Simplify CI: remove Tailscale sidecar, use skopeo for push #74

Merged

eblume merged 2 commits from feature/simplify-ci-registry-access into main

2026-01-30 10:18:20 -08:00

eblume commented

2026-01-30 10:14:40 -08:00

Owner

Summary

Remove Tailscale sidecar from build-push-image action - registry.ops.eblu.me is directly reachable from k8s pods via Caddy
Use skopeo for pushing images instead of docker push - Docker 27's manifest format has compatibility issues with zot registry
Remove tailscale_authkey secret requirement from workflows

Deployment and Testing

Tested with nettest-v0.10.0 tag - build succeeded and image pushed to registry

🤖 Generated with Claude Code

## Summary - Remove Tailscale sidecar from build-push-image action - registry.ops.eblu.me is directly reachable from k8s pods via Caddy - Use skopeo for pushing images instead of docker push - Docker 27's manifest format has compatibility issues with zot registry - Remove tailscale_authkey secret requirement from workflows ## Deployment and Testing - [x] Tested with nettest-v0.10.0 tag - build succeeded and image pushed to registry 🤖 Generated with [Claude Code](https://claude.com/claude-code)

eblume added 2 commits

2026-01-30 10:14:41 -08:00

Simplify CI: remove Tailscale sidecar for registry access

Build Container / build (push) Failing after 23s

Details

a9370dc305

The registry at registry.ops.eblu.me is now accessible directly from
k8s pods via Caddy reverse proxy. This removes the need for the
Tailscale sidecar workaround that was required when the registry
was only available via Tailscale MagicDNS.

Changes:
- build-push-image action: direct docker build/push instead of
  tarball + skopeo via Tailscale container
- build-container workflow: remove tailscale_authkey parameter

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

Use skopeo for registry push (Docker 27 manifest compat)

Build Container / build (push) Successful in 12s

Details

7aada180de

Docker 27's manifest format has compatibility issues with zot registry.
Skopeo handles manifest conversion correctly.

Still simpler than the old Tailscale sidecar approach - just save to
tarball and use skopeo copy.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>