ci: use internal Gitea registry URL to bypass Cloudflare
CI/CD / build-and-push (push) Failing after 5m33s

Docker in DinD cannot reach git.chemavx.xyz (Cloudflare) from within
the cluster — TCP :443 times out. Switch docker login/build/push to
gitea.gitea.svc.cluster.local:3000 (insecure, same backend storage).
k8s manifest updates still reference git.chemavx.xyz for node pulls.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
chemavx
2026-04-22 19:00:43 +00:00
parent a4c04dedd7
commit 8b76802676
+20 -20
View File
@@ -6,7 +6,7 @@ on:
- main - main
env: env:
REGISTRY: git.chemavx.xyz REGISTRY: gitea.gitea.svc.cluster.local:3000
K8S_MANIFESTS_REPO: http://chemavx:${{ secrets.CI_TOKEN }}@gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git K8S_MANIFESTS_REPO: http://chemavx:${{ secrets.CI_TOKEN }}@gitea.gitea.svc.cluster.local:3000/chemavx/k8s-manifests.git
GIT_SSL_NO_VERIFY: "true" GIT_SSL_NO_VERIFY: "true"
@@ -24,50 +24,50 @@ jobs:
run: echo "TAG=${GITHUB_SHA::8}" >> $GITHUB_OUTPUT run: echo "TAG=${GITHUB_SHA::8}" >> $GITHUB_OUTPUT
- name: Log in to registry - name: Log in to registry
run: echo "${{ secrets.CI_TOKEN }}" | docker login git.chemavx.xyz -u chemavx --password-stdin run: echo "${{ secrets.CI_TOKEN }}" | docker login gitea.gitea.svc.cluster.local:3000 -u chemavx --password-stdin
- name: Build and push bot image - name: Build and push bot image
env: env:
DOCKER_BUILDKIT: "0" DOCKER_BUILDKIT: "0"
run: | run: |
TAG=${{ steps.tag.outputs.TAG }} TAG=${{ steps.tag.outputs.TAG }}
docker pull git.chemavx.xyz/chemavx/polymarket-bot:buildcache || true docker pull gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:buildcache || true
docker build \ docker build \
--cache-from git.chemavx.xyz/chemavx/polymarket-bot:buildcache \ --cache-from gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:buildcache \
-t git.chemavx.xyz/chemavx/polymarket-bot:${TAG} \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:${TAG} \
-t git.chemavx.xyz/chemavx/polymarket-bot:buildcache \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:buildcache \
-f Dockerfile . -f Dockerfile .
docker push git.chemavx.xyz/chemavx/polymarket-bot:${TAG} docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:${TAG}
docker push git.chemavx.xyz/chemavx/polymarket-bot:buildcache docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot:buildcache
- name: Build and push API image - name: Build and push API image
env: env:
DOCKER_BUILDKIT: "0" DOCKER_BUILDKIT: "0"
run: | run: |
TAG=${{ steps.tag.outputs.TAG }} TAG=${{ steps.tag.outputs.TAG }}
docker pull git.chemavx.xyz/chemavx/polymarket-bot-api:buildcache || true docker pull gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:buildcache || true
docker build \ docker build \
--cache-from git.chemavx.xyz/chemavx/polymarket-bot-api:buildcache \ --cache-from gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:buildcache \
-t git.chemavx.xyz/chemavx/polymarket-bot-api:${TAG} \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:${TAG} \
-t git.chemavx.xyz/chemavx/polymarket-bot-api:buildcache \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:buildcache \
-f Dockerfile.api . -f Dockerfile.api .
docker push git.chemavx.xyz/chemavx/polymarket-bot-api:${TAG} docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:${TAG}
docker push git.chemavx.xyz/chemavx/polymarket-bot-api:buildcache docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-api:buildcache
- name: Build and push dashboard image - name: Build and push dashboard image
env: env:
DOCKER_BUILDKIT: "0" DOCKER_BUILDKIT: "0"
run: | run: |
TAG=${{ steps.tag.outputs.TAG }} TAG=${{ steps.tag.outputs.TAG }}
docker pull git.chemavx.xyz/chemavx/polymarket-bot-dashboard:buildcache || true docker pull gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:buildcache || true
docker build \ docker build \
--cache-from git.chemavx.xyz/chemavx/polymarket-bot-dashboard:buildcache \ --cache-from gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:buildcache \
-t git.chemavx.xyz/chemavx/polymarket-bot-dashboard:${TAG} \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:${TAG} \
-t git.chemavx.xyz/chemavx/polymarket-bot-dashboard:buildcache \ -t gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:buildcache \
-f dashboard/Dockerfile \ -f dashboard/Dockerfile \
dashboard dashboard
docker push git.chemavx.xyz/chemavx/polymarket-bot-dashboard:${TAG} docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:${TAG}
docker push git.chemavx.xyz/chemavx/polymarket-bot-dashboard:buildcache docker push gitea.gitea.svc.cluster.local:3000/chemavx/polymarket-bot-dashboard:buildcache
- name: Update k8s manifests - name: Update k8s manifests
run: | run: |