devthejo/buildkit-operator-forgejo-test
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
buildkit-operator x Forgejo OIDC e2e (throwaway)
3 commits 1 branch 0 tags 29 KiB
  • Dockerfile 100%
Find a file
Exact
devthejo e87016aefd
 test: build via reusable forgejo/ action (uses)
2026-06-27 10:16:56 +02:00
.forgejo/workflows test: build via reusable forgejo/ action (uses) 2026-06-27 10:16:56 +02:00
Dockerfile buildkit-operator x Forgejo OIDC e2e 2026-06-27 08:41:51 +02:00
README.md buildkit-operator x Forgejo OIDC e2e 2026-06-27 08:41:51 +02:00

README.md

buildkit-operator × Forgejo — OIDC e2e

Throwaway repo to validate that Forgejo Actions can build through buildkit-operator:

  1. the job mints a Forgejo-signed OIDC token (permissions.id-token: write),
  2. buildd (prod, buildd.bko.fabrique.social.gouv.fr) verifies it and binds the build to the verified repository claim → git.devthefuture.org/devthejo/buildkit-operator-forgejo-test,
  3. the build runs on the project's hot remote buildkitd over mTLS via the shared SNI gateway.

See .forgejo/workflows/build.yml. Dispatched manually (workflow_dispatch) after the mTLS secrets

  • BUILDKIT_OPERATOR_BUILDD_URL variable are set on the repo.