nils/mg4
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Pin the pushed server image; drop the pull secret

Browse Source 
mg4-server:2.0.0 is on git.stinnesbeck.com and pulls anonymously, so
the Deployment no longer references a registry pull secret. The image
is pinned by digest (sha256:6feea777…) so a re-pushed tag cannot
change what the cluster runs. README and secrets template updated.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01QLJfZQZeAKAwSqViTmLzki
This commit is contained in:
nils
2026-10-17 16:14:53 +02:00
co-authored by Claude Opus 5.5
parent e874578e54
commit 4fe29189c0
5 changed files with 8 additions and 14 deletions
Download Patch File Download Diff File Expand all files Collapse all files
k8s/secrets.example.yaml
-5
View File
@@ -37,8 +37,3 @@ stringData:
# Grafana's admin login (user "admin"). Only read on first start: change it in Grafana
# afterwards, or reset it with grafana cli.
admin-password: CHANGE-ME
---
# Pull secret for a private image on git.stinnesbeck.com. Easier to create with:
# kubectl -n mg4 create secret docker-registry git-stinnesbeck-registry \
# --docker-server=git.stinnesbeck.com --docker-username=<user> --docker-password=<token>
# If the package is public, remove imagePullSecrets from server.yaml instead.