CI/CD
Runbooks for operating the CI/CD subsystem: the runner workers that execute jobs and the control plane that schedules them. These procedures cover bringing runners online, draining and removing nodes, and clearing or retrying stuck jobs.
Pages
- CICDv2 operator runbook — Install and attach a new host-agent, then gracefully drain and decommission a runner host without losing in-flight jobs.
- Push auto-trigger operator runbook — How the in-process push auto-trigger fires pipelines on git push, and how to gate the develop and staging branches.
- CICDv2 rollback playbook — retired — Why the
cicd_v2flag flip is no longer an operation: the flag, its overlay endpoint and its router gate were removed when the v2 dispatch controller was sunset. - CICDv2 mTLS certificate rotation — Rotate control-plane mTLS leaf certs (routine and emergency) and replace the private CA through a zero-downtime dual-trust window.
- Persistent per-repo merge worktree — The reused per-repo merge worktree, the merge mutex, crash-recovery sweeps, and the merge-timing log stages.
- Pipeline store-variable overlay audit — Audit per-branch/repo CI variable-store overlays for empty entries that silently clobber committed YAML, build-arg, or host values.
- Accessibility regression gate — Run and triage the CI accessibility (axe + pa11y)
gate, read its artifacts, and edit
vetrix-ci.ymlwithin the pipeline parser's limits. - Enable SBOM attestation on a repository's pipeline — Provision the credentials, fold an SBOM scan into a v1 or v2 pipeline job, register the artifact, attach the CycloneDX attestation, and verify it landed.