Allow logging-stack images through the dockerhub remote #16

2026-07-27T21:16:03+10:00

unkinben commented

2026-07-27 21:16:03 +10:00

Why

The new centralized logging stack in argocd-apps (ClickHouse + Vector + NATS JetStream, PR unkin/argocd-apps#296) pulls all its container images through artifactapi instead of directly from upstream registries. The dockerhub remote is an allowlist (patterns), so those repositories must be permitted before the images can be cached/served.

What

Add to config/remote_docker/dockerhub.yaml patterns:

^altinity/ — altinity/clickhouse-operator, altinity/metrics-exporter (ClickHouse operator chart)
^clickhouse/ — clickhouse/clickhouse-server (DB pods + schema bootstrap Job)
^library/nats — nats (JetStream server)
^natsio/ — natsio/nats-box (stream bootstrap Job), natsio/nats-server-config-reloader (NATS chart)
^timberio/vector — timberio/vector (agent/aggregator/archiver/vm-ingest runtime + the vector test CI image)

bitnami/kubectl (operator crdHook) is already covered by the existing ^bitnami/.

Dependency

Merge-before for unkin/argocd-apps#296 — that PR rewrites its image refs to artifactapi.k8s.syd1.au.unkin.net/dockerhub/... and will not pull until these patterns are live.

https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

## Why The new centralized logging stack in argocd-apps (ClickHouse + Vector + NATS JetStream, PR unkin/argocd-apps#296) pulls **all** its container images through artifactapi instead of directly from upstream registries. The dockerhub remote is an allowlist (`patterns`), so those repositories must be permitted before the images can be cached/served. ## What Add to `config/remote_docker/dockerhub.yaml` patterns: - `^altinity/` — `altinity/clickhouse-operator`, `altinity/metrics-exporter` (ClickHouse operator chart) - `^clickhouse/` — `clickhouse/clickhouse-server` (DB pods + schema bootstrap Job) - `^library/nats` — `nats` (JetStream server) - `^natsio/` — `natsio/nats-box` (stream bootstrap Job), `natsio/nats-server-config-reloader` (NATS chart) - `^timberio/vector` — `timberio/vector` (agent/aggregator/archiver/vm-ingest runtime + the `vector test` CI image) `bitnami/kubectl` (operator crdHook) is already covered by the existing `^bitnami/`. ## Dependency Merge-before for unkin/argocd-apps#296 — that PR rewrites its image refs to `artifactapi.k8s.syd1.au.unkin.net/dockerhub/...` and will not pull until these patterns are live. https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

unkinben added 1 commit 2026-07-27 21:16:03 +10:00

Allow logging-stack images through the dockerhub remote

ci/woodpecker/pr/plan Pipeline was successful

Details

ci/woodpecker/pr/pre-commit Pipeline was successful

Details

fbc6f6129d

The centralized logging stack (argocd-apps ClickHouse + Vector + NATS
JetStream) pulls all container images through artifactapi instead of directly
from upstream. Add the Docker Hub repositories it needs to the dockerhub remote
allowlist.

- add ^altinity/ (clickhouse-operator + metrics-exporter)
- add ^clickhouse/ (clickhouse-server)
- add ^library/nats (NATS server)
- add ^natsio/ (nats-box, nats-server-config-reloader)
- add ^timberio/vector (vector agent/aggregator/archiver/vm-ingest + CI)

Claude-Session: https://claude.ai/code/session_015ur3i7D2azsMAWTSVABApv

unkinben referenced this pull request from unkin/argocd-apps

2026-07-27 21:20:15 +10:00

Add ClickHouse + Vector + NATS JetStream centralized logging (with S3 raw archive) #296

benvin merged commit 69218547d9 into main

2026-07-27 21:46:51 +10:00

benvin deleted branch benvin/logging-stack-docker-remotes

2026-07-27 21:46:51 +10:00

Sign in to join this conversation.

1 Participants

Notifications

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: unkin/terraform-artifactapi#16