Skip to content

feat: onboard agent-runtime onto the deploy platform#12

Merged
jorisjonkers-dev-agents[bot] merged 1 commit into
mainfrom
feat/platform-deploy
Jul 10, 2026
Merged

feat: onboard agent-runtime onto the deploy platform#12
jorisjonkers-dev-agents[bot] merged 1 commit into
mainfrom
feat/platform-deploy

Conversation

@jorisjonkers-dev-agents

Copy link
Copy Markdown
Contributor

Adds platform/ contract files and three new workflows (deploy-preview.yml, publish.yml, release.yml) that wire agent-runtime into the JorisJonkers-dev deploy platform.

Changes:

  • platform/deployment.yml — v2 deployment contract with two workloads: agent-gateway (port 8090, actuator health) and agents-login (port 8081, /healthz); namespace agents-system, layer apps-core
  • platform/images.lock.json — zero-digest placeholder for CI validation
  • platform/render-local.sh — local CI-parity render script
  • platform/production.env — non-secret env values placeholder
  • .github/workflows/deploy-preview.yml — SHA-pinned deploy validation on every platform/ PR
  • .github/workflows/publish.yml — tag-triggered publish: all three images (agent-gateway, agent-runner, agents-login) → resolve digests → deploy artifact (using agent-gateway + agents-login) → homelab-deploy registry PR
  • .github/workflows/release.yml — platform-strict release (App token mandatory, no GITHUB_TOKEN fallback); removes legacy publish-images and publish-deploy-bundle (those now live in publish.yml)

All github-workflows refs pinned at 4b444f9a50edf76e4aea4148d73407c34a1e43a4 (v0.12.1). Context ref: 64d00fe (from homelab-deploy main .context-pins.yaml).

Adds platform/ contract files and three new workflows (deploy-preview,
publish, release) that wire agent-runtime into the JorisJonkers-dev deploy
platform. Two primary workloads are registered: agent-gateway (Kotlin Spring
Boot, actuator health on port 8090) and agents-login (Node worker, /healthz
on port 8081). The agent-runner images are published by publish.yml but are
not part of the platform deploy contract (runner pods are managed by the
gateway operator). release.yml is updated to the platform-strict pattern
with mandatory App token and no GITHUB_TOKEN fallback.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
@github-actions

Copy link
Copy Markdown

Deploy Preview — agent-runtime

Environments: production
Context ref: ghcr.io/jorisjonkers-dev/cluster-deploy-context-public@sha256:64d00fe03a271dbd03a48005d0a0cc6cc5fe43df23c0e97b649c2f8b3e78b418
Workloads: 2 | Routes: 0 | Gatus entries: 0

Image refs

  • agent-gateway: ghcr.io/jorisjonkers-dev/agent-runtime/agent-gateway@sha256:0000000000000000000000000000000000000000000000000000000000000000
  • agents-login: ghcr.io/jorisjonkers-dev/agent-runtime/agents-login@sha256:0000000000000000000000000000000000000000000000000000000000000000

SC-11 Readiness Scorecard

Check Status
schema_pinned pass
context_pinned pass
no_latest_images pass
health_declared pass
route_owner_authmode_declared not_applicable
rollback_retention_acknowledged pass
no_raw_secrets fail
stateful_policy_declared not_applicable
raw_manifests_guarded not_applicable
npm_signatures_verified fail

⚠️ Escape hatch in use: one or more scorecard checks are not_applicable.


Updated by deploy-preview action on push to this PR.

@jorisjonkers-dev-agents jorisjonkers-dev-agents Bot merged commit b2c71dc into main Jul 10, 2026
12 of 13 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant