apiVersion: jenkins.io/v1 kind: PipelineActivity metadata: annotations: lighthouse.jenkins-x.io/cloneURI: https://github.com/greencapitaltrade/bifrost.git lighthouse.jenkins-x.io/job: release pipeline.jenkins-x.io/traceID: 8d1453099434457934816efff1b30a46 creationTimestamp: "2026-09-06T09:04:36Z" generation: 8 labels: branch: main build: "222" context: release created-by-lighthouse: "true" event-GUID: f75748ae-a9d1-11f1-80b8-a6af30a0d966 lighthouse.jenkins-x.io/baseSHA: c961902a59b47449ee7012ca245d315937932112 lighthouse.jenkins-x.io/branch: main lighthouse.jenkins-x.io/buildNum: "1788685475846" lighthouse.jenkins-x.io/context: release lighthouse.jenkins-x.io/id: apitaltrade-bifrost-main-release-qzhc2 lighthouse.jenkins-x.io/job: release lighthouse.jenkins-x.io/lastCommitSHA: c961902a59b47449ee7012ca245d315937932112 lighthouse.jenkins-x.io/refs.org: greencapitaltrade lighthouse.jenkins-x.io/refs.repo: bifrost lighthouse.jenkins-x.io/type: postsubmit owner: greencapitaltrade podName: apitaltrade-bifrost-main-release-9sqbr-from-build-pack-pod provider: github repository: bifrost tekton.dev/pipeline: apitaltrade-bifrost-main-release managedFields: - apiVersion: jenkins.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:labels: f:branch: {} f:context: {} f:owner: {} f:provider: {} f:repository: {} f:spec: f:lastCommitMessage: {} f:lastCommitSHA: {} f:releaseNotesURL: {} f:version: {} manager: jx-changelog-0.10.29 operation: Update time: "2026-09-06T09:12:43Z" - apiVersion: jenkins.io/v1 fieldsType: FieldsV1 fieldsV1: f:metadata: f:annotations: .: {} f:lighthouse.jenkins-x.io/cloneURI: {} f:lighthouse.jenkins-x.io/job: {} f:pipeline.jenkins-x.io/traceID: {} f:labels: .: {} f:build: {} f:created-by-lighthouse: {} f:event-GUID: {} f:lighthouse.jenkins-x.io/baseSHA: {} f:lighthouse.jenkins-x.io/branch: {} f:lighthouse.jenkins-x.io/buildNum: {} f:lighthouse.jenkins-x.io/context: {} f:lighthouse.jenkins-x.io/id: {} f:lighthouse.jenkins-x.io/job: {} f:lighthouse.jenkins-x.io/lastCommitSHA: {} f:lighthouse.jenkins-x.io/refs.org: {} f:lighthouse.jenkins-x.io/refs.repo: {} f:lighthouse.jenkins-x.io/type: {} f:podName: {} f:tekton.dev/pipeline: {} f:spec: .: {} f:baseSHA: {} f:batchPipelineActivity: {} f:build: {} f:buildLogsUrl: {} f:completedTimestamp: {} f:context: {} f:gitBranch: {} f:gitOwner: {} f:gitRepository: {} f:gitUrl: {} f:message: {} f:pipeline: {} f:startedTimestamp: {} f:status: {} f:steps: {} manager: jx-build-controller operation: Update time: "2026-09-06T09:16:24Z" name: greencapitaltrade-bifrost-main-222 namespace: jx resourceVersion: "327591414" uid: 145ad9e6-d3c5-420e-bdc1-52021cfa8bd2 spec: baseSHA: c961902a59b47449ee7012ca245d315937932112 batchPipelineActivity: {} build: "222" buildLogsUrl: s3://logs-gct-prod-20260425045301534100000007/jenkins-x/logs/greencapitaltrade/bifrost/main/222.log completedTimestamp: "2026-09-06T09:16:18Z" context: release gitBranch: main gitOwner: greencapitaltrade gitRepository: bifrost gitUrl: https://github.com/greencapitaltrade/bifrost.git lastCommitMessage: | feat(asset): serve the ONDC subscriber onboarding endpoints ONDC registration is two endpoints on the subscriber host, ondc.gc-t.in: GET /ondc-site-verification.html proves domain control, publishing an Ed25519 signature over the request_id sent in /subscribe. POST /on_subscribe proves we hold the private half of the registered encryption key, by decrypting a challenge. Both are auth="public" by necessity — the registry calls them from outside, unauthenticated, before we are a participant. Neither is a data path: nothing from the request reaches the database. Uses `cryptography`, not ONDC's PyNaCl and PyCryptodome. Neither of those is in the image and both would be new runtime dependencies for two functions, while `cryptography` is already a hard dependency of Odoo. The bytes on the wire are identical: crypto_sign_ed25519_sk_to_seed is the first 32 bytes of the 64-byte libsodium key, which is what from_private_bytes expects. Keys in either encoding are accepted. Key material comes from env vars injected from the k8s Secret, with ir.config_parameter as a dev and test fallback. The registry public key is configurable because pre-production and production differ. The decryption tests act as ONDC rather than round-tripping with ourselves: they generate an X25519 key, derive the shared secret against our published public key, encrypt, and assert we recover the plaintext. That fails if either side's encoding is wrong, which is the usual way this onboarding breaks. 18 tests. Full asset_management suite: 0 failed, 0 errors of 974. Co-Authored-By: Claude Opus 5 (1M context) lastCommitSHA: 60879daf8cf51ec2cb999ce49e3fd168fb061f24 message: 'Tasks Completed: 1 (Failed: 0, Cancelled 0), Skipped: 0' pipeline: greencapitaltrade/bifrost/main releaseNotesURL: https://github.com/greencapitaltrade/bifrost/releases/tag/v7.2.0 startedTimestamp: "2026-09-06T09:04:36Z" status: Succeeded steps: - kind: Stage stage: completedTimestamp: "2026-09-06T09:16:18Z" name: from build pack startedTimestamp: "2026-09-06T09:04:40Z" status: Succeeded steps: - completedTimestamp: "2026-09-06T09:05:14Z" name: Git Clone startedTimestamp: "2026-09-06T09:04:40Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:24Z" name: Next Version startedTimestamp: "2026-09-06T09:05:15Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:31Z" name: Jx Variables startedTimestamp: "2026-09-06T09:05:25Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:38Z" name: Setup Pip Cache startedTimestamp: "2026-09-06T09:05:31Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:39Z" name: Process Config Templates startedTimestamp: "2026-09-06T09:05:39Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:40Z" name: Update Asset Management Version startedTimestamp: "2026-09-06T09:05:40Z" status: Succeeded - completedTimestamp: "2026-09-06T09:05:43Z" name: Check Registry startedTimestamp: "2026-09-06T09:05:40Z" status: Succeeded - completedTimestamp: "2026-09-06T09:12:30Z" name: Build Container Build startedTimestamp: "2026-09-06T09:05:43Z" status: Succeeded - completedTimestamp: "2026-09-06T09:12:43Z" name: Promote Changelog startedTimestamp: "2026-09-06T09:12:31Z" status: Succeeded - completedTimestamp: "2026-09-06T09:12:48Z" name: Promote Helm Release startedTimestamp: "2026-09-06T09:12:43Z" status: Succeeded - completedTimestamp: "2026-09-06T09:14:59Z" name: Promote Jx Promote startedTimestamp: "2026-09-06T09:12:48Z" status: Succeeded - completedTimestamp: "2026-09-06T09:16:18Z" name: Publish Org Kb startedTimestamp: "2026-09-06T09:15:00Z" status: Succeeded - kind: Promote promote: environment: staging pullRequest: pullRequestURL: https://github.com/greencapitaltrade/mcu/pull/5676 startedTimestamp: "2026-09-06T09:14:10Z" status: Succeeded startedTimestamp: "2026-09-06T09:14:10Z" status: Succeeded - kind: Promote promote: environment: production pullRequest: pullRequestURL: https://github.com/greencapitaltrade/mcu/pull/5677 startedTimestamp: "2026-09-06T09:14:56Z" status: Succeeded startedTimestamp: "2026-09-06T09:14:56Z" status: Succeeded version: 7.2.0 status: {}