9 Commits

Author	SHA1	Message	Date
will.anderson	b563fff062	fix(ci/docker): pre-download artifacts before build, remove --secret ... The Dockerfile's --mount=type=secret path was corrupting the SA key JSON due to control character handling differences. Pre-download soul + El SDK in the CI workflow (using already-authenticated gcloud) and COPY them from the build context. No credentials needed inside the Docker build.	2026-06-18 14:04:03 -05:00
will.anderson	fdd946b3d4	fix(ci): serialize build+deploy via concurrency group to prevent Docker exhaustion	2026-06-18 13:43:52 -05:00
will.anderson	de8f021a55	fix(ci): install docker-buildx-plugin for BuildKit secret support	2026-06-18 13:42:56 -05:00
will.anderson	d0c4d19faa	fix(ci): prune Docker state before deploy to recover disk space ... Previous builds leave cached layers and images on the runner. Add a docker system prune at start of deploy to avoid container-creation failures from disk exhaustion.	2026-06-18 13:15:52 -05:00
will.anderson	b715a5dffb	fix(ci): enable DOCKER_BUILDKIT and fix SHA extraction in deploy ... --secret requires BuildKit; DOCKER_BUILDKIT=1 enables it on the legacy Docker client. Also add GITHUB_SHA fallback and git rev-parse last-resort so the image tag is never empty.	2026-06-18 12:42:25 -05:00
will.anderson	46a7a4e9d8	Set USE_GKE_GCLOUD_AUTH_PLUGIN for GKE deploy workflow ... Modern gcloud CLI (>= 400) requires this env var so kubectl uses the installed gke-gcloud-auth-plugin binary instead of the deprecated application-default credentials path. Without it, kubectl commands silently fail even after get-credentials succeeds.	2026-06-18 12:23:49 -05:00
will.anderson	764250c4f6	fix(soul): repair CI — drop gpg/TTY and import safety/stewardship/imprint layers	2026-06-11 12:33:22 -05:00
will.anderson	cc07648ae1	fix: build engram from source in Docker image ... The engram binary was never published to Artifact Registry (foundation-dev/engram package does not exist). Updated Dockerfile to build engram from source using the El SDK packages (el-elc, el-runtime-c, el-runtime-h) from foundation-dev. Also: - Switch runtime base to Ubuntu 24.04 (GLIBC 2.39 required by elc-compiled binaries) - Add -lm to engram link flags (el_runtime.c uses pow/sqrt/log/sin/cos/exp) - Update deploy-gke.yaml to clone neuron-technologies/engram into build context	2026-05-11 12:39:36 -05:00
will.anderson	e1a7c71a87	feat(gke): add Dockerfile, deploy scripts, and GKE CI workflow ... Dockerfile: downloads linux/amd64 soul binary from Artifact Registry (foundation-dev/neuron-soul) into ubuntu:22.04 runtime image. Pushes to neuron-api Docker repo as neuron-soul:<sha>. scripts/blue-green-deploy.sh: swaps active slot on GKE — sets image, scales new slot to 1, flips service selector, scales old slot to 0. scripts/seed-engram-gke.sh: downloads latest GCS backup, extracts snapshot.json, copies into neuron-engram-data PVC via a seed Job. .gitea/workflows/deploy-gke.yaml: triggers on push to main, auto-detects idle slot, builds Docker image from Artifact Registry binary, blue-green deploys to neuron-prod on GKE neuron-platform cluster.	2026-05-09 20:30:05 -05:00