forgejo_admin/westside-contracts
1
0
Fork 0
Code Issues 2 Pull requests Projects Releases Packages Wiki Activity Actions

fix: Kaniko insecure-registry for Harbor (#193) #22

Merged
forgejo_admin merged 1 commit from 193-kaniko-insecure-registry into main 2026-03-27 03:16:22 +00:00
Conversation 0 Commits 1 Files changed 1 +1
forgejo_admin commented 2026-03-27 03:03:44 +00:00
Owner
Copy link

Summary

Kaniko probes HTTPS on port 443 before falling back to HTTP, causing a 90-second timeout against Harbor's HTTP-only in-cluster service. Adding insecure-registry tells Kaniko to skip the HTTPS probe and use HTTP directly.

Changes

  • .woodpecker.yaml: Added insecure-registry: harbor.harbor.svc.cluster.local to the build-and-push step settings, alongside the existing insecure: true

Test Plan

  • Tests pass locally
  • Merge and trigger a Woodpecker pipeline on main
  • Verify the build-and-push step no longer hangs for 90s on the HTTPS probe
  • Confirm the image is pushed to Harbor successfully

Review Checklist

  • Passed automated review-fix loop
  • No secrets committed
  • No unnecessary file changes
  • Commit messages are descriptive

Related Notes

## Summary Kaniko probes HTTPS on port 443 before falling back to HTTP, causing a 90-second timeout against Harbor's HTTP-only in-cluster service. Adding `insecure-registry` tells Kaniko to skip the HTTPS probe and use HTTP directly. ## Changes - `.woodpecker.yaml`: Added `insecure-registry: harbor.harbor.svc.cluster.local` to the `build-and-push` step settings, alongside the existing `insecure: true` ## Test Plan - [ ] Tests pass locally - [ ] Merge and trigger a Woodpecker pipeline on main - [ ] Verify the build-and-push step no longer hangs for 90s on the HTTPS probe - [ ] Confirm the image is pushed to Harbor successfully ## Review Checklist - [ ] Passed automated review-fix loop - [ ] No secrets committed - [ ] No unnecessary file changes - [ ] Commit messages are descriptive ## Related Notes - Closes forgejo_admin/pal-e-platform#193 - `westside-contracts` -- the project this work belongs to
Kaniko probes HTTPS on port 443 before falling back to HTTP, causing 90s
timeout against Harbor's HTTP-only service. The insecure-registry setting
tells Kaniko to use HTTP directly.

Refs: forgejo_admin/pal-e-platform#193

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
forgejo_admin deleted branch 193-kaniko-insecure-registry 2026-03-27 03:16:22 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
forgejo_admin/westside-contracts!22
No description provided.