unkin-agent c333ea078d ci: authenticate artifactapi upload with a vault token (#189) ...

artifactapi is about to enforce auth on file uploads (`ARTIFACTAPI_AUTH_UPLOADS`), and the deploy pipelines PUT rpms anonymously.

- mint an `artifactapi-writer` OIDC token via Vault k8s auth (role `woodpecker_artifactapi_writer`) using the step SA token
- fail the step if minting fails (`set -o pipefail`)
- send the token as `Authorization: Bearer` via a header file on each rpm PUT
- apply to the almalinux9, fedora42, fedora43 and fedora44 deploy pipelines

Reviewed-on: #189
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

2026-10-25 23:07:55 +11:00

.woodpecker

ci: authenticate artifactapi upload with a vault token (#189)

2026-10-25 23:07:55 +11:00

rpms

Drop el8 builds (#188)

2026-10-09 22:47:14 +11:00

schema

Drop el8 builds (#188)

2026-10-09 22:47:14 +11:00

tests

Probe the RPM filename nfpm actually publishes (#175)

2026-09-28 22:22:42 +10:00

tools

Drop el8 builds (#188)

2026-10-09 22:47:14 +11:00

.gitignore

feat: add GitHub integration for automated package updates

2025-12-29 22:08:15 +11:00

.pre-commit-config.yaml

feat/metadata-schema-validation (#165)

2026-05-17 12:34:33 +10:00

Dockerfile

ci: use container-rpmbuilder image (#186)

2026-10-09 22:25:11 +11:00

Makefile

feat/metadata-schema-validation (#165)

2026-05-17 12:34:33 +10:00

pyproject.toml

Probe the RPM filename nfpm actually publishes (#175)

2026-09-28 22:22:42 +10:00

S

Description

A repository for building RPMs in docker

2 MiB

Languages

Python 65.3%

Shell 32.6%

Makefile 1.4%

Dockerfile 0.7%