feat: carry the Docker and Helm clients #1
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "land/task/forge-projection-clients"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
feat: carry the Docker and Helm clients
The release lane could not project an image or a chart from any product,
and the reason was not configuration.
plumb ship oci buildrunsdocker buildandplumb ship chart packagerunshelm package, while the jobthat would run them executes inside this image, which carried neither. A
product declaring
[release.oci]therefore passed its own doctor and thenhad nowhere to be built; the medium was undeclarable rather than merely
unconfigured.
The clients arrive the way every other tool here does. Docker comes from
the pinned
docker:27-clistage this repository already trusts in its ownworkflows, and its binary is static, so a Debian base runs it unchanged.
Helm comes from a release tarball pinned by version and SHA-256, checked
before it is unpacked.
They are clients and nothing more. The image carries no daemon and no
cluster, so a job that projects onto those media supplies its own endpoint
and credentials, exactly as this repository's own lanes already do with
DOCKER_HOST. The guard proves the clients run and thathelm packageand
helm pushanswer, which is the whole of the claim.Co-Authored-By: Claude Opus 5 (1M context) noreply@anthropic.com