feat(oci): operator compose example + public registry mirror #22

Merged

nrupard merged 1 commit from feat/operator-compose-and-public-mirror into main

2026-05-15 17:37:56 +02:00

nrupard commented

2026-05-15 17:37:50 +02:00

Owner

Ships the self-host deployment surface for the Milestone 1 acceptance criteria. oci-build/compose.example.yml is a reference compose file an operator can copy verbatim, edit the four MOKOSH_* env vars, and docker compose up to reach a working SPA instance backed by their own mokosh-server. The container is stateless, multi-arch, and applies updates by bumping the tag and re-pulling. The CI workflow gains a "Mirror image to public registry" step that runs docker buildx imagetools create to copy each tag's manifest list (multi-arch preserved) from psa-systems-private to psa-systems-public without a rebuild. The step is gated on vars.PSA_SYSTEMS_PUBLIC_PACKAGE_OWNER being set so this PR can land before ops creates the public package owner; once the var and matching PSA_SYSTEMS_PUBLIC_PACKAGE_PAT secret are in place, the next push to main starts mirroring automatically. README gains a "Self-host deployment" section pointing at the compose example and documenting the four env vars.

Depends on feat/runtime-config-injection (PR for the entrypoint that consumes the MOKOSH_* env vars). Merge that first.

Signed-off-by: nrupard natrsmith11@gmail.com

Ships the self-host deployment surface for the Milestone 1 acceptance criteria. `oci-build/compose.example.yml` is a reference compose file an operator can copy verbatim, edit the four MOKOSH_* env vars, and `docker compose up` to reach a working SPA instance backed by their own mokosh-server. The container is stateless, multi-arch, and applies updates by bumping the tag and re-pulling. The CI workflow gains a "Mirror image to public registry" step that runs `docker buildx imagetools create` to copy each tag's manifest list (multi-arch preserved) from `psa-systems-private` to `psa-systems-public` without a rebuild. The step is gated on `vars.PSA_SYSTEMS_PUBLIC_PACKAGE_OWNER` being set so this PR can land before ops creates the public package owner; once the var and matching `PSA_SYSTEMS_PUBLIC_PACKAGE_PAT` secret are in place, the next push to main starts mirroring automatically. README gains a "Self-host deployment" section pointing at the compose example and documenting the four env vars. Depends on feat/runtime-config-injection (PR for the entrypoint that consumes the MOKOSH_* env vars). Merge that first. Signed-off-by: nrupard <natrsmith11@gmail.com>

nrupard added 1 commit

2026-05-15 17:37:50 +02:00

feat(oci): operator compose example + public registry mirror

Check / clippy + fmt + tests (pull_request) Failing after 3s

Details

Create release / Create release from merged PR (pull_request) Has been skipped

Details

ee4cfc7fc4

Ships the self-host deployment surface for the Milestone 1 acceptance criteria. `oci-build/compose.example.yml` is a reference compose file an operator can copy verbatim, edit the four MOKOSH_* env vars, and `docker compose up` to reach a working SPA instance backed by their own mokosh-server. The container is stateless, multi-arch, and applies updates by bumping the tag and re-pulling. The CI workflow gains a "Mirror image to public registry" step that runs `docker buildx imagetools create` to copy each tag's manifest list (multi-arch preserved) from `psa-systems-private` to `psa-systems-public` without a rebuild. The step is gated on `vars.PSA_SYSTEMS_PUBLIC_PACKAGE_OWNER` being set so this PR can land before ops creates the public package owner; once the var and matching `PSA_SYSTEMS_PUBLIC_PACKAGE_PAT` secret are in place, the next push to main starts mirroring automatically. README gains a "Self-host deployment" section pointing at the compose example and documenting the four env vars.

Depends on feat/runtime-config-injection (PR for the entrypoint that consumes the MOKOSH_* env vars). Merge that first.

Signed-off-by: nrupard <natrsmith11@gmail.com>