4 Commits

Author	SHA1	Message	Date
Billy D.	c050d11ab4	fix: login to registries before buildx setup for auth propagation ... - Move Docker Hub + Gitea logins before setup-buildx-action so BuildKit container inherits credentials from ~/.docker/config.json - Remove broken 'Configure Docker for insecure registry' step (DinD runner already configured via configmap daemon.json, systemd unavailable) - Make Docker Hub login unconditional using secrets (not vars) - Fixes 429 Too Many Requests on docker.io base image pulls	2026-02-19 07:04:24 -05:00
Billy D.	71321e5878	fix: use docker/login-action for both registries to fix buildx auth ... - Docker Hub login now happens before Gitea login, both via login-action - Previous manual config.json write was clobbering Docker Hub auth - buildx docker-container driver inherits auth from login-action correctly - Fixes 429 Too Many Requests from unauthenticated Docker Hub pulls	2026-02-19 06:45:20 -05:00
Billy D.	0cc03aa145	fix: remove unnecessary system pip install from lint job ... Ruff runs via uvx in its own isolated environment and does not need the project's runtime dependencies installed. This avoids PEP 668 externally-managed-environment errors on Debian-based runners.	2026-02-18 18:34:24 -05:00
Billy D.	12bdcab180	feat: add Gitea CI/CD with Vault-backed kubeconfig deploy ... - Create CI workflow: lint, release, docker build+push, kustomize deploy - Switch image registry from GHCR to internal Gitea registry - Deploy job uses kubeconfig mounted from Vault via ESO - Add ntfy notifications for success, deploy, and failure	2026-02-18 18:30:14 -05:00