watchstate: use canonical upstream image name for alpine #435

Merged
benvin merged 1 commits from benvin/upstream-images-watchstate into main 2026-08-29 21:19:37 +10:00
Member

rke2's registries.yaml already rewrites upstream image names to the artifactapi mirror, so manifests must carry canonical upstream names. Only in-house artifactapi.k8s.syd1.au.unkin.net/docker-internal/... images stay explicit.

Changes:

  • Point the watchstate oauth2-proxy cert-combine init container at docker.io/library/alpine:3.

Tag unchanged. kustomize build --enable-helm apps/overlays/au-syd1/watchstate differs from main only in that image string. No extra proxied refs in the file (the oauth2-proxy image itself is already canonical quay.io/...).

rke2's `registries.yaml` already rewrites upstream image names to the artifactapi mirror, so manifests must carry canonical upstream names. Only in-house `artifactapi.k8s.syd1.au.unkin.net/docker-internal/...` images stay explicit. Changes: - Point the watchstate oauth2-proxy cert-combine init container at `docker.io/library/alpine:3`. Tag unchanged. `kustomize build --enable-helm apps/overlays/au-syd1/watchstate` differs from main only in that image string. No extra proxied refs in the file (the oauth2-proxy image itself is already canonical `quay.io/...`).
unkin-agent added 1 commit 2026-08-29 21:11:04 +10:00
watchstate: use canonical upstream image name for alpine
ci/woodpecker/pr/vector-test Pipeline was successful
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
c21af1aea3
benvin merged commit 38a41bd44b into main 2026-08-29 21:19:37 +10:00
benvin deleted branch benvin/upstream-images-watchstate 2026-08-29 21:19:38 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#435