feat(#273): Add capability-based authorization for federation #303

Closed
jason.woltje wants to merge 0 commits from harbor-to-gitea-migration into main
Owner

Implements capability-based authorization for federation endpoints. Closes #273.

Implements capability-based authorization for federation endpoints. Closes #273.
jason.woltje added 2 commits 2026-02-04 01:51:30 +00:00
feat(infra): Migrate from Harbor to Gitea Packages registry
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
ci/woodpecker/pr/woodpecker Pipeline failed
bb144a7d1c
BREAKING CHANGE: Container registry changed from Harbor to Gitea Packages

Changes:
- Update .woodpecker.yml to push to git.mosaicstack.dev instead of reg.mosaicstack.dev
- Change secret names: harbor_username/harbor_password → gitea_username/gitea_token
- Update docker-compose.prod.yml image references
- Update all three images: api, web, postgres

Registry Migration:
- Old: reg.mosaicstack.dev (Harbor)
- New: git.mosaicstack.dev (Gitea Packages)
- Old: reg.diversecanvas.com (Harbor)
- New: git.mosaicstack.dev (Gitea Packages)

Manual Steps Required:
1. Create Gitea personal access token with 'read:package' and 'write:package' scopes
2. Add Woodpecker secrets:
   - gitea_username: Your Gitea username
   - gitea_token: Personal access token from step 1
3. Test build pipeline
4. Delete old Harbor secrets after validation

Related: ADR-001 in jarvis-brain
See: jarvis-brain/docs/migrations/harbor-to-gitea-packages.md
Merge branch 'develop' into harbor-to-gitea-migration
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
ci/woodpecker/manual/woodpecker Pipeline failed
ci/woodpecker/pr/woodpecker Pipeline failed
f0be6a31e4
jason.woltje closed this pull request 2026-02-04 01:52:09 +00:00
Some checks failed
ci/woodpecker/push/woodpecker Pipeline failed
ci/woodpecker/manual/woodpecker Pipeline failed
ci/woodpecker/pr/woodpecker Pipeline failed

Pull request closed

Sign in to join this conversation.