From 6815b660104999301e4b214133c0a40c09e9eea2 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Sun, 24 May 2026 20:27:21 +1000
Subject: [PATCH] fix(kanidm): use dockerhub image instead of ghcr.io (#161)

## Summary

- Changes both `config-init` init container and `kanidm` container images from `ghcr.io/kanidm/server:1.10.3` to `kanidm/server:1.10.3`

## Why

`kanidm/server` is published on Docker Hub, not ghcr.io. RKE2 rewrites dockerhub pulls through the artifactapi mirror automatically.

## Test plan

- [ ] Pods roll successfully after ArgoCD sync
- [ ] Verify kanidm cluster replication still healthy

Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/161
---
 apps/base/kanidm/statefulset.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/apps/base/kanidm/statefulset.yaml b/apps/base/kanidm/statefulset.yaml
index d68ce44..1dd852c 100644
--- a/apps/base/kanidm/statefulset.yaml
+++ b/apps/base/kanidm/statefulset.yaml
@@ -36,7 +36,7 @@ spec:
         fsGroup: 1000
       initContainers:
         - name: config-init
-          image: ghcr.io/kanidm/server:1.10.3
+          image: kanidm/server:1.10.3
           command: ["/bin/sh", "-c"]
           args:
             - |
@@ -99,7 +99,7 @@ spec:
             readOnlyRootFilesystem: false
       containers:
         - name: kanidm
-          image: ghcr.io/kanidm/server:1.10.3
+          image: kanidm/server:1.10.3
           command: ["/sbin/kanidmd"]
           args: ["server", "-c", "/config/server.toml"]
           ports: