From 30f0360ef8f6fbf9951537a2c865f049f2320024 Mon Sep 17 00:00:00 2001 From: Shadowbroker <43977454+BigBodyCobain@users.noreply.github.com> Date: Tue, 19 May 2026 01:01:05 -0600 Subject: [PATCH] Helm chart: switch image registry from GitLab to GHCR (#236) The chart referenced registry.gitlab.com/bigbodycobain/shadowbroker/{backend,frontend}:latest as the primary image source, but two things made that path effectively broken for new K8s installs: 1. No .gitlab-ci.yml has ever existed in this repo, so the GitLab registry was never populated by automated builds. Any images there would be stale or manually pushed. 2. The GitLab registry returns HTTP 401 on anonymous pulls, so even if images existed, Helm-managed deployments without registry credentials would fail. GHCR, by contrast, is auto-built and pushed on every merge to main by .github/workflows/docker-publish.yml, and ghcr.io allows anonymous pulls for public images. It's also the registry that docker-compose.yml has been using as primary all along, so this brings the Helm install path to parity with the Docker Compose install path. After this change: - ghcr.io/bigbodycobain/shadowbroker-backend:latest <- now in chart - ghcr.io/bigbodycobain/shadowbroker-frontend:latest <- now in chart GitLab is preserved in the comments as a documented fallback for operators who run private mirrors with their own CI. Co-authored-by: Claude Opus 4.7 --- helm/chart/values.yaml | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/helm/chart/values.yaml b/helm/chart/values.yaml index 0394dd4..08754dd 100644 --- a/helm/chart/values.yaml +++ b/helm/chart/values.yaml @@ -13,8 +13,9 @@ shadowbroker: runAsGroup: 1001 image: pullPolicy: Always - # GitLab (primary) | GitHub (mirror): ghcr.io/bigbodycobain/shadowbroker-backend - repository: registry.gitlab.com/bigbodycobain/shadowbroker/backend + # GHCR (primary, public, auto-built on every push to main). + # GitLab fallback: registry.gitlab.com/bigbodycobain/shadowbroker/backend (requires auth + currently no CI builds it). + repository: ghcr.io/bigbodycobain/shadowbroker-backend tag: latest env: AIS_API_KEY: @@ -42,8 +43,9 @@ shadowbroker: runAsGroup: 1001 image: pullPolicy: Always - # GitLab (primary) | GitHub (mirror): ghcr.io/bigbodycobain/shadowbroker-frontend - repository: registry.gitlab.com/bigbodycobain/shadowbroker/frontend + # GHCR (primary, public, auto-built on every push to main). + # GitLab fallback: registry.gitlab.com/bigbodycobain/shadowbroker/frontend (requires auth + currently no CI builds it). + repository: ghcr.io/bigbodycobain/shadowbroker-frontend tag: latest env: