# Bootstrap: copy act_runner + kaniko into abrban/ (kubelet cannot use proxy-cache reliably)
apiVersion: batch/v1
kind: Job
metadata:
  name: seed-ci-images
  namespace: cloudhost
spec:
  ttlSecondsAfterFinished: 3600
  backoffLimit: 2
  template:
    spec:
      restartPolicy: Never
      imagePullSecrets:
        - name: registry-pull-secret
      containers:
        - name: skopeo
          image: quay.io/skopeo/stable:latest
          imagePullPolicy: IfNotPresent
          envFrom:
            - secretRef:
                name: registry-egress-proxy
          command:
            - sh
            - -ec
            - |
              set -eux
              DEST="docker://harbor-registry.cloudhost.svc.cluster.local:5000/abrban"
              CREDS="harbor_registry_user:harbor_registry_password"
              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
                docker://docker.io/gitea/act_runner:0.2.11 \
                "${DEST}/act-runner:0.2.11"
              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
                docker://docker.io/alpine/git:2.43.0 \
                "${DEST}/alpine-git:2.43.0"
              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
                docker://docker.io/library/node:24-alpine \
                "${DEST}/node:24-alpine"
              skopeo copy --dest-tls-verify=false --dest-creds="${CREDS}" \
                docker://gcr.io/kaniko-project/executor:v1.27.6-debug \
                "${DEST}/kaniko-executor:v1.27.6-debug"
              echo SEED_OK