self-hosted/woodpecker
1
0
Fork 0
mirror of https://github.com/woodpecker-ci/woodpecker.git synced 2025-11-23 21:44:44 +02:00
Code Issues Releases Activity
7,027 Commits 32 Branches 96 Tags
44c8921c19613c07459d258586cfe7c205ea9cb8
Commit Graph

217 Commits

Author SHA1 Message Date
6543
44c8921c19 local backend: fix steps having logs form other steps (#5582) 
## problem

if steps where started concurrent, the stdout pipeline reader war overwritten and you randomly got the wrong command stream 
from a step.

## change

where we have possible race conditions, we now use thread save types
e.g. store the command struct and the output reader in sync.Map

also a lot of tests where added
 2025-10-01 16:58:37 +02:00
6543
2a97ae9bcd Document pipeline backend engine interface precisely (#5583) 2025-10-01 13:06:34 +02:00
6543
9edaa1e0c3 local backend test shells if unknown (#5570) 
currently if we don't know the shell we just assume posix.
this adds a small test, to ensure it is and fail gracefully before doing weird stuff.

## Test Conf

```yaml
skip_clone: true
steps:
  build:
    image: "true"
    commands:
      - echo "building..."
```
 2025-10-01 12:29:48 +02:00
6543
e11f110db0 local backend: fix windows cmd.exe command escaping (#5569) 2025-09-30 16:52:43 +02:00
Harri Avellan
0fc615c178 Trace errors during SetupWorkflow, make service step setup errors visible to user (#5559) 
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2025-09-28 21:56:43 +02:00
Henrik Huitti
a3c3846c16 fix(k8s): add retry logic with exponential backoff for pod log streaming (#5550) 2025-09-25 18:37:51 +00:00
Henrik Huitti
0bd69e876f Add task UUID label to Kubernetes pods (#5544) 2025-09-23 20:30:20 +02:00
Gusted
d2ea85e55f fix: allow spaces in WOODPECKER_PLUGINS_PRIVILEGED (#5494) 2025-09-09 22:33:53 +00:00
renovate[bot]
d95b7a43a2 fix(deps): update golang-packages (#5467) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
 2025-08-28 11:45:38 +02:00
Robert Kaussow
dc7795e64b Add fsGroupChangePolicy option to Kubernetes backend (#5416) 
Co-authored-by: Lilly Sell <sell@b1-systems.de>
 2025-08-15 10:28:38 +02:00
scottshotgg
d7495357d5 Add Agent-level Tolerations setting (#5266) 
Co-authored-by: pre-commit-ci[bot] <66853113+pre-commit-ci[bot]@users.noreply.github.com>
 2025-08-10 10:12:42 +02:00
Lilly
147256e3a8 feat(k8s): k8s priority class name config (#5391) 2025-08-09 16:33:47 +02:00
Harri Avellan
e9ab04f88b Support namespace per org for Kubernetes step secrets (#5383) 
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2025-08-05 09:27:18 +02:00
Henrik Huitti
79e4dd5380 feat(k8s): Kubernetes namespace per organization (#5309) 2025-07-22 17:22:26 +03:00
Harri Avellan
5c00b9d74b Prevent secrets from leaking to Kubernetes API Server logs (#5305) 2025-07-14 17:45:13 +03:00
qwerty287
fe5ea7ad3b Simplify backend types (#5299) 2025-07-05 12:59:17 +03:00
Patrick Schratz
e92706bfd8 Revert "kubernetes: prevent secrets from leaking to api-server logs" (#5293) 
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
 2025-07-05 09:40:40 +03:00
Harri Avellan
5e052f5579 kube backend: prevent secrets from leaking to Kubernetes apiserver logs (#5196) 2025-06-14 22:44:33 +02:00
renovate[bot]
71f24f5d44 fix(deps): update golang-packages to v28.2.1+incompatible (#5217) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <qwerty287@posteo.de>
 2025-06-06 07:20:03 +02:00
Robert Kaussow
496498274c Use docker go client directly (#5134) 2025-04-26 13:20:36 +02:00
renovate[bot]
c45657721f fix(deps): update golang-packages (#5121) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2025-04-25 15:55:30 +03:00
renovate[bot]
e7243e3ff5 fix(deps): update golang-packages (#5111) 
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2025-04-22 10:55:07 +02:00
winston
47e6d159d1 add nushell support to local backend (#5043) 2025-04-01 21:02:25 +03:00
Robert Kaussow
286794a800 Bump golangci-lint to v2 (#5034) 2025-03-31 18:55:48 +02:00
Jener Rasmussen
