ci: migrate inttest images from GHCR to local registry, remove ghcr-credentials
This commit is contained in:
@@ -299,7 +299,7 @@ stage_end "infra_deploy" "ok"
|
|||||||
# ══════════════════════════════════════════════════════════════════════════════
|
# ══════════════════════════════════════════════════════════════════════════════
|
||||||
stage_start "seed_data"
|
stage_start "seed_data"
|
||||||
|
|
||||||
SEED_IMAGE="ghcr.io/celesrenata/stonks-oracle/query-api:${IMAGE_TAG}"
|
SEED_IMAGE="registry.celestium.life/stonks-oracle/query-api:${IMAGE_TAG}"
|
||||||
|
|
||||||
log "Seeding sandbox database ..."
|
log "Seeding sandbox database ..."
|
||||||
if ! kubectl run seed-sandbox \
|
if ! kubectl run seed-sandbox \
|
||||||
|
|||||||
@@ -31,8 +31,6 @@ spec:
|
|||||||
app.kubernetes.io/part-of: stonks-oracle
|
app.kubernetes.io/part-of: stonks-oracle
|
||||||
spec:
|
spec:
|
||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
imagePullSecrets:
|
|
||||||
- name: ghcr-credentials
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
@@ -43,7 +41,7 @@ spec:
|
|||||||
restartPolicy: Never
|
restartPolicy: Never
|
||||||
containers:
|
containers:
|
||||||
- name: inttest-runner
|
- name: inttest-runner
|
||||||
image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
|
image: registry.celestium.life/stonks-oracle/query-api:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command: ["python", "-m", "pytest"]
|
command: ["python", "-m", "pytest"]
|
||||||
args:
|
args:
|
||||||
|
|||||||
@@ -1,7 +1,7 @@
|
|||||||
# Application services for integration test sandbox
|
# Application services for integration test sandbox
|
||||||
# Namespace is substituted at runtime via envsubst
|
# Namespace is substituted at runtime via envsubst
|
||||||
# All env vars are inlined (no ConfigMap) so services are self-contained
|
# All env vars are inlined (no ConfigMap) so services are self-contained
|
||||||
# Images: ghcr.io/celesrenata/stonks-oracle/<service>:latest
|
# Images: registry.celestium.life/stonks-oracle/<service>:latest
|
||||||
#
|
#
|
||||||
# Services:
|
# Services:
|
||||||
# - query-api (uvicorn services.api.app:app)
|
# - query-api (uvicorn services.api.app:app)
|
||||||
@@ -31,8 +31,6 @@ spec:
|
|||||||
tier: api
|
tier: api
|
||||||
spec:
|
spec:
|
||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
imagePullSecrets:
|
|
||||||
- name: ghcr-credentials
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
@@ -42,7 +40,7 @@ spec:
|
|||||||
type: RuntimeDefault
|
type: RuntimeDefault
|
||||||
containers:
|
containers:
|
||||||
- name: query-api
|
- name: query-api
|
||||||
image: ghcr.io/celesrenata/stonks-oracle/query-api:latest
|
image: registry.celestium.life/stonks-oracle/query-api:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command: ["uvicorn", "services.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
command: ["uvicorn", "services.api.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||||
ports:
|
ports:
|
||||||
@@ -148,8 +146,6 @@ spec:
|
|||||||
tier: api
|
tier: api
|
||||||
spec:
|
spec:
|
||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
imagePullSecrets:
|
|
||||||
- name: ghcr-credentials
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
@@ -159,7 +155,7 @@ spec:
|
|||||||
type: RuntimeDefault
|
type: RuntimeDefault
|
||||||
containers:
|
containers:
|
||||||
- name: symbol-registry
|
- name: symbol-registry
|
||||||
image: ghcr.io/celesrenata/stonks-oracle/symbol-registry:latest
|
image: registry.celestium.life/stonks-oracle/symbol-registry:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command: ["uvicorn", "services.symbol_registry.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
command: ["uvicorn", "services.symbol_registry.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||||
ports:
|
ports:
|
||||||
@@ -265,8 +261,6 @@ spec:
|
|||||||
tier: api
|
tier: api
|
||||||
spec:
|
spec:
|
||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
imagePullSecrets:
|
|
||||||
- name: ghcr-credentials
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
@@ -276,7 +270,7 @@ spec:
|
|||||||
type: RuntimeDefault
|
type: RuntimeDefault
|
||||||
containers:
|
containers:
|
||||||
- name: risk
|
- name: risk
|
||||||
image: ghcr.io/celesrenata/stonks-oracle/risk:latest
|
image: registry.celestium.life/stonks-oracle/risk:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command: ["uvicorn", "services.risk.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
command: ["uvicorn", "services.risk.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||||
ports:
|
ports:
|
||||||
@@ -382,8 +376,6 @@ spec:
|
|||||||
tier: api
|
tier: api
|
||||||
spec:
|
spec:
|
||||||
automountServiceAccountToken: false
|
automountServiceAccountToken: false
|
||||||
imagePullSecrets:
|
|
||||||
- name: ghcr-credentials
|
|
||||||
securityContext:
|
securityContext:
|
||||||
runAsNonRoot: true
|
runAsNonRoot: true
|
||||||
runAsUser: 1000
|
runAsUser: 1000
|
||||||
@@ -393,7 +385,7 @@ spec:
|
|||||||
type: RuntimeDefault
|
type: RuntimeDefault
|
||||||
containers:
|
containers:
|
||||||
- name: trading-engine
|
- name: trading-engine
|
||||||
image: ghcr.io/celesrenata/stonks-oracle/trading-engine:latest
|
image: registry.celestium.life/stonks-oracle/trading-engine:latest
|
||||||
imagePullPolicy: Always
|
imagePullPolicy: Always
|
||||||
command: ["uvicorn", "services.trading.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
command: ["uvicorn", "services.trading.app:app", "--host", "0.0.0.0", "--port", "8000"]
|
||||||
ports:
|
ports:
|
||||||
|
|||||||
Reference in New Issue
Block a user