Migrate steam-mcp image publishing to Forgejo OCI #12

New issue

Closed

opened 2026-07-27 02:41:32 +00:00 by coilyco-ops · 1 comment

coilyco-ops commented

2026-07-27 02:41:32 +00:00

Member

Outcome

Publish steam-mcp to Forgejo OCI from this source repository, stop publishing it to the standalone k3s registry, and hand the proven immutable reference to the deployment owner.

Program authority: coilysiren/inbox#276

Registry inventory: coilyco-flight-deck/infrastructure#653

Consumer rollout: coilyco-bridge/deploy#239

Target

forgejo.coilysiren.me/coilyco-gaming/steam-mcp:<immutable-source-tag>

Scope

Inspect the current trusted main-only image workflow and preserve its release trigger semantics.
Authenticate through the established package-write secret contract without placing credentials in tracked files.
Publish a source-derived immutable tag to the target Forgejo authority.
Record whether package visibility is intentionally public or private.
Remove active raw registry endpoints, local pull aliases, insecure-registry configuration, tag checks, and dual-publish behavior owned by this repository.
Update repository documentation to name Forgejo OCI as the image authority.
Report the exact immutable image reference on this issue and on deploy#239 before consumer cutover.
Account for the upload-race, staging-space, and request-timeout risks linked from the umbrella when this publisher uses a large or multi-architecture build.

Acceptance

A trusted main workflow publishes the target image to Forgejo OCI.
The issue records proof that the immutable manifest exists.
The standalone registry receives no new image from this repository after cutover.
Canonical source and documentation contain no active standalone-registry publish contract.
Repository validation passes.
deploy#239 records and consumes the proven reference before this issue closes.

Codex, via advisor surface

## Outcome Publish `steam-mcp` to Forgejo OCI from this source repository, stop publishing it to the standalone k3s registry, and hand the proven immutable reference to the deployment owner. Program authority: https://forgejo.coilysiren.me/coilysiren/inbox/issues/276 Registry inventory: https://forgejo.coilysiren.me/coilyco-flight-deck/infrastructure/issues/653 Consumer rollout: https://forgejo.coilysiren.me/coilyco-bridge/deploy/issues/239 ## Target `forgejo.coilysiren.me/coilyco-gaming/steam-mcp:<immutable-source-tag>` ## Scope * Inspect the current trusted main-only image workflow and preserve its release trigger semantics. * Authenticate through the established package-write secret contract without placing credentials in tracked files. * Publish a source-derived immutable tag to the target Forgejo authority. * Record whether package visibility is intentionally public or private. * Remove active raw registry endpoints, local pull aliases, insecure-registry configuration, tag checks, and dual-publish behavior owned by this repository. * Update repository documentation to name Forgejo OCI as the image authority. * Report the exact immutable image reference on this issue and on deploy#239 before consumer cutover. * Account for the upload-race, staging-space, and request-timeout risks linked from the umbrella when this publisher uses a large or multi-architecture build. ## Acceptance * A trusted main workflow publishes the target image to Forgejo OCI. * The issue records proof that the immutable manifest exists. * The standalone registry receives no new image from this repository after cutover. * Canonical source and documentation contain no active standalone-registry publish contract. * Repository validation passes. * deploy#239 records and consumes the proven reference before this issue closes.  Codex, via advisor surface

coilyco-ops added the

autonomy

async-consult

priority

labels

2026-07-29 03:48:12 +00:00

coilyco-ops commented

2026-07-30 07:53:07 +00:00

Author

Member

OCI migration acceptance is complete.

Main run 31 passed test and publish for source 906ff28a00.
The live steam-mcp Deployment consumes forgejo.coilysiren.me/coilyco-gaming/steam-mcp:906ff28a00e7359e01959094ff8b08e87288369f.
deploy#239 recorded the consumer migration and is closed.
The standalone registry is no longer the source or deployment image authority for Steam.

Current pod availability is separately affected by node.kubernetes.io/disk-pressure. That does not change the completed OCI publisher and consumer cutover.

Successful run: https://forgejo.coilysiren.me/coilyco-gaming/steam-ops/actions/runs/31

OCI migration acceptance is complete. * Main run 31 passed test and publish for source 906ff28a00e7359e01959094ff8b08e87288369f. * The live steam-mcp Deployment consumes forgejo.coilysiren.me/coilyco-gaming/steam-mcp:906ff28a00e7359e01959094ff8b08e87288369f. * deploy#239 recorded the consumer migration and is closed. * The standalone registry is no longer the source or deployment image authority for Steam. Current pod availability is separately affected by node.kubernetes.io/disk-pressure. That does not change the completed OCI publisher and consumer cutover. Successful run: https://forgejo.coilysiren.me/coilyco-gaming/steam-ops/actions/runs/31

coilyco-ops closed this issue

2026-07-30 07:53:13 +00:00