From c21af1aea350c7eebf431f24372189bc68afb696 Mon Sep 17 00:00:00 2001
From: unkin-agent <unkin-agent@unkin.net>
Date: Sat, 29 Aug 2026 21:10:58 +1000
Subject: [PATCH] watchstate: use canonical upstream image name for alpine

---
 apps/base/watchstate/oauth2-proxy-deployment.yaml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/apps/base/watchstate/oauth2-proxy-deployment.yaml b/apps/base/watchstate/oauth2-proxy-deployment.yaml
index 6c1d3ea..a4cca26 100644
--- a/apps/base/watchstate/oauth2-proxy-deployment.yaml
+++ b/apps/base/watchstate/oauth2-proxy-deployment.yaml
@@ -35,7 +35,7 @@ spec:
         # system roots with the internal CA so oauth2-proxy's OIDC HTTP client
         # trusts it.
         - name: combine-certs
-          image: artifactapi.k8s.syd1.au.unkin.net/dockerhub/library/alpine:3
+          image: docker.io/library/alpine:3
           imagePullPolicy: IfNotPresent
           command:
             - sh