unkin-agent
1780b3d77c
Gitea's registry rejects blob HEADs with 401, so the v3.13.0 tag pipeline cannot push. Release images move to the in-cluster artifactapi docker-internal registry, which trusts the runner without credentials. - push docker-api to docker-internal/artifactapi and docker-web to docker-internal/artifactapi-ui - use the CA-baked docker-internal/plugin-docker-buildx image - drop the droneci credentials - set kubernetes resources and service account on both steps Reviewed-on: #134 Co-authored-by: unkin-agent <unkin-agent@unkin.net> Co-committed-by: unkin-agent <unkin-agent@unkin.net>
49 lines
1.2 KiB
YAML
49 lines
1.2 KiB
YAML
when:
|
|
- event: tag
|
|
ref: refs/tags/v*
|
|
|
|
steps:
|
|
- name: docker-api
|
|
image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
|
|
settings:
|
|
registry: artifactapi.k8s.syd1.au.unkin.net
|
|
repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi
|
|
build_args:
|
|
VERSION: ${CI_COMMIT_TAG}
|
|
tags:
|
|
- ${CI_COMMIT_TAG}
|
|
- latest
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: default
|
|
resources:
|
|
requests:
|
|
memory: 1Gi
|
|
cpu: 1
|
|
limits:
|
|
memory: 4Gi
|
|
cpu: 2
|
|
|
|
- name: docker-web
|
|
image: artifactapi.k8s.syd1.au.unkin.net/docker-internal/plugin-docker-buildx:latest
|
|
settings:
|
|
registry: artifactapi.k8s.syd1.au.unkin.net
|
|
repo: artifactapi.k8s.syd1.au.unkin.net/docker-internal/artifactapi-ui
|
|
dockerfile: ui/Dockerfile.ui
|
|
context: ui
|
|
build_args:
|
|
BASE_PATH: /ui
|
|
tags:
|
|
- ${CI_COMMIT_TAG}
|
|
- latest
|
|
backend_options:
|
|
kubernetes:
|
|
serviceAccountName: default
|
|
resources:
|
|
requests:
|
|
memory: 1Gi
|
|
cpu: 1
|
|
limits:
|
|
memory: 4Gi
|
|
cpu: 2
|