abrban/cloud-host
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fix app image pulls and Harbor kubelet auth for user workloads.

Browse Source 
Route k3s registry mirrors through harbor-core ClusterIP with hostname-only auth keys, use HTTP EXT_ENDPOINT so OAuth tokens work on port 80, extend deploy readiness timeout, and harden Kaniko build/dockerfile fallbacks.

Co-authored-by: Cursor <cursoragent@cursor.com>
This commit is contained in:
keyhan
2026-07-10 18:38:05 +03:30
parent 54ab2f2f05
commit ec72ee4fca
7 changed files with 160 additions and 24 deletions
Download Patch File Download Diff File Expand all files Collapse all files
gitops/k3s/registries.yaml
+2
View File
@@ -2,6 +2,8 @@
# Proxy-cache only works through harbor-core (not harbor-registry or Traefik /v2/ alone).
#
# Apply: ./scripts/apply-k3s-registries.sh
# Harbor EXT_ENDPOINT should be http://registry.abrban.com so OAuth realm uses HTTP
# (kubelet mirror hits harbor-core on :80; https://<clusterIP>:443 times out).
mirrors:
registry.abrban.com: