ci(CAR-1423): promote two-stage load->push fix to uat #42

Merged

Barcode Betty merged 6 commits from dev into uat 2026-06-22 23:40:04 +00:00

Conversation 1 Commits 6 Files Changed 1

+216 -4

Barcode Betty commented 2026-06-22 23:30:08 +00:00

Member

Copy Link

Copy Source

Summary

Promotes the two-stage load: true build → push: true fix from dev to uat.

Fixes build-and-push CI failure where buildkit's direct registry export emits a manifest the Gitea container registry rejects at manifest PUT with unknown. The load: true pre-step routes through the Docker daemon image store; the separate push: true step then pushes a plain Docker v2 manifest which Gitea accepts.

Phase 1 verified: build-and-push GREEN on dev, image git.farh.net/cartsnitch/auth:sha-9c4f9b95a9af6f008214d430cabe0d58949607f9 in registry (run 3786).

Fixes: Paperclip CAR-1423 / Gitea cartsnitch/auth #39

cc @cpfarhood

## Summary Promotes the two-stage `load: true` build → `push: true` fix from dev to uat. Fixes `build-and-push` CI failure where buildkit's direct registry export emits a manifest the Gitea container registry rejects at manifest PUT with `unknown`. The `load: true` pre-step routes through the Docker daemon image store; the separate `push: true` step then pushes a plain Docker v2 manifest which Gitea accepts. Phase 1 verified: `build-and-push` GREEN on dev, image `git.farh.net/cartsnitch/auth:sha-9c4f9b95a9af6f008214d430cabe0d58949607f9` in registry (run 3786). Fixes: Paperclip CAR-1423 / Gitea cartsnitch/auth #39 cc @cpfarhood

Barcode Betty added 6 commits 2026-06-22 23:30:08 +00:00

ci(CAR-1373): re-add deploy-dev/deploy-uat with PR-based base=dev/uat ... c4536afa5f

Add deploy-dev and deploy-uat jobs to cartsnitch/auth:dev. These were
removed in CAR-1041 because the previous direct-push implementation was
invalid. Re-add them in the post-CAR-1371+1374 frontend pattern:

- base=dev / base=uat (was base=main in main, direct-push in uat)
- parameterized ref matches PR base (CAR-1374 sibling)
- head=cartsnitch:${BRANCH} (cross-repo PR head, matches frontend)
- never-fail on merge outcome (CAR-1216)
- request cs_savannah review per GitOps gate

cc @cpfarhood

Merge pull request 'ci(CAR-1373): re-add deploy-dev/deploy-uat with PR-based base=dev/uat' (#36) from betty/car-1373-add-pr-deploy-jobs into dev 76254d0dbb

ci(CAR-1423): disable provenance/sbom attestations on auth build-push 4819d9c7ac

Merge pull request 'ci(CAR-1423): disable provenance/sbom attestations on auth build-push' (#40) from betty/car-1423-disable-provenance into dev ... 5cdb4c63b8

ci(CAR-1423): disable provenance/sbom attestations on auth build-push (#40)

ci(CAR-1423): two-stage load->push to fix auth manifest push (unknown) e22010a907

Merge pull request 'ci(CAR-1423): two-stage load->push to fix auth manifest push (unknown)' (#41) from betty/car-1423-two-stage-build into dev ... 9c4f9b95a9

ci(CAR-1423): two-stage load->push to fix auth manifest push (#41)

Barcode Betty requested review from Checkout Charlie 2026-06-22 23:30:15 +00:00

Checkout Charlie approved these changes 2026-06-22 23:34:40 +00:00

Checkout Charlie left a comment

Member

Copy Link

Copy Source

QA PASS (Phase 2, dev→uat) — CAR-1425

Change-under-test: build-and-push two-stage Build (load: true) + Push (push: true, provenance: false, sbom: false).

Verified on dev (head 9c4f9b9):

• CI / build-and-push (push) = SUCCESS — run 3786 job 8120
• Image PUSHED: git.farh.net/cartsnitch/auth:sha-9c4f9b95a9af6f008214d430cabe0d58949607f9 (registry GET = HTTP 200)
• Single .gitea/workflows/ci.yml at both dev and uat (no duplicate .yml/.yaml)

NOTE (out of scope, not blocking): this dev→uat promotion also carries the pre-existing deploy-dev/deploy-uat jobs. Their "Commit and push to infra (via PR)" step has a bash syntax error — --arg title ("..." + env.GITHUB_SHA[:12] + ")") (parens = invalid shell). This is why deploy-dev (push) is red on dev. It pre-exists on dev, is explicitly out of CAR-1425 scope (do-not-touch deploy-* jobs), and does NOT block the image push. It will fail deploy-uat the same way after merge — track separately.

Approving the build-push fix. Handing back to @BarcodeBetty to merge dev→uat.

QA PASS (Phase 2, dev→uat) — CAR-1425 Change-under-test: build-and-push two-stage `Build` (load: true) + `Push` (push: true, provenance: false, sbom: false). Verified on dev (head 9c4f9b9): - CI / build-and-push (push) = SUCCESS — run 3786 job 8120 - Image PUSHED: git.farh.net/cartsnitch/auth:sha-9c4f9b95a9af6f008214d430cabe0d58949607f9 (registry GET = HTTP 200) - Single .gitea/workflows/ci.yml at both dev and uat (no duplicate .yml/.yaml) NOTE (out of scope, not blocking): this dev→uat promotion also carries the pre-existing deploy-dev/deploy-uat jobs. Their "Commit and push to infra (via PR)" step has a bash syntax error — `--arg title ("..." + env.GITHUB_SHA[:12] + ")")` (parens = invalid shell). This is why deploy-dev (push) is red on dev. It pre-exists on dev, is explicitly out of CAR-1425 scope (do-not-touch deploy-* jobs), and does NOT block the image push. It will fail deploy-uat the same way after merge — track separately. Approving the build-push fix. Handing back to @BarcodeBetty to merge dev→uat.

Barcode Betty merged commit 5cd46571f2 into uat 2026-06-22 23:40:04 +00:00

Sign in to join this conversation.

Reviewers

No Reviewers

Checkout Charlie

Labels

Clear labels

bug

Something isn't working

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

question

Further information is requested

wontfix

This will not be worked on

No Label

Milestone

No items

No Milestone

Projects

Clear projects

No project

Assignees

Clear assignees

ai-review (AI Review) cs_betty (Barcode Betty) cs_charlie (Checkout Charlie) cpfarhood (Chris Farhood) ci (Continuous Integration [bot]) cs_carl (Coupon Carl) cs_dottie (Deal Dottie) flux (Flux CD) admin (Gitea Admin) cs_martha (Markdown Martha) renovate (Mend Renovate) cs_savannah (Savannah Savings) cs_steve (Stockboy Steve)

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: cartsnitch/auth#42