From ee25a41c7456fc9dc33d6c441a09da1c280df7b0 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sat, 13 Jun 2026 10:05:34 +0000 Subject: [PATCH] ci: apply + drift steps run on ghcr infra-ci (ADR-0002 #30) The terragrunt apply step (default.yml) and drift-detection now pull ghcr.io/viktorbarzin/infra-ci:latest (GHA-built, verified toolchain: tf 1.5.7 / tg 0.99.4 / sops / kubectl 1.34 / vault / git-crypt). ghcr is public + proven pullable in-cluster. build-ci-image.yml (forgejo build) KEPT as the fallback copy until this ghcr-based apply is proven, so a revert restores the working forgejo image if needed. Co-Authored-By: Claude Fable 5 --- .woodpecker/default.yml | 2 +- .woodpecker/drift-detection.yml | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/.woodpecker/default.yml b/.woodpecker/default.yml index 1fd6b1b1..95fcbd80 100644 --- a/.woodpecker/default.yml +++ b/.woodpecker/default.yml @@ -45,7 +45,7 @@ steps: "$SLACK_WEBHOOK" || true - name: apply - image: forgejo.viktorbarzin.me/viktor/infra-ci:latest + image: ghcr.io/viktorbarzin/infra-ci:latest pull: true backend_options: kubernetes: diff --git a/.woodpecker/drift-detection.yml b/.woodpecker/drift-detection.yml index 38cc60b9..5851bc16 100644 --- a/.woodpecker/drift-detection.yml +++ b/.woodpecker/drift-detection.yml @@ -14,7 +14,7 @@ clone: steps: - name: detect-drift - image: forgejo.viktorbarzin.me/viktor/infra-ci:latest + image: ghcr.io/viktorbarzin/infra-ci:latest pull: true backend_options: kubernetes: