Onboarding steps

1. Find or create a maintainers group for you project
2. Add the project to https://gitlab.com/gitlab-com/gl-infra/infra-mgmt/-/blob/main/data/projects/release-platform/repos.yaml
   • this will generate Canonical, Security, and Build projects
3. prepare your project scaffold using copier
   • when asked about the release platform, say Yes
4. commit the scaffolded project and push it to canonical
5. If you need runway deployments: follow the onboarding guide but instead on Step 3, do not add the CI component, instead add the runway project id to the already existing release-platform template
6. expect a 🎢

@skarbek I wonder if we could enroll them only in the infra-mgmt part of the platform, this will give them the mirroring, the merge rules, and a bunch of vault token they will not use.

Will this be enough @fcatteau? CI will entirely be on your team, we will not be able to support the openbao workflow at the moment as we are building for artifact registry and other similar components.

Alessio Caiazza (de4f89f6) at 17 Mar 12:40

Alessio Caiazza (8e528642) at 17 Mar 12:38

@madelacruz thanks for working on this, do you have a test MR showing how this actually work in practice?

suggestion: when discussing the Release Platform design doc, we got comments about how we use the mirror terminology and the confusion it can generate.

Canonical isn't really a mirror, so an improvement could be to use if-{canonical,security-build}-project instead.

Summary

The pipeline was failing due to two issues:

1. editorconfig_check job: The CODEOWNERS file was missing a final newline character, violating the .editorconfig rule insert_final_newline = true
2. autolabels 🏷️ job: The merge request #604 was missing a required type:: label

Changes

• ✅ Added a final newline character to the end of the CODEOWNERS file
• ✅ Verified file ends with newline using multiple methods
• ✅ Confirmed line endings are LF (Unix-style) as required
• ✅ Verified no trailing whitespace
• ✅ Ensured compliance with all .editorconfig rules
• ✅ Committed fix with hash: 722135ebb953a1ab115c6234cfe8f0832c625697

Verification

editorconfig_check Job: ✅ Fixed Automatically

• File ends with newline (verified with multiple methods)
• Line endings are LF (Unix-style) as required
• No trailing whitespace
• Complies with all .editorconfig rules
• Expected Result: The editorconfig_check CI job will now pass when the pipeline runs

autolabels 🏷️ Job: ⚠️ Requires Manual Action

• The GitLab API tool required to add labels programmatically is not available
• Required Action:
  1. Navigate to: !604
  2. Click "Edit" in the right sidebar under "Labels"
  3. Add the label: type::maintenance (recommended for this MR)
  4. Save the changes
• Rationale: This MR adds code owners for Renovate Bot dependency management, which is a maintenance activity
• Expected Result: Once the label is added, the autolabels 🏷️ job will pass on the next pipeline run

Fixes failing pipeline on !604

Session 3161553

Summary

Add additional CODEOWNERS to reduce bus-factor risk.

Proposed reviewers: @nolith @tmillhouse

Related: mstaff#529

@splattael workhorse expects to be colocated with puma, this is the reason why they share a POD.

If you run webservice in edit mode, the same should be for workhorse

Alessio Caiazza (d09cf4f0) at 17 Mar 10:53

Summary

The system attribute in nixpkgs has been deprecated and renamed to stdenv.hostPlatform.system (since 2025-10-28). The nixos and darwin module definitions use pkgs.system to look up packages, which triggers this evaluation warning:

evaluation warning: 'system' has been renamed to/replaced by 'stdenv.hostPlatform.system'

Changes

• Replaced all 6 instances of pkgs.system with pkgs.stdenv.hostPlatform.system in the nixosModules.default and darwinModules.default module definitions in flake.nix

AI-assisted: GitLab Duo Agentic Chat (Claude Opus 4.6)

Alessio Caiazza (df3ff657) at 17 Mar 10:53

... and 1 more commit

Alessio Caiazza (d04fa769) at 17 Mar 10:01

Summary

The system attribute in nixpkgs has been deprecated and renamed to stdenv.hostPlatform.system (since 2025-10-28). Using it as a callPackage argument in lib/binary-release.nix triggers this evaluation warning for every package built through it:

evaluation warning: 'system' has been renamed to/replaced by 'stdenv.hostPlatform.system'

Changes

• Removed system from callPackage arguments in lib/binary-release.nix
• Derive system from stdenvNoCC.hostPlatform.system in a let binding instead

AI-assisted: GitLab Duo Agentic Chat (Claude Opus 4.6)

Alessio Caiazza (affeb341) at 17 Mar 10:01

... and 1 more commit

Summary

The system attribute in nixpkgs has been deprecated and renamed to stdenv.hostPlatform.system (since 2025-10-28). The nixos and darwin module definitions use pkgs.system to look up packages, which triggers this evaluation warning:

evaluation warning: 'system' has been renamed to/replaced by 'stdenv.hostPlatform.system'

Changes

• Replaced all 6 instances of pkgs.system with pkgs.stdenv.hostPlatform.system in the nixosModules.default and darwinModules.default module definitions in flake.nix

AI-assisted: GitLab Duo Agentic Chat (Claude Opus 4.6)

Alessio Caiazza (d09cf4f0) at 17 Mar 09:35