Host openbao-fetch and document full-URL consumption #4

New issue

Closed

opened 2026-08-12 17:01:59 +00:00 by ahmad · 0 comments

ahmad commented

2026-08-12 17:01:59 +00:00

Owner

Context

Cross-repo action references were proven broken on this instance in two ways: bare owner/repo forms resolve against data.forgejo.org, and the runner clones actions anonymously, so an action living in the private infrastructure repository can never be consumed. openbao-fetch therefore moves here — the move its introduction (infrastructure-vps #111) explicitly anticipated — and the documented consumption switches to the full-URL form.

Scope

In: the openbao-fetch composite action, unchanged in behavior; README documentation of both actions with full-URL pinned-tag consumption; a v2 tag after merge.
Out: removing the copy in infrastructure-vps (tracked there), migrating existing consumers.

Acceptance criteria

Given a workflow on this instance references the action as https://git.ahmadelmasri.com/amtronics/platform-actions/openbao-fetch@v2, when the job runs on the LAN runner, then the action resolves, logs in with AppRole, and renders the requested path into the output file.
Given the merged default branch, when tags are listed, then an annotated v2 tag covers both actions.

### Context Cross-repo action references were proven broken on this instance in two ways: bare owner/repo forms resolve against data.forgejo.org, and the runner clones actions anonymously, so an action living in the private infrastructure repository can never be consumed. openbao-fetch therefore moves here — the move its introduction (infrastructure-vps #111) explicitly anticipated — and the documented consumption switches to the full-URL form. ### Scope - In: the openbao-fetch composite action, unchanged in behavior; README documentation of both actions with full-URL pinned-tag consumption; a v2 tag after merge. - Out: removing the copy in infrastructure-vps (tracked there), migrating existing consumers. ### Acceptance criteria - [ ] Given a workflow on this instance references the action as https://git.ahmadelmasri.com/amtronics/platform-actions/openbao-fetch@v2, when the job runs on the LAN runner, then the action resolves, logs in with AppRole, and renders the requested path into the output file. - [ ] Given the merged default branch, when tags are listed, then an annotated v2 tag covers both actions.

ahmad added the

labels

2026-08-12 17:01:59 +00:00

ahmad self-assigned this

2026-08-12 17:01:59 +00:00

ahmad referenced this issue from a pull request that will close it,

2026-08-12 17:04:15 +00:00

feat: Host openbao-fetch and document full-URL consumption #5