From 7cbec335887bd66489418a31b464c2c83b10ef67 Mon Sep 17 00:00:00 2001 From: Ben Vincent Date: Sun, 24 May 2026 20:24:33 +1000 Subject: [PATCH] fix(artifactapi): move kanidm to dockerhub remote (#160) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit ## Summary - Removes `^kanidm/` from the `ghcr` remote immutable_patterns - Adds `^kanidm/` to the `dockerhub` remote immutable_patterns ## Why `kanidm/server` is published on Docker Hub, not ghcr.io. Pulling via the `ghcr` cache was failing with 403 on anonymous token fetch → 502 Bad Gateway. ## Test plan - [ ] `docker pull artifactapi.k8s.syd1.au.unkin.net/dockerhub/kanidm/server:1.10.3` succeeds after artifactapi redeploys Reviewed-on: https://git.unkin.net/unkin/argocd-apps/pulls/160 --- apps/base/artifactapi/resources/conf.d/remote-docker.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/apps/base/artifactapi/resources/conf.d/remote-docker.yaml b/apps/base/artifactapi/resources/conf.d/remote-docker.yaml index 00fb144..3806c9b 100644 --- a/apps/base/artifactapi/resources/conf.d/remote-docker.yaml +++ b/apps/base/artifactapi/resources/conf.d/remote-docker.yaml @@ -6,7 +6,6 @@ remotes: immutable_patterns: - "^cloudnative-pg/cloudnative-pg" - "^emberstack/helm-charts" - - "^kanidm/" - "^openvoxproject/" - "^stakater/reloader" - "^stalwartlabs/stalwart" @@ -35,6 +34,7 @@ remotes: - "^hashicorp/consul" - "^hashicorp/vault" - "^jfrog/" + - "^kanidm/" - "^rancher/" - "^rspamd/rspamd" - "^tozd/postfix"