Add standalone TestFlight retry job
Some checks failed
Build Site / Next.js Build (push) Waiting to run
Lint Governance / BEP Metadata (push) Waiting to run
Build Rust / Cargo Test (push) Has been cancelled

This commit is contained in:
Conrad Kramer 2026-06-07 19:01:31 -07:00
parent a075f5ca34
commit 86a60371d6
4 changed files with 101 additions and 87 deletions

View file

@ -195,9 +195,10 @@ The same change also makes the forge itself the release authority: release tags
`apple-distribute-testers` and `publish-store-uploads` wait up to 7200
seconds by default and allow Forgejo variable
`TESTFLIGHT_WAIT_PROCESSING_TIMEOUT_SECONDS` to tune that ceiling without a
repo change. `publish-store-uploads` can also run with
`distribute_testflight=true` and `upload_app_store=false` to distribute an
already-uploaded build without re-uploading or rebuilding the IPA.
repo change. `publish-store-uploads` has a separate no-`needs`
`distribute-ios-testflight` retry job for `distribute_testflight=true` and
`upload_app_store=false`, so skipped upload/signing jobs cannot suppress
distribution of an already-uploaded build.
- Add `infra/releases` as the OpenTofu boundary for the GCS release and package repository backup buckets. Garage is the required S3-compatible primary distribution target after host bootstrap. `infra/identity` remains the boundary for Google KMS signing keys, the Authentik WIF pool/provider, and the runner service account.
- Serve `releases.burrow.net` and `packages.burrow.net` from the forge Caddy
edge as stable Burrow domains backed by the GCS release and package buckets.