From 33ec470d209ae7515b49ccff9d45323fcc9bf8a0 Mon Sep 17 00:00:00 2001 From: "blacksmith-sh[bot]" <157653362+blacksmith-sh[bot]@users.noreply.github.com> Date: Tue, 1 Sep 2026 20:31:45 +0000 Subject: [PATCH 1/3] Migrate workflows to Blacksmith --- .github/workflows/ci.yaml | 46 +++++++------------ .github/workflows/conventional-label.yml | 2 +- .github/workflows/image-scan.yaml | 12 ++--- .github/workflows/label-pull-requests.yml | 2 +- .github/workflows/migration-immutability.yaml | 2 +- .github/workflows/sqlc-generate-check.yaml | 2 +- .github/workflows/stalebot.yaml | 4 +- .github/workflows/tag.yaml | 8 ++-- 8 files changed, 30 insertions(+), 48 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index a8882ba615..ac84cfdea8 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -24,7 +24,7 @@ env: BUILDX_VERSION: v0.23.0 jobs: setup: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 outputs: cache-key: ${{ steps.cache-key.outputs.key }} steps: @@ -41,7 +41,7 @@ jobs: env: VERSION: v0.0.1-test SUBSTRATE_VERSION: 0.0.22 - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 timeout-minutes: 30 steps: - name: Checkout repository @@ -69,14 +69,8 @@ jobs: # See https://github.com/openai/codex/issues/14919 run: | sudo sysctl -w kernel.apparmor_restrict_unprivileged_userns=0 || true - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 - with: - name: ${{ env.BUILDX_BUILDER_NAME }} - version: ${{ env.BUILDX_VERSION }} - platforms: linux/amd64 - use: "true" - driver-opts: network=host + - name: Setup Blacksmith Builder + uses: useblacksmith/setup-docker-builder@v1 - name: Set up Helm uses: azure/setup-helm@v5.0.1 @@ -187,7 +181,7 @@ jobs: proto-check: name: Protobuf Contract Check - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 @@ -209,7 +203,7 @@ jobs: - setup env: VERSION: v0.0.1-test - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 strategy: fail-fast: false matrix: @@ -255,7 +249,7 @@ jobs: - setup env: VERSION: v0.0.1-test - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 strategy: fail-fast: false matrix: @@ -297,7 +291,7 @@ jobs: kubectl logs -n kagent deployment/kagent-controller || true go-unit-tests: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 @@ -324,7 +318,7 @@ jobs: helm-unit-tests: env: VERSION: v0.0.1-test - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 @@ -348,7 +342,7 @@ jobs: helm unittest helm/tools/grafana-mcp ui-tests: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read pull-requests: write @@ -415,7 +409,7 @@ jobs: - golang-adk - claude-harness - codex-harness - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 services: registry: image: registry:2 @@ -428,14 +422,8 @@ jobs: uses: docker/setup-qemu-action@v4 with: platforms: linux/amd64,linux/arm64 - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 - with: - name: ${{ env.BUILDX_BUILDER_NAME }} - platforms: linux/amd64,linux/arm64 - version: ${{ env.BUILDX_VERSION }} - use: "true" - driver-opts: network=host + - name: Setup Blacksmith Builder + uses: useblacksmith/setup-docker-builder@v1 - name: Run make build env: BUILDX_BUILDER_NAME: ${{ env.BUILDX_BUILDER_NAME }} @@ -451,7 +439,7 @@ jobs: working-directory: ./ go-lint: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 @@ -469,7 +457,7 @@ jobs: python-test: env: OPENAI_API_KEY: fake - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 strategy: matrix: python-version: ["3.11", "3.12", "3.13"] @@ -496,7 +484,7 @@ jobs: run: make test python-lint: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 @@ -528,7 +516,7 @@ jobs: fi manifests-check: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - name: Checkout repository uses: actions/checkout@v6 diff --git a/.github/workflows/conventional-label.yml b/.github/workflows/conventional-label.yml index 86a6b854f6..f5a3fd124f 100644 --- a/.github/workflows/conventional-label.yml +++ b/.github/workflows/conventional-label.yml @@ -6,7 +6,7 @@ on: jobs: label-by-title: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read pull-requests: write diff --git a/.github/workflows/image-scan.yaml b/.github/workflows/image-scan.yaml index ac6bfed768..1e06b56270 100644 --- a/.github/workflows/image-scan.yaml +++ b/.github/workflows/image-scan.yaml @@ -48,7 +48,7 @@ jobs: - build_target: codex-harness image_name: codex-harness tag_suffix: "" - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 services: registry: image: registry:2 @@ -59,14 +59,8 @@ jobs: uses: