viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

job-hunter: ghcr-credentials pull secret on deployment + CronJobs
All checks were successful
ci/woodpecker/push/default Pipeline was successful
Details
ci/woodpecker/push/build-cli Pipeline was successful
Details

Browse source 
ADR-0002 wave 1 (infra#14): job-hunter's image moves to private ghcr;
the deployment AND both :latest CronJobs need the Kyverno-cloned pull
secret.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-12 22:56:48 +00:00
parent 6f41de71fa
commit 1c41781996
2 changed files with 15 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
stacks/job-hunter/cronjob.tf
View file

@ -40,6 +40,11 @@ resource "kubernetes_cron_job_v1" "job_hunter_refresh" {
image_pull_secrets {
name = "registry-credentials"
}
# Private ghcr image (ADR-0002 off-infra builds) — cloned into this
# namespace by the kyverno sync-ghcr-credentials allowlist policy.
image_pull_secrets {
name = "ghcr-credentials"
}
init_container {
name = "alembic-migrate"
@ -147,6 +152,11 @@ resource "kubernetes_cron_job_v1" "job_hunter_alert" {
image_pull_secrets {
name = "registry-credentials"
}
# Private ghcr image (ADR-0002 off-infra builds) — cloned into this
# namespace by the kyverno sync-ghcr-credentials allowlist policy.
image_pull_secrets {
name = "ghcr-credentials"
}
container {
name = "alert"
image = local.image

5
stacks/job-hunter/main.tf
View file

@ -175,6 +175,11 @@ resource "kubernetes_deployment" "job_hunter" {
image_pull_secrets {
name = "registry-credentials"
}
# Private ghcr image (ADR-0002 off-infra builds) — cloned into this
# namespace by the kyverno sync-ghcr-credentials allowlist policy.
image_pull_secrets {
name = "ghcr-credentials"
}
init_container {
name = "alembic-migrate"