fix: add -k to curl to bypass TLS verification in container

Also ensure RELEASER_TOKEN secret is set in Woodpecker. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>
fix: use RELEASER_TOKEN for Gitea API auth instead of droneci password (#7 )
2026-03-26 13:45:10 +11:00 · 2026-03-26 13:40:15 +11:00 · 2026-03-26 13:17:25 +11:00 · 2026-03-26 12:48:54 +11:00
1 changed files with 15 additions and 8 deletions
@@ -17,8 +17,8 @@ steps:
  - name: release
    image: git.unkin.net/unkin/almalinux9-base:20260325
    environment:
-      DRONECI_PASSWORD:
-        from_secret: DRONECI_PASSWORD
+      RELEASER_TOKEN:
+        from_secret: RELEASER_TOKEN
    commands:
      - |
        PREV_TAG=$(git describe --tags --abbrev=0 HEAD^ 2>/dev/null || echo "")
@@ -28,13 +28,20 @@ steps:
          NOTES=$(git log --merges --pretty=format:"- %s")
        fi
        BODY=$(printf '%s' "$NOTES" | sed 's/"/\\"/g; s/$/\\n/' | tr -d '\n')
-        RELEASE_ID=$(curl -sf -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases" \
-          -u "droneci:$DRONECI_PASSWORD" \
+        GET_RESPONSE=$(curl -sk "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/tags/${CI_COMMIT_TAG}")
+        echo "GET response: ${GET_RESPONSE}"
+        RELEASE_ID=$(printf '%s' "${GET_RESPONSE}" | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
+        if [ -z "$RELEASE_ID" ]; then
+          echo "ERROR: failed to find release for tag ${CI_COMMIT_TAG}" >&2
+          exit 1
+        fi
+        echo "Release ID: ${RELEASE_ID}"
+        curl -sk -X PATCH "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}" \
+          -H "Authorization: token ${RELEASER_TOKEN}" \
          -H "Content-Type: application/json" \
-          -d "{\"tag_name\":\"${CI_COMMIT_TAG}\",\"name\":\"${CI_COMMIT_TAG}\",\"body\":\"${BODY}\"}" \
-          | grep -o '"id":[0-9]*' | head -1 | cut -d: -f2)
-        curl -sf -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
-          -u "droneci:$DRONECI_PASSWORD" \
+          -d "{\"body\":\"${BODY}\"}"
+        curl -sk -X POST "https://git.unkin.net/api/v1/repos/${CI_REPO}/releases/${RELEASE_ID}/assets" \
+          -H "Authorization: token ${RELEASER_TOKEN}" \
          -F "attachment=@node-lookup"
    backend_options:
      kubernetes:
Author	SHA1	Message	Date
unkinben	26ad1eba64	fix: add -k to curl to bypass TLS verification in container ci/woodpecker/pr/lint Pipeline was successful Details ci/woodpecker/pr/unit-tests Pipeline was successful Details ci/woodpecker/pr/pre-commit Pipeline was successful Details Also ensure RELEASER_TOKEN secret is set in Woodpecker. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land>	2026-03-26 13:45:10 +11:00
unkinben	6d7703c3f2	fix: use RELEASER_TOKEN for Gitea API auth instead of droneci password (#7 ) ci/woodpecker/release/release Pipeline failed Details droneci user lacks write access; switch to token-based auth header. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land> Reviewed-on: #7	2026-03-26 13:40:15 +11:00
unkinben	3291f8f73d	fix: look up existing release by tag instead of creating a new one (#6 ) ci/woodpecker/release/release Pipeline failed Details tea creates the release before the pipeline runs; POST was failing with conflict, leaving RELEASE_ID empty and skipping the asset upload. Now GETs the release by tag, PATCHes its body, then uploads the binary. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land> Reviewed-on: #6	2026-03-26 13:17:25 +11:00
unkinben	3a4c9ea1c1	fix: surface release API errors in woodpecker pipeline (#5 ) ci/woodpecker/release/release Pipeline failed Details Capture and print the full Gitea API response before parsing the release ID, and fail explicitly if the ID is empty so the root cause is visible in CI logs instead of silently producing a malformed asset upload URL. 💘 Generated with Crush Assisted-by: Claude Sonnet 4.6 via Crush <crush@charm.land> Reviewed-on: #5	2026-03-26 12:48:54 +11:00