ci: migrate inttest images from GHCR to local registry, remove ghcr-credentials

This commit is contained in:
Celes Renata
2026-04-19 06:22:35 +00:00
parent e3e1531847
commit 19b63dd369
3 changed files with 7 additions and 17 deletions
+1 -1
View File
@@ -299,7 +299,7 @@ stage_end "infra_deploy" "ok"
# ══════════════════════════════════════════════════════════════════════════════
stage_start "seed_data"
SEED_IMAGE="ghcr.io/celesrenata/stonks-oracle/query-api:${IMAGE_TAG}"
SEED_IMAGE="registry.celestium.life/stonks-oracle/query-api:${IMAGE_TAG}"
log "Seeding sandbox database ..."
if ! kubectl run seed-sandbox \
+1 -3
View File
@@ -31,8 +31,6 @@ spec:
app.kubernetes.io/part-of: stonks-oracle
spec:
automountServiceAccountToken: false
imagePullSecrets:
- name: ghcr-credentials
securityContext:
runAsNonRoot: true
runAsUser: 1000
@@ -43,7 +41,7 @@ spec:
restartPolicy: Never
containers:
- name: inttest-runner
image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
image: registry.celestium.life/stonks-oracle/query-api:latest
imagePullPolicy: Always
command: ["python", "-m", "pytest"]
args:
+5 -13
View File
@@ -1,7 +1,7 @@
# Application services for integration test sandbox
# Namespace is substituted at runtime via envsubst
# All env vars are inlined (no ConfigMap) so services are self-contained
# Images: ghcr.io/celesrenata/stonks-oracle/<service>:latest
# Images: registry.celestium.life/stonks-oracle/<service>:latest
#
# Services:
# - query-api (uvicorn services.api.app:app)
@@ -31,8 +31,6 @@ spec:
tier: api
spec:
automountServiceAccountToken: false
imagePullSecrets:
- name: ghcr-credentials
securityContext:
runAsNonRoot: true
runAsUser: 1000
@@ -42,7 +40,7 @@ spec:
type: RuntimeDefault
containers:
- name: query-api
image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
image: registry.celestium.life/stonks-oracle/query-api:latest
imagePullPolicy: Always
command: ["uvicorn", "services.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
ports:
@@ -148,8 +146,6 @@ spec:
tier: api
spec:
automountServiceAccountToken: false
imagePullSecrets:
- name: ghcr-credentials
securityContext:
runAsNonRoot: true
runAsUser: 1000
@@ -159,7 +155,7 @@ spec:
type: RuntimeDefault
containers:
- name: symbol-registry
image: ghcr.io/celesrenata/stonks-oracle/symbol-registry:latest
image: registry.celestium.life/stonks-oracle/symbol-registry:latest
imagePullPolicy: Always
command: ["uvicorn", "services.symbol_registry.app:app", "--host", "0.0.0.0", "--port", "8000"]
ports:
@@ -265,8 +261,6 @@ spec:
tier: api
spec:
automountServiceAccountToken: false
imagePullSecrets:
- name: ghcr-credentials
securityContext:
runAsNonRoot: true
runAsUser: 1000
@@ -276,7 +270,7 @@ spec:
type: RuntimeDefault
containers:
- name: risk
image: ghcr.io/celesrenata/stonks-oracle/risk:latest
image: registry.celestium.life/stonks-oracle/risk:latest
imagePullPolicy: Always
command: ["uvicorn", "services.risk.app:app", "--host", "0.0.0.0", "--port", "8000"]
ports:
@@ -382,8 +376,6 @@ spec:
tier: api
spec:
automountServiceAccountToken: false
imagePullSecrets:
- name: ghcr-credentials
securityContext:
runAsNonRoot: true
runAsUser: 1000
@@ -393,7 +385,7 @@ spec:
type: RuntimeDefault
containers:
- name: trading-engine
image: ghcr.io/celesrenata/stonks-oracle/trading-engine:latest
image: registry.celestium.life/stonks-oracle/trading-engine:latest
imagePullPolicy: Always
command: ["uvicorn", "services.trading.app:app", "--host", "0.0.0.0", "--port", "8000"]
ports: