From c16fe56180ecf1ba493be9cbf5adc6c003f59344 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Fri, 12 Jun 2026 23:37:10 +0000 Subject: [PATCH] freedify: image base forgejo registry -> ghcr (ADR-0002) Freedify builds moved off-infra per issue #22: GitHub Actions on the ViktorBarzin/freedify mirror now builds and pushes the public image ghcr.io/viktorbarzin/freedify, and the Woodpecker deploy pipeline (repo 202) rolls :sha8 via kubectl set image. Both factory deployments (music-viktor, music-emo) now seed from ghcr instead of the retired in-cluster Forgejo build, and the container image joins lifecycle ignore_changes (KEEL_IGNORE_IMAGE) so terraform applies do not revert the deployed :sha8. Landed after the first GHA push so ghcr :latest already existed when this repoint applied. Public package - no pull secret needed. Co-Authored-By: Claude Fable 5 --- stacks/freedify/factory/main.tf | 13 ++++++++++--- 1 file changed, 10 insertions(+), 3 deletions(-) diff --git a/stacks/freedify/factory/main.tf b/stacks/freedify/factory/main.tf index 172dfb1f..96b56b5f 100755 --- a/stacks/freedify/factory/main.tf +++ b/stacks/freedify/factory/main.tf @@ -105,8 +105,12 @@ resource "kubernetes_deployment" "freedify" { name = "registry-credentials" } container { - # Phase 3 cutover 2026-05-07 — Forgejo registry consolidation. - image = "forgejo.viktorbarzin.me/viktor/freedify:${var.tag}" + # ADR-0002 off-infra builds (2026-06-12, infra#22): GHA on the GitHub + # mirror pushes ghcr.io/viktorbarzin/freedify; the Woodpecker deploy + # pipeline rolls :sha8 via kubectl set image. Public package — no + # pull secret needed. The image is ignore_changes'd below so applies + # don't revert the deployed :sha8; this literal only seeds creates. + image = "ghcr.io/viktorbarzin/freedify:${var.tag}" name = "freedify" port { @@ -194,7 +198,10 @@ resource "kubernetes_deployment" "freedify" { } } lifecycle { - ignore_changes = [spec[0].template[0].spec[0].dns_config] # KYVERNO_LIFECYCLE_V1 + ignore_changes = [ + spec[0].template[0].spec[0].dns_config, # KYVERNO_LIFECYCLE_V1 + spec[0].template[0].spec[0].container[0].image, # KEEL_IGNORE_IMAGE — CI deploy pipeline sets :sha8 (ADR-0002) + ] } }