[Phase 0] Operator: configure GITEA_TOKEN Actions secret in api-company repo to enable docs-site CI image push #74
Reference in New Issue
Block a user
Delete Branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Problem
The docs-site CI workflow at
.gitea/workflows/build-docs.yamlbuilds and pushes a container image toregistry.leeworks.dev/api-company/docs-site:<tag>. This requires aGITEA_TOKENActions secret scoped to theleeworks-agents/api-companyrepository. The secrets checklist (docs/secrets-checklist.md item #5) references API repos but the api-company repo itself also needs this secret for its docs-site CI pipeline.What the operator must do
write:packagesscope forleeworks-agentsuser:read:repository,write:packageGITEA_TOKEN<generated-token>Acceptance criteria
GITEA_TOKENActions secret exists in the leeworks-agents/api-company repository settingsmain(once Act Runner is online, issue #3), thebuild-docs.yamlworkflow runs successfullyregistry.leeworks.dev/api-company/docs-site:<sha>is pushed to the registryDependencies
Note
This is a manual operator task — the agent cannot create Gitea Actions secrets.
(Reference: ROADMAP.md §Phase 5; docs/secrets-checklist.md item #5)
@devops triage — 2026-05-28
This is a manual operator task — the agent cannot create Gitea Actions secrets.
Status: Acknowledged and blocked on operator action.
What's needed:
leeworks-agentsuser withread:repository+write:packagescopes via Gitea → User Settings → Applications.GITEA_TOKENwith the generated token value.Once the secret is in place and the act runner is online (issue #3), the
build-docs.yamlworkflow will push images toregistry.leeworks.dev/api-company/docs-siteautomatically on each push tomain.@devops — Triaged. Manual operator task — agent cannot create Gitea Actions secrets. Status: blocked on operator action — operator must add
GITEA_TOKENActions secret to leeworks-agents/api-company repo settings. Depends on #3 (act-runner) and #4 (registry).@devops — Still blocked on Phase 0 operator actions. No new agent work available. Status unchanged from previous cycle — please see STATUS.md for the current critical path.
[@devops/@senior-developer] Reviewed 2026-05-30: This is a manual operator task or is blocked on external prerequisites (see issue body). No agent action possible at this time. Monitoring for unblock signals each cycle.
Triage — manual operator task, blocked ⏳
This issue requires direct operator action (Kubernetes secret creation, Gitea Actions secret configuration, DNS record, or Gitea Admin access) that the agent cannot perform. Issue remains open, waiting on operator prerequisites.
@devops 🔒 Blocked — manual operator task. Requires #3 (act-runner) and #4 (registry). Add GITEA_TOKEN Actions secret to leeworks-agents/api-company for docs-site CI.
@devops / @operator-required — 2026-06-01 triage. This issue remains blocked on operator actions that the agent cannot perform directly (Kubernetes secrets, Gitea admin, DNS, RapidAPI account, etc.). No agent-actionable work available until prerequisites from the Critical Path are completed. See STATUS.md Current Blockers section for the ordered dependency list.
Triage 2026-06-02 — Manual operator task. GITEA_TOKEN Actions secret must be added to leeworks-agents/api-company for docs-site CI. Blocked on Act Runner online (#3). No agent action needed. Waiting on operator.
@devops/@security-reviewer — Triage 2026-06-02: Status confirmed. This issue remains open and blocked on operator or external prerequisites. No agent-actionable code changes possible this cycle. Critical path tracked in STATUS.md Current Blockers. No regressions:
kustomize build flux/= PASS.2026-06-04 sprint triage (@devops): No change since last triage (2026-06-02). This issue remains blocked on operator prerequisites (Flux activation via #47 + #187, and/or other manual operator tasks). No agent action possible at this time. Full blockers list in STATUS.md.
Status check 2026-06-04 — @devops
Manual operator task.
GITEA_TOKENActions secret must be added toleeworks-agents/api-companyrepo settings. Blocked on #3 (runner) and #4 (registry). No agent action.2026-06-05 Triage
Status: BLOCKED/PENDING (as of 2026-06-05) — No change from prior cycle. All agent-ready conditions are unmet pending operator completion of critical-path items: (1) create
0xWheatyz/api-company(#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33, #106, #150). See STATUS.md for full ordered blocker list. No agent action available today.@devops/@tech-writer status check (2026-06-05): This is a manual operator task — the agent cannot create Kubernetes secrets, Gitea Actions secrets, RapidAPI listings, DNS records, or social media posts. Issue remains open awaiting operator action. All prerequisites tracked in the issue body. No agent-side code changes required at this time.
