feat(actions): provision chart updater app key - #42
Merged
Conversation
Contributor
OpenTofu CI passedValidation output (redacted, last 12000 characters) |
OpenTofu CI passedValidation output (redacted, last 12000 characters) |
Summary
CHART_UPDATER_GITHUB_APP_PRIVATE_KEYonly to thechartsrepositorysecrets/secrets.yamlValidation
sops filestatus secrets/secrets.yamlreports encryptedApply blocker resolved
Previous
mainapplies racedtfroot-namecheapfile creation against branch protection creation. GitHub rejected the direct file commits once required checks became active. The explicit dependency preserves both controls while making initial repository setup deterministic.Rollout
Merge and allow the environment-gated apply to finish before merging the dependent
chartsworkflow change.