bcs-website/k8s/kustomization.yaml
Brad Rodgers b9f2c72bd4
All checks were successful
CI / ci (push) Successful in 1m55s
deploy: private package pull via External Secrets; pull over public HTTPS (no k3s restart)
- k3s pulls git.7tl-homelab.com/... over valid TLS (no registries.yaml/node config)
- CI still pushes internally to 10.66.15.22:3000 (fast, insecure-trusted)
- ExternalSecret materializes gitea-registry dockerconfigjson from OpenBao
- deployment uses imagePullSecrets: gitea-registry
- .env added to .dockerignore
2026-07-17 07:36:22 -04:00

16 lines
445 B
YAML

apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- namespace.yaml
- configmap.yaml
- externalsecret-registry.yaml
- deployment.yaml
- service.yaml
- ingress.yaml
# CI updates newTag to the immutable git-sha via `kustomize edit set image` (see .gitea/workflows/ci.yml).
# Name is the public HTTPS pull endpoint that k3s uses.
images:
- name: git.7tl-homelab.com/bmr_bluecap/bcs-website
newTag: latest