Skip to content

Plan specsdeployd v1: design doc and backlog drafts - #5

Draft
Ilyes512 wants to merge 3 commits into
mainfrom
docs/design-plan
Draft

Ilyes512 wants to merge 3 commits into
mainfrom
docs/design-plan

Conversation

@Ilyes512

Copy link
Copy Markdown
Member

Summary

  • docs/design.md: the detailed plan for specsnl/specsops#13 (contracts, secrets, webhook pipeline, deploy and rollback, GitHub reporting, milestones, build order)
  • docs/backlog/: 7 epics, 34 issues and 2 cross-repo drafts, each file holding a final issue body with front matter
  • For review only. It may be closed unmerged once the milestones and issues exist on GitHub

Refs specsnl/specsops#13

Adds docs/design.md and one draft per epic and issue under docs/backlog/, for review before the tracker is created. Refs specsnl/specsops#13
…Tofu

Environments have no webhook of their own, and org webhooks would cap the fleet at 20 servers. Use one repository webhook per (repo, server) pair, created with each server by OpenTofu. A central relay is rejected as a single point of failure.
Each server's item holds its webhook secret. secrets.age is built off-host, by OpenTofu or an Ansible playbook (spike B3), and only the ciphertext reaches the server, which never holds 1Password credentials.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant