ci: use shared ci-workflows Maven workflow #61

Merged

james.maes merged 7 commits from ci/ci-workflows into develop 2026-11-06 00:48:16 +00:00

Conversation 0 Commits 7 Files Changed 13

+68 -109

james.maes commented 2026-11-05 22:02:09 +00:00

Owner

Copy link

Copy source

Moves this repository to KofTwentyTwo/ci-workflows (qqq-orb port), publishing to the Gitea Maven registry (git.kof22.com/api/packages/QRun-IO/maven).

• every push: mvn verify
• develop: publishes the SNAPSHOT and commits any version bump
• release/X.Y: publishes X.Y.0-RC.N and commits the bump
• hotfix/*: publishes patch + 1
• main only verifies; push a vX.Y.Z tag to publish a release

Removes qrun-release.yaml, release-rc.yaml and .ci.yaml (old platform-ci path).

🤖 Generated with Claude Code

Moves this repository to KofTwentyTwo/ci-workflows (qqq-orb port), publishing to the Gitea Maven registry (git.kof22.com/api/packages/QRun-IO/maven). - every push: `mvn verify` - `develop`: publishes the SNAPSHOT and commits any version bump - `release/X.Y`: publishes `X.Y.0-RC.N` and commits the bump - `hotfix/*`: publishes patch + 1 - **`main` only verifies; push a `vX.Y.Z` tag to publish a release** Removes `qrun-release.yaml`, `release-rc.yaml` and `.ci.yaml` (old platform-ci path). 🤖 Generated with [Claude Code](https://claude.com/claude-code)

james.maes added 1 commit 2026-11-05 22:02:10 +00:00

ci: use shared ci-workflows Maven workflow ... 021a9ae446

Replace the platform-ci release callers with one caller of
KofTwentyTwo/ci-workflows maven.yaml (qqq-orb port).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-05 22:15:19 +00:00

ci: rerun shared workflow 8f91c08e3e

james.maes added 1 commit 2026-11-05 22:23:57 +00:00

ci: rerun shared workflow c9806e2b82

james.maes added 1 commit 2026-11-05 22:52:49 +00:00

test(authentik): make contract ITs run against a non-loopback Docker host ... ba5a688525

- SchemaDriftIT/SchemaDriftTest: quote OpenAPI path templates before
  turning {key} into a regex; other placeholders such as {slug} were
  compiled as regex repetition and threw PatternSyntaxException.
- Contract ITs: set allowInsecureHttp on the test qbit config; the
  Authentik test container is plain http and is reached via the Docker
  host address (e.g. 172.17.0.1 in CI), not loopback. Production https
  validation is unchanged.
- Postgres ITs: bind the mapped port to 127.0.0.1 only when the Docker
  daemon is local; with a remote daemon the loopback-only binding made
  the database unreachable (connection refused).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-05 23:11:57 +00:00

test(authentik): re-apply errored kof22 blueprints during contract stack startup ... 8b52f583e9

On a cold runner the built-in Authentik blueprints can race our custom
ones on first boot, leaving kof22-oauth2-apps in "error" until the
8-minute wait times out (run 5465). The local-review path already
re-applied errored blueprints; do the same (throttled to every 10s) in
the shared contract-stack wait.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-05 23:30:08 +00:00

test(authentik): also re-apply never-applied kof22 blueprints at startup ... 38660be0f5

Run 5488: with errored blueprints re-applied, kof22-oauth2-apps and
kof22-qqq-tokens succeeded but kof22-identity-bootstrap stayed
"unknown" (never applied) until the wait timed out. Re-apply blueprints
in "error" or "unknown" state after a 60s grace period, every 30s.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes added 1 commit 2026-11-06 00:28:53 +00:00

test(authentik): surface Authentik error logs when the contract stack fails to start ... ea5c5ab65e

When the blueprint wait times out, also print error-level worker lines
and error/warning server lines (API-triggered re-applies run in the
server), so the failing blueprint's cause is visible in CI logs.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

james.maes merged commit d928575104 into develop 2026-11-06 00:48:16 +00:00

james.maes deleted branch ci/ci-workflows 2026-11-06 00:48:16 +00:00

james.maes referenced this pull request 2026-11-06 18:00:16 +00:00

test(authentik): fix slow contract stack startup in CI (Postgres JIT) #65

Sign in to join this conversation.

Reviewers

No Reviewers

Labels

Clear labels

architecture

Architecture review: coupling, cohesion, UI API

bug

Something isn't working

dependencies

documentation

Improvements or additions to documentation

duplicate

This issue or pull request already exists

enhancement

New feature or request

github_actions

Pull requests that update GitHub Actions code

good first issue

Good for newcomers

help wanted

Extra attention is needed

invalid

This doesn't seem right

java

Pull requests that update java code

question

Further information is requested

release:rc

Merging this develop PR cuts the next release candidate

secuurity

wontfix

This will not be worked on

No labels

Milestone

No items

No Milestone

Projects

Clear projects

No projects

Assignees

Clear assignees

forge-recovery (Forge Recovery) james.maes (James Maes)

No Assignees

1 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: QRun-IO/qbit-authentik#61