freedify: image base forgejo registry -> ghcr (ADR-0002)

Freedify builds moved off-infra per issue #22: GitHub Actions on the
ViktorBarzin/freedify mirror now builds and pushes the public image
ghcr.io/viktorbarzin/freedify, and the Woodpecker deploy pipeline
(repo 202) rolls :sha8 via kubectl set image. Both factory deployments
(music-viktor, music-emo) now seed from ghcr instead of the retired
in-cluster Forgejo build, and the container image joins lifecycle
ignore_changes (KEEL_IGNORE_IMAGE) so terraform applies do not revert
the deployed :sha8. Landed after the first GHA push so ghcr :latest
already existed when this repoint applied. Public package - no pull
secret needed.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
This commit is contained in:
Viktor Barzin 2026-06-12 23:37:10 +00:00
parent fb88440ec4
commit c16fe56180

View file

@ -105,8 +105,12 @@ resource "kubernetes_deployment" "freedify" {
name = "registry-credentials"
}
container {
# Phase 3 cutover 2026-05-07 Forgejo registry consolidation.
image = "forgejo.viktorbarzin.me/viktor/freedify:${var.tag}"
# ADR-0002 off-infra builds (2026-06-12, infra#22): GHA on the GitHub
# mirror pushes ghcr.io/viktorbarzin/freedify; the Woodpecker deploy
# pipeline rolls :sha8 via kubectl set image. Public package no
# pull secret needed. The image is ignore_changes'd below so applies
# don't revert the deployed :sha8; this literal only seeds creates.
image = "ghcr.io/viktorbarzin/freedify:${var.tag}"
name = "freedify"
port {
@ -194,7 +198,10 @@ resource "kubernetes_deployment" "freedify" {
}
}
lifecycle {
ignore_changes = [spec[0].template[0].spec[0].dns_config] # KYVERNO_LIFECYCLE_V1
ignore_changes = [
spec[0].template[0].spec[0].dns_config, # KYVERNO_LIFECYCLE_V1
spec[0].template[0].spec[0].container[0].image, # KEEL_IGNORE_IMAGE CI deploy pipeline sets :sha8 (ADR-0002)
]
}
}