Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension


Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions .github/workflows/build.yml
Original file line number Diff line number Diff line change
Expand Up @@ -28,14 +28,14 @@ jobs:

rpmbuild:
needs: [config]
uses: OpenCHAMI/github-actions/.github/workflows/build-rpm-quadlet.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/build-rpm-quadlet.yml@v3.11
secrets: inherit
with:
artifact-name-unsigned-rpms: ${{ needs.config.outputs.rpm-unsigned }}

rpmsign:
needs: [config, rpmbuild]
uses: OpenCHAMI/github-actions/.github/workflows/gpg-sign-artifacts.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/gpg-sign-artifacts.yml@v3.11
secrets: inherit
with:
artifact-name-unsigned-rpms: ${{ needs.config.outputs.rpm-unsigned }}
Expand All @@ -44,7 +44,7 @@ jobs:

rpmvalidate:
needs: [config, rpmsign]
uses: OpenCHAMI/github-actions/.github/workflows/validate-rpm-quadlet.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/validate-rpm-quadlet.yml@v3.11
secrets: inherit
with:
artifact-name-signed-rpms: ${{ needs.config.outputs.rpm-signed }}
Expand Down
2 changes: 1 addition & 1 deletion .github/workflows/cleanup.yml
Original file line number Diff line number Diff line change
Expand Up @@ -9,6 +9,6 @@ on:

jobs:
cleanup:
uses: OpenCHAMI/github-actions/.github/workflows/pr-registry-cleanup.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/pr-registry-cleanup.yml@v3.11
permissions:
packages: write
8 changes: 4 additions & 4 deletions .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -32,14 +32,14 @@ jobs:

rpmbuild:
needs: [config]
uses: OpenCHAMI/github-actions/.github/workflows/build-rpm-quadlet.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/build-rpm-quadlet.yml@v3.11
secrets: inherit
with:
artifact-name-unsigned-rpms: ${{ needs.config.outputs.rpm-unsigned }}

rpmsign:
needs: [config, rpmbuild]
uses: OpenCHAMI/github-actions/.github/workflows/gpg-sign-artifacts.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/gpg-sign-artifacts.yml@v3.11
secrets: inherit
with:
artifact-name-unsigned-rpms: ${{ needs.config.outputs.rpm-unsigned }}
Expand All @@ -48,7 +48,7 @@ jobs:

release:
needs: [config, rpmsign]
uses: OpenCHAMI/github-actions/.github/workflows/release-signed-artifacts.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/release-signed-artifacts.yml@v3.11
secrets: inherit
with:
artifact-name-signed-rpms: ${{ needs.config.outputs.rpm-signed }}
Expand All @@ -57,5 +57,5 @@ jobs:

publish:
needs: release
uses: OpenCHAMI/github-actions/.github/workflows/publish-release.yml@v3.9
uses: OpenCHAMI/github-actions/.github/workflows/publish-release.yml@v3.11
secrets: inherit
13 changes: 13 additions & 0 deletions .github/workflows/reuse.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,13 @@
# SPDX-FileCopyrightText: © 2026 OpenCHAMI a Series of LF Projects, LLC
#
# SPDX-License-Identifier: MIT

name: REUSE
on:
pull_request:
push:
branches: [main]

jobs:
reuse:
uses: OpenCHAMI/github-actions/.github/workflows/reuse.yml@v3.11
21 changes: 21 additions & 0 deletions .github/workflows/scorecard.yml
Original file line number Diff line number Diff line change
@@ -0,0 +1,21 @@
# SPDX-FileCopyrightText: © 2026 OpenCHAMI a Series of LF Projects, LLC
#
# SPDX-License-Identifier: MIT

name: Scorecard
on:
branch_protection_rule:
pull_request:
push:
branches: [main]
schedule:
- cron: '39 5 * * 1'

permissions:
contents: read
security-events: write
id-token: write

jobs:
scorecard:
uses: OpenCHAMI/github-actions/.github/workflows/scorecard.yml@v3.11
2 changes: 1 addition & 1 deletion README.md
Original file line number Diff line number Diff line change
Expand Up @@ -19,4 +19,4 @@ sudo systemctl start haproxy.service

Edit `/etc/openchami/configs/haproxy.cfg` to change routing. For Podman or systemd changes, add a drop-in under `/etc/containers/systemd/haproxy.container.d/` rather than editing the packaged one, then run `systemctl daemon-reload`.

TLS certificates are read from the `haproxy-certs` volume, which `openchami-acme-quadlets` populates; supply your own there if you are not using ACME.
TLS certificates are read from the `haproxy-certs` volume, which `openchami-acme-quadlet` populates; supply your own there if you are not using ACME.
4 changes: 2 additions & 2 deletions packaging/rpm-quadlet/openchami-haproxy-quadlet.spec
Original file line number Diff line number Diff line change
Expand Up @@ -22,9 +22,9 @@ Requires(post,preun,postun): systemd
# systemd-style *.container.d drop-in directories
Requires: podman >= 5.0.0

# NOTE: openchami-acme-quadlets populates the haproxy-certs volume that
# NOTE: openchami-acme-quadlet populates the haproxy-certs volume that
# terminates TLS, but a site may install its own certificates there instead.
Suggests: openchami-acme-quadlets >= 0.0.1
Suggests: openchami-acme-quadlet >= 0.0.1
Suggests: boot-service-quadlet >= 0.3.2
Suggests: metadata-service-quadlet >= 0.2.2
Suggests: smd-quadlet >= 2.20.5
Expand Down