actions/checkout@v6 - name: Set up QEMU uses: docker/setup-qemu-action@v4 - - name: Set up Docker Buildx - uses: docker/setup-buildx-action@v4 - with: - name: ${{ env.BUILDX_BUILDER_NAME }} - version: ${{ env.BUILDX_VERSION }} - platforms: linux/amd64,linux/arm64 - use: 'true' - driver-opts: network=host + - name: Setup Blacksmith Builder + uses: useblacksmith/setup-docker-builder@v1 - name: Set version id: vars run: echo "version=v0.0.0-$(git rev-parse --short HEAD)" >> $GITHUB_OUTPUT diff --git a/.github/workflows/label-pull-requests.yml b/.github/workflows/label-pull-requests.yml index 82908451a0..f9af4d3599 100644 --- a/.github/workflows/label-pull-requests.yml +++ b/.github/workflows/label-pull-requests.yml @@ -6,7 +6,7 @@ on: jobs: label-by-files: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read pull-requests: write diff --git a/.github/workflows/migration-immutability.yaml b/.github/workflows/migration-immutability.yaml index dfb5d23cb6..63db306491 100644 --- a/.github/workflows/migration-immutability.yaml +++ b/.github/workflows/migration-immutability.yaml @@ -8,7 +8,7 @@ on: jobs: check: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - uses: actions/checkout@v6 with: diff --git a/.github/workflows/sqlc-generate-check.yaml b/.github/workflows/sqlc-generate-check.yaml index 4efb50604d..8836175fbe 100644 --- a/.github/workflows/sqlc-generate-check.yaml +++ b/.github/workflows/sqlc-generate-check.yaml @@ -10,7 +10,7 @@ on: jobs: check: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 steps: - uses: actions/checkout@v6 diff --git a/.github/workflows/stalebot.yaml b/.github/workflows/stalebot.yaml index 1b6abd4e4a..1771107b9e 100644 --- a/.github/workflows/stalebot.yaml +++ b/.github/workflows/stalebot.yaml @@ -15,7 +15,7 @@ env: jobs: close-stale-issues: name: Close Stale Issues - runs-on: ubuntu-22.04 + runs-on: blacksmith-4vcpu-ubuntu-2204 permissions: issues: write steps: @@ -37,7 +37,7 @@ jobs: close-stale-prs: name: Close Stale PRs - runs-on: ubuntu-22.04 + runs-on: blacksmith-4vcpu-ubuntu-2204 permissions: pull-requests: write issues: write diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml index a2d2811d64..a6e0c1b411 100644 --- a/.github/workflows/tag.yaml +++ b/.github/workflows/tag.yaml @@ -23,7 +23,7 @@ jobs: - golang-adk - claude-harness - codex-harness - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read packages: write @@ -63,7 +63,7 @@ jobs: push-helm-chart: needs: - push-images - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read packages: write @@ -88,7 +88,7 @@ jobs: fi make helm-publish release-python-packages: - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: read packages: write @@ -142,7 +142,7 @@ jobs: needs: - push-helm-chart - release-python-packages - runs-on: ubuntu-latest + runs-on: blacksmith-4vcpu-ubuntu-2404 permissions: contents: write steps: From 5e4b2e2e32754189e8958041339f16f38207dfc2 Mon Sep 17 00:00:00 2001 From: Eitan Yarmush Date: Wed, 2 Sep 2026 11:36:51 +0000 Subject: [PATCH 2/3] ci: limit Blacksmith runners to builds and e2e Signed-off-by: Eitan Yarmush --- .github/workflows/ci.yaml | 16 ++++++++-------- .github/workflows/conventional-label.yml | 2 +- .github/workflows/label-pull-requests.yml | 2 +- .github/workflows/migration-immutability.yaml | 2 +- .github/workflows/sqlc-generate-check.yaml | 2 +- .github/workflows/stalebot.yaml | 4 ++-- .github/workflows/tag.yaml | 6 +++--- 7 files changed, 17 insertions(+), 17 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index ac84cfdea8..8854083f85 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -24,7 +24,7 @@ env: BUILDX_VERSION: v0.23.0 jobs: setup: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest outputs: cache-key: ${{ steps.cache-key.outputs.key }} steps: @@ -181,7 +181,7 @@ jobs: proto-check: name: Protobuf Contract Check - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 @@ -291,7 +291,7 @@ jobs: kubectl logs -n kagent deployment/kagent-controller || true go-unit-tests: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 @@ -318,7 +318,7 @@ jobs: helm-unit-tests: env: VERSION: v0.0.1-test - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 @@ -439,7 +439,7 @@ jobs: working-directory: ./ go-lint: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 @@ -457,7 +457,7 @@ jobs: python-test: env: OPENAI_API_KEY: fake - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest strategy: matrix: python-version: ["3.11", "3.12", "3.13"] @@ -484,7 +484,7 @@ jobs: run: make test python-lint: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 @@ -516,7 +516,7 @@ jobs: fi manifests-check: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - name: Checkout repository uses: actions/checkout@v6 diff --git a/.github/workflows/conventional-label.yml b/.github/workflows/conventional-label.yml index f5a3fd124f..86a6b854f6 100644 --- a/.github/workflows/conventional-label.yml +++ b/.github/workflows/conventional-label.yml @@ -6,7 +6,7 @@ on: jobs: label-by-title: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest permissions: contents: read pull-requests: write diff --git a/.github/workflows/label-pull-requests.yml b/.github/workflows/label-pull-requests.yml index f9af4d3599..82908451a0 100644 --- a/.github/workflows/label-pull-requests.yml +++ b/.github/workflows/label-pull-requests.yml @@ -6,7 +6,7 @@ on: jobs: label-by-files: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest permissions: contents: read pull-requests: write diff --git a/.github/workflows/migration-immutability.yaml b/.github/workflows/migration-immutability.yaml index 63db306491..dfb5d23cb6 100644 --- a/.github/workflows/migration-immutability.yaml +++ b/.github/workflows/migration-immutability.yaml @@ -8,7 +8,7 @@ on: jobs: check: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 with: diff --git a/.github/workflows/sqlc-generate-check.yaml b/.github/workflows/sqlc-generate-check.yaml index 8836175fbe..4efb50604d 100644 --- a/.github/workflows/sqlc-generate-check.yaml +++ b/.github/workflows/sqlc-generate-check.yaml @@ -10,7 +10,7 @@ on: jobs: check: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest steps: - uses: actions/checkout@v6 diff --git a/.github/workflows/stalebot.yaml b/.github/workflows/stalebot.yaml index 1771107b9e..1b6abd4e4a 100644 --- a/.github/workflows/stalebot.yaml +++ b/.github/workflows/stalebot.yaml @@ -15,7 +15,7 @@ env: jobs: close-stale-issues: name: Close Stale Issues - runs-on: blacksmith-4vcpu-ubuntu-2204 + runs-on: ubuntu-22.04 permissions: issues: write steps: @@ -37,7 +37,7 @@ jobs: close-stale-prs: name: Close Stale PRs - runs-on: blacksmith-4vcpu-ubuntu-2204 + runs-on: ubuntu-22.04 permissions: pull-requests: write issues: write diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml index a6e0c1b411..ce58ab843f 100644 --- a/.github/workflows/tag.yaml +++ b/.github/workflows/tag.yaml @@ -63,7 +63,7 @@ jobs: push-helm-chart: needs: - push-images - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest permissions: contents: read packages: write @@ -88,7 +88,7 @@ jobs: fi make helm-publish release-python-packages: - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest permissions: contents: read packages: write @@ -142,7 +142,7 @@ jobs: needs: - push-helm-chart - release-python-packages - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: ubuntu-latest permissions: contents: write steps: From 9521b76ee0a64ca824f4d5d174c32a05c50b1a14 Mon Sep 17 00:00:00 2001 From: Eitan Yarmush Date: Wed, 2 Sep 2026 11:58:38 +0000 Subject: [PATCH 3/3] ci: use free Blacksmith runners for image builds Signed-off-by: Eitan Yarmush --- .github/workflows/ci.yaml | 2 +- .github/workflows/image-scan.yaml | 2 +- .github/workflows/tag.yaml | 2 +- 3 files changed, 3 insertions(+), 3 deletions(-) diff --git a/.github/workflows/ci.yaml b/.github/workflows/ci.yaml index 8854083f85..9b15674e12 100644 --- a/.github/workflows/ci.yaml +++ b/.github/workflows/ci.yaml @@ -409,7 +409,7 @@ jobs: - golang-adk - claude-harness - codex-harness - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: blacksmith-2vcpu-ubuntu-2404 services: registry: image: registry:2 diff --git a/.github/workflows/image-scan.yaml b/.github/workflows/image-scan.yaml index 1e06b56270..e09854a9da 100644 --- a/.github/workflows/image-scan.yaml +++ b/.github/workflows/image-scan.yaml @@ -48,7 +48,7 @@ jobs: - build_target: codex-harness image_name: codex-harness tag_suffix: "" - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: blacksmith-2vcpu-ubuntu-2404 services: registry: image: registry:2 diff --git a/.github/workflows/tag.yaml b/.github/workflows/tag.yaml index ce58ab843f..bedb7deccd 100644 --- a/.github/workflows/tag.yaml +++ b/.github/workflows/tag.yaml @@ -23,7 +23,7 @@ jobs: - golang-adk - claude-harness - codex-harness - runs-on: blacksmith-4vcpu-ubuntu-2404 + runs-on: blacksmith-2vcpu-ubuntu-2404 permissions: contents: read packages: write