calltheory/orbital-setup
Watch
4
0
Fork
You've already forked orbital-setup
 0
Code Issues 1 Pull requests 1 Releases 28 Packages Wiki Activity Actions

Default to the public registry; make registry credentials optional #18

Merged
Patrick merged 2 commits from feat/optional-registry-credentials into main 2026-10-09 14:23:44 +00:00
Conversation 0 Commits 2 Files changed 5 +126 -40
Patrick commented 2026-10-09 14:12:38 +00:00
Owner
Copy link

cr.calltheory.com/orbital is public, but the installer required a robot
account, logged helm in, and created a pull secret on every install.
Now the chart and images come from there anonymously by default: no
login, no pull secret (an old one is removed), and imagePullSecrets is
cleared, since charts up to 0.3.5 reference orbital-registry-creds by
default.

A mirror is HARBOR_REGISTRY + HARBOR_PROJECT (chart at
//charts/orbital, images alongside), with
HARBOR_USERNAME/HARBOR_TOKEN only if it needs a login; setting just one
of the two is an error. ./install.sh asks about a mirror and a login,
saves the answers, and checks the release's chart is published in either
case. Saved registry settings now apply: the install scripts used to set
HARBOR_REGISTRY before loading them.

Co-Authored-By: Claude Opus 5.5 noreply@anthropic.com

cr.calltheory.com/orbital is public, but the installer required a robot account, logged helm in, and created a pull secret on every install. Now the chart and images come from there anonymously by default: no login, no pull secret (an old one is removed), and imagePullSecrets is cleared, since charts up to 0.3.5 reference orbital-registry-creds by default. A mirror is HARBOR_REGISTRY + HARBOR_PROJECT (chart at <registry>/<project>/charts/orbital, images alongside), with HARBOR_USERNAME/HARBOR_TOKEN only if it needs a login; setting just one of the two is an error. ./install.sh asks about a mirror and a login, saves the answers, and checks the release's chart is published in either case. Saved registry settings now apply: the install scripts used to set HARBOR_REGISTRY before loading them. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Default to the public registry; make registry credentials optional
All checks were successful
lint / terraform (fmt + validate + tflint) (pull_request) Successful in 25s
Details
security / checkov (terraform misconfig + secrets) (pull_request) Successful in 1m10s
Details
lint / ansible (yamllint + ansible-lint + syntax-check) (pull_request) Successful in 1m26s
Details
68bb8cb102 
cr.calltheory.com/orbital is public, but the installer required a robot
account, logged helm in, and created a pull secret on every install.
Now the chart and images come from there anonymously by default: no
login, no pull secret (an old one is removed), and imagePullSecrets is
cleared, since charts up to 0.3.5 reference orbital-registry-creds by
default.

A mirror is HARBOR_REGISTRY + HARBOR_PROJECT (chart at
<registry>/<project>/charts/orbital, images alongside), with
HARBOR_USERNAME/HARBOR_TOKEN only if it needs a login; setting just one
of the two is an error. ./install.sh asks about a mirror and a login,
saves the answers, and checks the release's chart is published in either
case. Saved registry settings now apply: the install scripts used to set
HARBOR_REGISTRY before loading them.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Merge branch 'main' into feat/optional-registry-credentials
All checks were successful
lint / terraform (fmt + validate + tflint) (pull_request) Successful in 19s
Details
security / checkov (terraform misconfig + secrets) (pull_request) Successful in 1m11s
Details
lint / ansible (yamllint + ansible-lint + syntax-check) (pull_request) Successful in 1m12s
Details
ab0d80c1e8
Patrick deleted branch feat/optional-registry-credentials 2026-10-09 14:23:44 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
calltheory/orbital-setup!18
No description provided.