From fbc6f6129d17196f4074302749fe4445f7fbe059 Mon Sep 17 00:00:00 2001
From: Ben Vincent <ben@unkin.net>
Date: Mon, 27 Jul 2026 21:15:47 +1000
Subject: [PATCH] Allow logging-stack images through the dockerhub remote

The centralized logging stack (argocd-apps ClickHouse + Vector + NATS
JetStream) pulls all container images through artifactapi instead of directly
from upstream. Add the Docker Hub repositories it needs to the dockerhub remote
allowlist.

- add ^altinity/ (clickhouse-operator + metrics-exporter)
- add ^clickhouse/ (clickhouse-server)
- add ^library/nats (NATS server)
- add ^natsio/ (nats-box, nats-server-config-reloader)
- add ^timberio/vector (vector agent/aggregator/archiver/vm-ingest + CI)

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv
---
 config/remote_docker/dockerhub.yaml | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/config/remote_docker/dockerhub.yaml b/config/remote_docker/dockerhub.yaml
index 1d91a6e..3de6779 100644
--- a/config/remote_docker/dockerhub.yaml
+++ b/config/remote_docker/dockerhub.yaml
@@ -4,16 +4,19 @@ immutable_ttl: 0
 mutable_ttl: 300
 patterns:
   - "^alpine/"
+  - "^altinity/"
   - "^library/almalinux"
   - "^library/alpine"
   - "^library/busybox"
   - "^library/debian"
   - "^library/fedora"
+  - "^library/nats"
   - "^library/nginx"
   - "^library/postgres"
   - "^library/redis"
   - "^beats/filebeat"
   - "^bitnami/"
+  - "^clickhouse/"
   - "^curlimages/curl"
   - "^emberstack/kubernetes-reflector"
   - "^grafana/"
@@ -24,10 +27,12 @@ patterns:
   - "^jfrog/"
   - "^jpgouin/"
   - "^kanidm/"
+  - "^natsio/"
   - "^osixia/"
   - "^rancher/"
   - "^rspamd/rspamd"
   - "^tiredofit/"
+  - "^timberio/vector"
   - "^tozd/postfix"
   - "^traefik/"
   - "^valkey/valkey"