From 02785987dd034c18dcd76cd1c8e06be177e5c642 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Fri, 12 Jun 2026 20:57:55 +0000 Subject: [PATCH] =?UTF-8?q?ci-pipeline-health:=20image=20:latest+Always=20?= =?UTF-8?q?=E2=80=94=20registry=20lost=20the=202fd7670d=20tag?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit The sha tag other claude-agent-service CronJobs pin no longer exists in the Forgejo registry (node caches mask it); fresh pulls 404. Follow the owned-app CronJob convention until infra#19 moves this image to ghcr. Co-Authored-By: Claude Fable 5 --- stacks/ci-pipeline-health/main.tf | 14 +++++++++----- 1 file changed, 9 insertions(+), 5 deletions(-) diff --git a/stacks/ci-pipeline-health/main.tf b/stacks/ci-pipeline-health/main.tf index 8a7580ed..0356d180 100644 --- a/stacks/ci-pipeline-health/main.tf +++ b/stacks/ci-pipeline-health/main.tf @@ -19,10 +19,13 @@ variable "schedule" { default = "30 7 * * *" } -# Mirrors stacks/claude-agent-service image tag — the image ships curl + jq. +# :latest + Always per the owned-app CronJob convention. NOTE: the registry +# no longer holds the sha tag the other claude-agent-service CronJobs pin +# (2fd7670d) — they survive on node image caches only. When issue infra#19 +# migrates claude-agent-service to ghcr, repoint this image too. variable "image_tag" { type = string - default = "2fd7670d" + default = "latest" } locals { @@ -119,9 +122,10 @@ resource "kubernetes_cron_job_v1" "sweep" { name = "registry-credentials" } container { - name = "sweep" - image = local.image - command = ["/bin/sh", "/scripts/sweep.sh"] + name = "sweep" + image = local.image + image_pull_policy = "Always" + command = ["/bin/sh", "/scripts/sweep.sh"] env_from { secret_ref { name = "ci-pipeline-health-creds"