented

2026-07-27 02:41:31 +00:00

Member

Outcome

Publish lunch-money-mcp to Forgejo OCI from this source repository, stop publishing it to the standalone k3s registry, and hand the proven immutable reference to the deployment owner.

Program authority: coilysiren/inbox#276

Registry inventory: coilyco-flight-deck/infrastructure#653

Consumer rollout: coilyco-bridge/deploy#239

Target

forgejo.coilysiren.me/coilyco-flight-deck/lunch-money-mcp:<immutable-source-tag>

Scope

Inspect the current trusted main-only image workflow and preserve its release trigger semantics.
Authenticate through the established package-write secret contract without placing credentials in tracked files.
Publish a source-derived immutable tag to the target Forgejo authority.
Record whether package visibility is intentionally public or private.
Remove active raw registry endpoints, local pull aliases, insecure-registry configuration, tag checks, and dual-publish behavior owned by this repository.
Update repository documentation to name Forgejo OCI as the image authority.
Report the exact immutable image reference on this issue and on deploy#239 before consumer cutover.
Account for the upload-race, staging-space, and request-timeout risks linked from the umbrella when this publisher uses a large or multi-architecture build.

Acceptance

A trusted main workflow publishes the target image to Forgejo OCI.
The issue records proof that the immutable manifest exists.
The standalone registry receives no new image from this repository after cutover.
Canonical source and documentation contain no active standalone-registry publish contract.
Repository validation passes.
deploy#239 records and consumes the proven reference before this issue closes.

Codex, via advisor surface

## Outcome Publish `lunch-money-mcp` to Forgejo OCI from this source repository, stop publishing it to the standalone k3s registry, and hand the proven immutable reference to the deployment owner. Program authority: https://forgejo.coilysiren.me/coilysiren/inbox/issues/276 Registry inventory: https://forgejo.coilysiren.me/coilyco-flight-deck/infrastructure/issues/653 Consumer rollout: https://forgejo.coilysiren.me/coilyco-bridge/deploy/issues/239 ## Target `forgejo.coilysiren.me/coilyco-flight-deck/lunch-money-mcp:<immutable-source-tag>` ## Scope * Inspect the current trusted main-only image workflow and preserve its release trigger semantics. * Authenticate through the established package-write secret contract without placing credentials in tracked files. * Publish a source-derived immutable tag to the target Forgejo authority. * Record whether package visibility is intentionally public or private. * Remove active raw registry endpoints, local pull aliases, insecure-registry configuration, tag checks, and dual-publish behavior owned by this repository. * Update repository documentation to name Forgejo OCI as the image authority. * Report the exact immutable image reference on this issue and on deploy#239 before consumer cutover. * Account for the upload-race, staging-space, and request-timeout risks linked from the umbrella when this publisher uses a large or multi-architecture build. ## Acceptance * A trusted main workflow publishes the target image to Forgejo OCI. * The issue records proof that the immutable manifest exists. * The standalone registry receives no new image from this repository after cutover. * Canonical source and documentation contain no active standalone-registry publish contract. * Repository validation passes. * deploy#239 records and consumes the proven reference before this issue closes.  Codex, via advisor surface

coilyco-ops referenced this issue from a commit

2026-07-27 03:32:24 +00:00

ci: publish lunch money image to Forgejo OCI

coilyco-ops referenced this issue from a commit

2026-07-27 03:34:12 +00:00

docs: keep publisher detail in deploy guide

coilyco-ops added the

autonomy

async-consult

priority

labels

2026-07-29 03:46:37 +00:00

coilyco-ops commented

2026-07-29 05:03:20 +00:00

Author

Member

Ops completed the publisher and consumer checkpoints.

Immutable image: forgejo.coilysiren.me/coilyco-flight-deck/lunch-money-mcp:2c49705ce882adc767e7bc700a1bb0eeeacd3173
Publisher proof: Forgejo Actions publish run 63 succeeded.
Deploy source landed in coilyco-bridge/deploy at 47c199b, with native-runner portability follow-up 843575d.
Live proof: the lunch-money-mcp Deployment is fully rolled out, all three ExternalSecrets are Ready, and both app and Tailscale containers are Ready.
Canonical Lunch Money deploy source contains no standalone-registry fallback.

Closing the publisher issue.

Ops completed the publisher and consumer checkpoints. * Immutable image: `forgejo.coilysiren.me/coilyco-flight-deck/lunch-money-mcp:2c49705ce882adc767e7bc700a1bb0eeeacd3173` * Publisher proof: Forgejo Actions publish run 63 succeeded. * Deploy source landed in `coilyco-bridge/deploy` at `47c199b`, with native-runner portability follow-up `843575d`. * Live proof: the `lunch-money-mcp` Deployment is fully rolled out, all three ExternalSecrets are Ready, and both app and Tailscale containers are Ready. * Canonical Lunch Money deploy source contains no standalone-registry fallback. Closing the publisher issue.

coilyco-ops closed this issue

2026-07-29 05:03:20 +00:00

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference

coilyco-flight-deck/lunch-money-k8s#34

No description provided.

Rows
Columns