docs: document centralized organization workflows
Platform CI tests / QuickStack deploy action tests (push) Successful in 23s

This commit is contained in:
2026-08-20 08:48:07 +00:00
parent d3c0b76329
commit 8f41d273d7
+6 -13
View File
@@ -1,15 +1,10 @@
# Platform CI # Platform CI
This repository is the central, public source for Nuvisphere's Gitea scoped This repository is the central, public source for Nuvisphere's Gitea scoped workflows and the shared QuickStack OCI action.
workflows. Workflow code contains no credentials. Each consuming owner or
organization supplies its own `REGISTRY_USERNAME`, `REGISTRY_TOKEN` and
`QUICKSTACK_API_TOKEN` Actions secrets.
Repositories opt into deployment by committing `.quickstack/deploy.json`. Workflow code contains no credentials. Each consuming organization supplies its own `REGISTRY_USERNAME`, `REGISTRY_TOKEN` and `QUICKSTACK_API_TOKEN` Actions secrets. Organization-owned `Platform-CI` repositories only provide the scoped workflow entrypoint and call this central action.
The central workflow builds every declared target once, publishes an immutable
`sha-<commit>` OCI tag to the Gitea Container Registry and changes QuickStack Repositories opt into deployment by committing `.quickstack/deploy.json`. The central workflow builds every declared target once, publishes an immutable `sha-<commit>` OCI tag to the Gitea Container Registry and changes QuickStack to the exact `@sha256:` digest. A failed rollout or postflight automatically restores the previous QuickStack configuration.
to the exact `@sha256:` digest. A failed rollout or postflight automatically
restores the previous QuickStack configuration.
Example: Example:
@@ -24,7 +19,7 @@ Example:
"targets": [ "targets": [
{ {
"name": "website", "name": "website",
"image": "vadimenovikau/example", "image": "nuvisphere/example",
"dockerfile": "Dockerfile", "dockerfile": "Dockerfile",
"context": ".", "context": ".",
"appId": "app-example-12345678", "appId": "app-example-12345678",
@@ -39,6 +34,4 @@ Example:
} }
``` ```
Pull requests build all matching targets without logging in, publishing or Pull requests build all matching targets without logging in, publishing or deploying. Pushes and manual runs publish and deploy. The commit marker `[skip quickstack-deploy]` skips a push deliberately.
deploying. Pushes and manual runs publish and deploy. The commit marker
`[skip quickstack-deploy]` skips a push deliberately.