Skip to content

feat(dapr-workflows): homerun sink for template-execution - #698

Merged
patrick-hermann-sva merged 1 commit into
mainfrom
feat/dapr-workflows-template-execution-homerun
Oct 21, 2026
Merged

patrick-hermann-sva merged 1 commit into
mainfrom
feat/dapr-workflows-template-execution-homerun

Conversation

@patrick-hermann-sva

Copy link
Copy Markdown
Contributor

Chart side of stuttgart-things/dapr-workflows#68 (issue dapr-workflows#55): VM runs of request-vm / request-vm-deletion report their checkpoints to homerun2 → notification-catcher → Teams, like cluster builds.

Changes (cicd/dapr-workflows/install, platforms/cicd/appset-dapr-workflows.yaml):

  • templateExecution.homerunPitchURL (values, schema, README). The AppSet fills it from the SAME annotation as cluster-build-watch, cicd-platform.stuttgart-things.com/homerun-pitch-url, so a cluster that pitches builds also pitches VM runs.
  • Deployment patch: HOMERUN_PITCH_URL, HOMERUN_AUTH_TOKEN_FILE=/var/run/secrets/homerun/token, Secret homerun-pitcher-token mounted optional: true (a missing token degrades the sink, not the pod) — same wiring as cluster-build-watch.
  • ExternalSecret homerun-pitcher-token in backstage-workflows from the shared homerun-pitch entry: a Secret cannot be mounted across namespaces, so each worker namespace gets its own copy.

Verified: helm lint ok; helm template with labda-cicd-test1-like values renders env, mount, volume and the ExternalSecret; with the sink off the render is identical to main (diff empty).

Order / rollout:

  1. Merge dapr-workflows#68 → release builds a new image + kustomize tag.
  2. This PR can merge before or after: the current pin 6e9fc1e70b37 ignores the env. Pin bump is not in here — Renovate (or a follow-up) moves templateExecution.kustomize.targetRevision, image.tag and trigger.targetRevision to the feat(infra/prometheus): port flux prometheus to app-of-apps #68 release tag.
  3. Roll the new image when no BackstageTemplateRun is in flight (the workflow schedules new activities; an in-flight instance would replay against an older history).
  4. notification-catcher on sthings-app must route system: backstage-template-execution to Teams (stuttgart-things, separate PR).

🤖 Generated with Claude Code

https://claude.ai/code/session_016TtmNGbCHXQGtqnrT926ZN

templateExecution.homerunPitchURL, from the same annotation
cicd-platform.stuttgart-things.com/homerun-pitch-url as cluster-build-watch:
HOMERUN_PITCH_URL + HOMERUN_AUTH_TOKEN_FILE and the optional
homerun-pitcher-token mount on the worker, and an ExternalSecret for that
Secret in backstage-workflows (shared homerun-pitch entry, one copy per
namespace). Takes effect with an image carrying dapr-workflows#55; an
older image ignores the env.

Render with the sink off is identical to main.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_016TtmNGbCHXQGtqnrT926ZN
@patrick-hermann-sva
patrick-hermann-sva merged commit 1a8a5d0 into main Oct 21, 2026
5 checks passed
@patrick-hermann-sva
patrick-hermann-sva deleted the feat/dapr-workflows-template-execution-homerun branch October 21, 2026 05:44
@github-actions

Copy link
Copy Markdown

🎉 This PR is included in version 0.91.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀

This branch was successfully deployed

1 active deployment
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant