From 1e5093536f99a0f4117e4c0bb9856f233bb8d7dc Mon Sep 17 00:00:00 2001
From: duynguyen <huonghaiduynhim@gmail.com>
Date: Thu, 23 Apr 2026 16:46:31 +0700
Subject: [PATCH] fix: use harbor-core internal K8s service for docker push

Replace harbor.fireflylab.local (external DNS, not resolvable from pods)
with harbor-core.harbor.svc.cluster.local (internal ClusterIP, always resolvable).
DinD insecure-registry flag allows HTTP to the internal service.
values.yaml image.repository stays as harbor.fireflylab.local so kubelet
pulls via the external hostname (same image, different access path).
---
 Jenkinsfile | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/Jenkinsfile b/Jenkinsfile
index 6581afe..9c44d82 100644
--- a/Jenkinsfile
+++ b/Jenkinsfile
@@ -19,6 +19,8 @@ spec:
     env:
     - name: DOCKER_TLS_CERTDIR
       value: ""
+    args:
+    - --insecure-registry=harbor-core.harbor.svc.cluster.local
   - name: tools
     image: alpine/git
     command:
@@ -31,7 +33,7 @@ spec:
 
     environment {
         APP_NAME        = 'tictactoe'
-        HARBOR_REGISTRY = 'harbor.fireflylab.local'
+        HARBOR_REGISTRY = 'harbor-core.harbor.svc.cluster.local'
         HARBOR_PROJECT  = 'library'
         IMAGE           = "${HARBOR_REGISTRY}/${HARBOR_PROJECT}/${APP_NAME}"
         DOCKER_HOST     = 'tcp://localhost:2375'