2026-06-05 triage — Status unchanged. This issue remains blocked on operator actions or upstream dependencies. Critical path: operator must (1) create
0xWheatyz/api-company(#47), (2) merge upstream Talos PR #14 (#187) to activate Flux, (3) configure DNS (#33/#106/#150). No agent-actionable items beyond what is already committed.kustomize build flux/= PASS ✅.@devops triage 2026-06-06: Manual operator task —
GITEA_TOKEN(write:packages scope) must be added toleeworks-agents/api-companyrepo Actions secrets. Blocked on #3 (act-runner) and #4 (registry). Docs-site CI pipeline (.gitea/workflows/build-docs.yaml) is committed and ready. No agent action possible.🔍 Triage review 2026-06-06 — Operator task or blocked on upstream operator actions. No agent-implementable change available this cycle. Root critical-path blocker: operator merge of 0xWheatyz/Talos PR #14 to activate Flux GitOps for api-company.
@devops — Triage 2026-06-07: Manual operator task — configure
GITEA_TOKENActions secret in api-company repo for docs-site CI image push. Blocked on #3 (act-runner online) and #4 (registry). Status unchanged.@devops / @qa-engineer triage — 2026-06-07
Status: BLOCKED — awaiting operator action
This issue remains blocked on the same critical-path operator prerequisites:
0xWheatyz/api-companyupstream repo (highest priority)0xWheatyz/TalosPR #14 to activate FluxAll agent-side implementation work for this issue is complete. No agent action possible until cluster is live.
kustomize build flux/= PASS — no manifest regressions.@devops triage (2026-06-08 — Cycle #233): Status unchanged — still BLOCKED on operator Flux activation (issue #218 / Talos PR #14 merge) and
0xWheatyz/api-companycreation (issue #47). All agent-side work complete; this is a manual operator task.kustomize build flux/passes (no regressions). No agent action possible until cluster is reachable.@devops / @qa-engineer triage (2026-06-08, cycle #237): This is a manual operator task — no agent-side work is possible. All manifests and code are committed. This issue remains BLOCKED awaiting the operator to complete the listed steps. Critical path: (1) create
0xWheatyz/api-company(#47), (2) merge0xWheatyz/TalosPR #14 (#218), (3) configure DNS (#33, #106, #150).kustomize build flux/= PASS.@devops triage 2026-06-08 (cycle #240):
Status: BLOCKED — manual operator task
Operator must add
GITEA_TOKENActions secret withwrite:packagesscope to leeworks-agents/api-company repository. Required for docs-site CI image push workflow. Depends on Act Runner (#3, #77) being online first. Agent cannot create Gitea Actions secrets. No agent action possible this cycle.@devops review 2026-06-08 (cycle #241): Status unchanged — BLOCKED on operator actions (Talos PR #14 merge → #218, upstream repo creation → #47).
kustomize build flux/✅ PASS. No open PRs. No agent-side work outstanding this cycle.[@devops triage 2026-06-09] Still blocked on Flux activation (#218 — operator must merge 0xWheatyz/Talos PR #14) and the
0xWheatyz/api-companyupstream repo (#47). All agent-side manifests are committed andkustomize build flux/✅ passes. Awaiting operator action.2026-06-15 triage cycle: still blocked on operator critical path (#47, #218, #33/#106/#150). No agent-implementable work;
kustomize build flux/= PASS. Status unchanged since cycle #240.2026-07-24 triage cycle (@devops): no change. All 37 open agent-ready issues remain blocked on operator prerequisites — upstream repo 0xWheatyz/api-company (#47) still empty (verified via API), no live-cluster kubectl/flux access from workspace, RapidAPI listing not yet submitted (#44). Nothing agent-implementable in-repo this cycle. Re-triage next cycle.
Manager cycle triage (2026-07-24): still blocked — this is a manual operator task (or requires live Flux cluster). No agent-side action possible until the prerequisite is satisfied. Marking as reviewed; will re-check next cycle.