c392250384 Replace illegal characters in Kubernetes labels (#5013) 
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
 2025-03-25 20:24:55 +01:00
Jener Rasmussen
8d94071e2f Tag pipeline with source information (#4796) 
Co-authored-by: oauth <woodpecker-bot@obermui.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
 2025-03-22 13:45:44 +01:00
hhomar
f47165ff9f kubernetes: create service for detached steps (#4892) 
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2025-02-25 07:16:43 +01:00
Robert Kaussow
00aa968afa Revert "Tag pipeline with source information (#4771)" (#4794) 2025-01-31 14:53:41 +02:00
Jener Rasmussen
846fd8dc51 Tag pipeline with source information (#4771) 
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
 2025-01-30 13:03:58 +01:00
David Muthy
437d6a74a5 chore: fix some function names in comment (#4769) 
Signed-off-by: damuzhi0810 <rust@before.tech>
 2025-01-23 19:11:36 +02:00
qwerty287
0fba54d3cc Add hosts for detached steps (#4674) 2025-01-06 18:06:38 +02:00
qwerty287
7c31bcf327 Revert volumes/network list (#4656) 
Co-authored-by: Robert Kaussow <xoxys@rknet.org>
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
 2025-01-04 11:56:26 +01:00
Anbraten
5d3300824d Fix workflow volume and network config (#4650) 2025-01-01 16:21:57 +01:00
qwerty287
428ba689cb Remove workflow-level volumes and networks (#4636) 2024-12-30 10:34:59 +01:00
qwerty287
afa6dee30b Migrate away from goblin (#4624) 
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2024-12-30 08:08:53 +02:00
qwerty287
fdfabe6368 Support Git as only VCS (#4346) 
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
 2024-12-27 22:49:19 +01:00
qwerty287
81b74025d4 Update Go imports paths (#4605) 
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
 2024-12-22 10:44:34 +01:00
qwerty287
1ec785c7e9 Weakly decode backend options (#4577) 2024-12-16 18:37:38 +01:00
Robert Kaussow
fe11db6cd3 Replace discontinued mitchellh/mapstructure by maintained fork (#4573) 2024-12-16 07:41:49 +01:00
Robert Kaussow
786a8fb003 Add user as docker backend_option (#4526) 2024-12-08 12:02:35 +01:00
tsufeki
db45794091 Fix apparmorProfile being ignored when it's the only field (#4507) 2024-12-03 17:29:03 +02:00
6543
f829c07f3a Docker Backend: fully support windows container (#4381) 2024-11-26 11:48:48 +01:00
6543
ebf9f9ccbb Add dns config option to official feature set (#4418) 
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
 2024-11-25 17:59:00 +01:00
Patrick Schratz
5d750322bc Normalize aarch64 -> arm64 for docker backend (#4451) 2024-11-25 16:17:57 +01:00
6543
07baae28af address review lint issues (#4354) 2024-11-11 15:25:31 +01:00
Patrick Schratz
b5915f605b fix error="io: read/write on closed pipe" on k8s backend (#4281) 2024-11-08 11:00:03 +01:00
6543
bf5405b6cc Respect directory option for steps again (#4319) 2024-11-06 23:21:56 +01:00
Patrick Schratz
560eab96f0 Kubernetes | Docker: Add support for rootless images (#4151) 2024-11-02 18:07:27 +01:00
Andrew Melnick
b52b021acb Implement registries for Kubernetes backend (#4092) 
According to [the documentation](https://woodpecker-ci.org/docs/administration/backends/kubernetes#images-from-private-registries), per-organization and per-pipeline registries are currently unsupported for the Kubernetes backend.

This patch implements this missing functionality by creating and deleting a matching secret for each pod with a matched registry, using the same name, labels, and annotations as the pod, and appending it to its `imagePullSecrets` list.

This patch adds tests for the new functionality, and has been manually end-to-end-tested in KinD by using a private image hosted in the matching gitea instance.

This will require updating the matching helm charts to add the create/delete permissions to the agent role, which **is already done**.

close  #2987
 2024-09-30 01:03:05 +01:00
6543
6ad20ced5b Move docker resource limit settings from server to agent (#3174) 
so you can set it per agent and not per server
 2024-09-26 16:56:59 +01:00