adapter: filter Forgejo jobs by labels and repository #1

Merged
gitea_admin merged 4 commits from feat/filter-jobs-by-runs-on into main 2026-07-14 17:44:57 +00:00
Contributor

Summary

  • filter KEDA job metrics against Forgejo 15 runs_on instead of the nonexistent labels job field
  • require every job requirement to be offered by the queried runner pool
  • require each job repo_id to be in the pool-specific allowlist, so public repository 85 cannot inflate trusted generic or signing capacity
  • fail closed for missing fields, invalid repository IDs, and explicitly empty filters

Validation

  • Forgejo CI go test ./... and static binary build passed at 37b16445291f6c7715c2969e5880e7dd137922c3
  • local go test ./..., go test -race ./..., go vet ./..., and static Linux/amd64 build passed
  • unit tests prove repository 85 requesting ubuntu24 or serviceradar-signing contributes zero to trusted-pool metrics

Rollout dependency

Publish this as a new version and record the immutable image digest before dependent GitOps PR 59 is made merge-ready.

## Summary - filter KEDA job metrics against Forgejo 15 `runs_on` instead of the nonexistent `labels` job field - require every job requirement to be offered by the queried runner pool - require each job `repo_id` to be in the pool-specific allowlist, so public repository 85 cannot inflate trusted generic or signing capacity - fail closed for missing fields, invalid repository IDs, and explicitly empty filters ## Validation - Forgejo CI `go test ./...` and static binary build passed at `37b16445291f6c7715c2969e5880e7dd137922c3` - local `go test ./...`, `go test -race ./...`, `go vet ./...`, and static Linux/amd64 build passed - unit tests prove repository 85 requesting `ubuntu24` or `serviceradar-signing` contributes zero to trusted-pool metrics ## Rollout dependency Publish this as a new version and record the immutable image digest before dependent GitOps PR 59 is made merge-ready.
adapter: filter jobs by Forgejo runs_on labels
Some checks failed
CI / test (pull_request) Failing after 35s
6dc280eeac
adapter: restrict metrics to allowed repositories
Some checks failed
CI / test (pull_request) Failing after 37s
90270c4b89
gitea_admin changed title from WIP: adapter: fail-closed Forgejo runs_on filtering to WIP: adapter: filter Forgejo jobs by labels and repository 2026-07-14 17:26:15 +00:00
ci: keep pull request checks daemonless
All checks were successful
CI / test (pull_request) Successful in 42s
247cd48d8a
docs: describe daemonless pull request checks
All checks were successful
CI / test (pull_request) Successful in 41s
37b1644529
gitea_admin changed title from WIP: adapter: filter Forgejo jobs by labels and repository to adapter: filter Forgejo jobs by labels and repository 2026-07-14 17:43:40 +00:00
Sign in to join this conversation.
No reviewers
No labels
No milestone
No project
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
carverauto/forgejo-keda-adapter!1
No description provided.