argocd/kustomization.yaml

@@ -5,6 +5,7 @@ namespace: argo-system
 
 resources:
   - resources/namespace.yaml
+  - resources/secret.harbor-credentials.yaml
   - resources/secret.git-age.yaml
   - resources/configmap.git.yaml
   - resources/dragonfly.yml

ente/.gitattributes

@@ -1 +1,2 @@
 credentials.yaml filter=age diff=age merge=age -text
+**/secret.*.yaml filter=age diff=age merge=age -text

ente/kustomization.yaml

@@ -13,10 +13,10 @@ images:
     newTag: latest
     digest: sha256:08b6fd823efc15a38592a808840012a7ad13cccb645f88dfe981c50fcca8798a
   - name: photos
-    newName: code.icb4dc0.de/infrastructure/images/ente/photos
+    newName: registry.icb4dc0.de/infrastructure/ente/photos
     newTag: v0.9.99
   - name: cast
-    newName: code.icb4dc0.de/infrastructure/images/ente/cast
+    newName: registry.icb4dc0.de/infrastructure/ente/cast
     newTag: v0.9.99
 
 labels:
@@ -27,6 +27,7 @@ labels:
 
 resources:
   - resources/namespace.yaml
+  - resources/secret.harbor-credentials.yaml
   - resources/museum/db/db.yaml
   - resources/museum/db/user.yaml
   - resources/museum/cache.yaml

ente/resources/cast/deployment.yaml

@@ -17,28 +17,30 @@ spec:
         app.kubernetes.io/part-of: ente
     spec:
       containers:
-      - name: cast
-        image: cast
-        imagePullPolicy: Always
-        env:
-          - name: ENDPOINT
-            value: https://api.ente.icb4dc0.de
-          - name: ALBUMS_ENDPOINT
-            value: https://albums.ente.icb4dc0.de
-        resources:
-          requests:
-            memory: "64Mi"
-            cpu: "25m"
-          limits:
-            memory: "128Mi"
-            cpu: "50m"
-        ports:
-        - name: http
-          containerPort: 3000
-        readinessProbe:
-          httpGet:
-            port: 3000
-            path: /
-            scheme: HTTP
+        - name: cast
+          image: cast
+          imagePullPolicy: Always
+          env:
+            - name: ENDPOINT
+              value: https://api.ente.icb4dc0.de
+            - name: ALBUMS_ENDPOINT
+              value: https://albums.ente.icb4dc0.de
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "25m"
+            limits:
+              memory: "128Mi"
+              cpu: "50m"
+          ports:
+            - name: http
+              containerPort: 3000
+          readinessProbe:
+            httpGet:
+              port: 3000
+              path: /
+              scheme: HTTP
+      imagePullSecrets:
+        - name: harbor-registry-credentials
       nodeSelector:
-        kubernetes.io/arch: arm64
+        kubernetes.io/arch: arm64

ente/resources/photos/deployment.yaml

@@ -17,28 +17,30 @@ spec:
         app.kubernetes.io/part-of: ente
     spec:
       containers:
-      - name: photos
-        image: photos
-        imagePullPolicy: Always
-        env:
-          - name: ENDPOINT
-            value: https://api.ente.icb4dc0.de
-          - name: ALBUMS_ENDPOINT
-            value: https://albums.ente.icb4dc0.de
-        resources:
-          requests:
-            memory: "64Mi"
-            cpu: "25m"
-          limits:
-            memory: "128Mi"
-            cpu: "50m"
-        ports:
-        - name: http
-          containerPort: 3000
-        readinessProbe:
-          httpGet:
-            port: 3000
-            path: /
-            scheme: HTTP
+        - name: photos
+          image: photos
+          imagePullPolicy: Always
+          env:
+            - name: ENDPOINT
+              value: https://api.ente.icb4dc0.de
+            - name: ALBUMS_ENDPOINT
+              value: https://albums.ente.icb4dc0.de
+          resources:
+            requests:
+              memory: "64Mi"
+              cpu: "25m"
+            limits:
+              memory: "128Mi"
+              cpu: "50m"
+          ports:
+            - name: http
+              containerPort: 3000
+          readinessProbe:
+            httpGet:
+              port: 3000
+              path: /
+              scheme: HTTP
+      imagePullSecrets:
+        - name: harbor-registry-credentials
       nodeSelector:
-        kubernetes.io/arch: arm64
+        kubernetes.io/arch: arm64

forgejo/kustomization.yaml

@@ -15,7 +15,7 @@ images:
     newTag: "6.3.1"
   - name: dind
     newName: docker
-    newTag: 28.0.2-dind
+    newTag: 28.0.4-dind
 
 resources:
   - resources/db/db.yaml