ci: push images to artifactapi registry instead of gitea #2

Merged
benvin merged 4 commits from benvin/push-artifactapi into main 2026-07-30 20:55:37 +10:00
Owner

Why

Hard switch of this repo's container image push from the Gitea registry to the artifactapi local docker registry. The Gitea VM and its embedded registry are being retired, so images must publish to artifactapi's real Registry V2 instead; Ben chose a hard switch over dual-push.

Changes

  • Point the .woodpecker/docker.yaml push target at artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev.
  • Drop the droneci/DRONECI_PASSWORD creds — artifactapi accepts unauthenticated in-cluster pushes.
  • Repoint the PR dry-run build in .woodpecker/build.yaml to the same path.
  • Repoint the Dockerfile FROM agent-base to docker-internal (agent-base already synced there).

Takes effect on the next v* tag — the docker pipeline only runs on tags.

https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

## Why Hard switch of this repo's container image push from the Gitea registry to the artifactapi local docker registry. The Gitea VM and its embedded registry are being retired, so images must publish to artifactapi's real Registry V2 instead; Ben chose a hard switch over dual-push. ## Changes - Point the `.woodpecker/docker.yaml` push target at `artifactapi.k8s.syd1.au.unkin.net/docker-internal/agent-dev`. - Drop the `droneci`/`DRONECI_PASSWORD` creds — artifactapi accepts unauthenticated in-cluster pushes. - Repoint the PR dry-run build in `.woodpecker/build.yaml` to the same path. - Repoint the Dockerfile `FROM` agent-base to docker-internal (agent-base already synced there). Takes effect on the next `v*` tag — the docker pipeline only runs on tags. https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
unkinben added 1 commit 2026-07-30 00:37:06 +10:00
Hard switch of the docker push target from the Gitea registry to the
artifactapi local docker registry (docker-internal); the Gitea VM and its
registry are being retired. Drops the droneci/DRONECI_PASSWORD creds since
artifactapi accepts unauthenticated in-cluster pushes. Also repoints the Dockerfile FROM agent-base base image.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
unkinben added 1 commit 2026-07-30 00:43:22 +10:00
unkinben added 1 commit 2026-07-30 00:46:47 +10:00
unkinben added 1 commit 2026-07-30 00:50:56 +10:00
The buildkit builder in the k8s runner cannot pull FROM the artifactapi
registry (internal CA is not trusted). Keep the base-image FROM on gitea;
only the push target moves to artifactapi.

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
benvin merged commit 1124078327 into main 2026-07-30 20:55:37 +10:00
benvin deleted branch benvin/push-artifactapi 2026-07-30 20:55:37 +10:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/container-agent-dev#2