hackclub/burrow
1
0
Fork 0
Code Pull requests Releases Packages Activity Actions

Use long-lived runners for TestFlight waits
Some checks failed
Build Rust / Cargo Test (push) Successful in 4m4s
Details
Build Site / Next.js Build (push) Failing after 4s
Details
Lint Governance / BEP Metadata (push) Successful in 1s
Details
Cache: Publish Nix / Publish Nix Cache (push) Successful in 3m13s
Details

Browse source
This commit is contained in:
Conrad Kramer 2026-06-07 19:49:22 -07:00
parent 99499b78f9
commit feb64febc4
5 changed files with 23 additions and 11 deletions
Download patch file Download diff file Expand all files Collapse all files

16
evolution/proposals/BEP-0009-release-infrastructure-and-store-upload-pipeline.md
View file

@ -195,12 +195,16 @@ The same change also makes the forge itself the release authority: release tags
`apple-distribute-testers` and `publish-store-uploads` wait up to 7200
seconds by default and allow Forgejo variable
`TESTFLIGHT_WAIT_PROCESSING_TIMEOUT_SECONDS` to tune that ceiling without a
repo change. `publish-store-uploads` has a separate no-`needs`
`distribute-ios-testflight` retry job for `distribute_testflight=true` and
`upload_app_store=false`, so skipped upload/signing jobs cannot suppress
distribution of an already-uploaded build. `distribute-testflight` is the
narrower one-job retry workflow when only App Store Connect processing and
tester assignment need to be retried.
repo change. TestFlight wait jobs must use `namespace-profile-linux-testflight`
or `namespace-profile-macos-large-testflight`; the generic Linux and Apple
macOS profiles expire before the 7200-second processing window. The
autoscaler-to-dispatcher timeout must stay above those runner TTLs because
dispatch requests block until the one-job runner exits. `publish-store-uploads`
has a separate no-`needs` `distribute-ios-testflight` retry job for
`distribute_testflight=true` and `upload_app_store=false`, so skipped
upload/signing jobs cannot suppress distribution of an already-uploaded build.
`distribute-testflight` is the narrower one-job retry workflow when only App
Store Connect processing and tester assignment need to be retried.
- Add `infra/releases` as the OpenTofu boundary for the GCS release and package repository backup buckets. Garage is the required S3-compatible primary distribution target after host bootstrap. `infra/identity` remains the boundary for Google KMS signing keys, the Authentik WIF pool/provider, and the runner service account.
- Serve `releases.burrow.net` and `packages.burrow.net` from the forge Caddy
edge as stable Burrow domains backed by the GCS release and package buckets.