ci(gitea): guard deploy sync when NODA1 origin is not deploy-safe

This commit is contained in:
Apple
2026-03-05 11:35:56 -08:00
parent 1ff24fdb10
commit 526738dd75
2 changed files with 4 additions and 0 deletions

View File

@@ -32,6 +32,7 @@ Required repo secrets:
- `redeploy_runtime=false` only syncs git on NODA1 and runs gate checks.
- `redeploy_runtime=true` recreates `gateway` and `experience-learner` containers.
- If NODA1 git tree is dirty, workflow skips checkout/pull and still enforces `phase6_gate` (safe mode for live nodes).
- If NODA1 `origin` remote is not the expected deploy-safe repo, workflow skips checkout/pull and still enforces `phase6_gate` (prevents accidental downgrade from a stale remote).
- Workflow uses SSH key validation and `IdentitiesOnly=yes` to avoid host key collisions.
## Expected PASS