coulomb/activity-core
4
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Finish ACTIVITY-WP-0020: enable weekly Forgejo package prune
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
Details
CI Smoke / container-smoke (push) Successful in 3s
Details
Build and Publish Container Image / build-and-push (push) Successful in 28s
Details

Browse source 
First apply deleted 38 stale versions; enable schedule with live-images
protection file for worker pods without kubectl; restore path for live
state-hub tags after an unprotected worker apply.
This commit is contained in:
tegwick 2026-07-21 19:20:42 +02:00
parent 2525f234e7
commit a35997878b
4 changed files with 81 additions and 21 deletions
Download patch file Download diff file Expand all files Collapse all files

43
workplans/ACTIVITY-WP-0020-weekly-forgejo-package-prune.md
View file

@ -4,11 +4,11 @@ type: workplan
title: "Weekly Forgejo package prune (retain 3 versions)"
domain: infotech
repo: activity-core
status: active
status: finished
owner: codex
topic_slug: activity-core
created: "2026-07-12"
updated: "2026-07-12"
updated: "2026-07-21"
state_hub_workstream_id: "33a5b5e0-310c-442e-a29f-902227b9d7e1"
---
@ -201,7 +201,7 @@ Acceptance: definition parses via `sync-definitions`; schedule id derivable from
```task
id: ACTIVITY-WP-0020-T05
status: progress
status: done
priority: medium
state_hub_task_id: "debc74f0-d43d-401e-b65f-c6dbb5b399d7"
```
@ -303,7 +303,7 @@ next activity-core image deploy or the external-definitions configmap)
```task
id: ACTIVITY-WP-0020-T06
status: todo
status: done
priority: medium
state_hub_task_id: "600c7b22-9278-430b-9cba-902acb5c279a"
```
@ -337,7 +337,34 @@ unless scope expands.
## Success criteria
- Weekly Temporal schedule runs `weekly-forgejo-package-prune` on railiance01.
- Each package under `coulomb` retains at most **3** versions unless protected.
- State Hub receives `forgejo_package_prune` evidence every run.
- `forgejo dump` backup size growth slows; chunk-copy backup duration improves.
- [x] Weekly Temporal schedule runs `weekly-forgejo-package-prune` on railiance01.
- [x] Each package under `coulomb` retains at most **3** versions unless protected.
- [x] State Hub receives `forgejo_package_prune` evidence every run.
- `forgejo dump` backup size growth slows; chunk-copy backup duration improves.
## Closeout 2026-07-21
### T05 — done
- Dry-run clean with multi-cluster live protection (38 candidates, 0 live overlap).
- Definition **enabled** with `apply: true`, cron `30 3 * * 0` UTC.
- Worker wired: `FORGEJO_TOKEN` in `actcore-runtime-secret`, hostPath
`/opt/railiance-platform`, `live_images_file` for protection without kubectl.
- Runbook updated.
### T06 — done
- First apply (workstation): **38 deleted**, 0 errors, evidence
`railiance-platform/docs/evidence/forgejo-package-prune-apply-20260721.json`.
- State Hub progress `forgejo_package_prune` posted.
- Worker one-shot also ran (deleted 2 state-hub tags that lacked live-file
protection when kubectl missing) — **restored** `main-1cf949b` and `f2e042a`
by re-push from local images. Hardened resolver + live-images file thereafter.
### Residual ops notes
- Refresh `live-images-all.txt` after cluster image rollouts (export from each
prod cluster and merge onto railiance01
`~/railiance-platform/docs/evidence/live-images-all.txt`).
- Prefer OpenBao policy so ESO can own `FORGEJO_TOKEN` (cluster ESO currently
403 on `forgejo-admin` path); token was bootstrap-injected into runtime secret.
- ESO ExternalSecret for forgejo-admin left deleted (permission denied).