Brad Rodgers b9f2c72bd4 deploy: private package pull via External Secrets; pull over public HTTPS (no k3s restart) ...

- k3s pulls git.7tl-homelab.com/... over valid TLS (no registries.yaml/node config)
- CI still pushes internally to 10.66.15.22:3000 (fast, insecure-trusted)
- ExternalSecret materializes gitea-registry dockerconfigjson from OpenBao
- deployment uses imagePullSecrets: gitea-registry
- .env added to .dockerignore

2026-07-17 07:36:22 -04:00

..

workflows

deploy: private package pull via External Secrets; pull over public HTTPS (no k3s restart)

2026-07-17 07:36:22 -04:00