fix: use harbor-core internal K8s service for docker push

Replace harbor.fireflylab.local (external DNS, not resolvable from pods)
with harbor-core.harbor.svc.cluster.local (internal ClusterIP, always resolvable).
DinD insecure-registry flag allows HTTP to the internal service.
values.yaml image.repository stays as harbor.fireflylab.local so kubelet
pulls via the external hostname (same image, different access path).
This commit is contained in:
2026-04-23 16:46:31 +07:00
parent 02d902bc52
commit 1e5093536f

4
Jenkinsfile vendored
View File

@@ -19,6 +19,8 @@ spec:
env: env:
- name: DOCKER_TLS_CERTDIR - name: DOCKER_TLS_CERTDIR
value: "" value: ""
args:
- --insecure-registry=harbor-core.harbor.svc.cluster.local
- name: tools - name: tools
image: alpine/git image: alpine/git
command: command:
@@ -31,7 +33,7 @@ spec:
environment { environment {
APP_NAME = 'tictactoe' APP_NAME = 'tictactoe'
HARBOR_REGISTRY = 'harbor.fireflylab.local' HARBOR_REGISTRY = 'harbor-core.harbor.svc.cluster.local'
HARBOR_PROJECT = 'library' HARBOR_PROJECT = 'library'
IMAGE = "${HARBOR_REGISTRY}/${HARBOR_PROJECT}/${APP_NAME}" IMAGE = "${HARBOR_REGISTRY}/${HARBOR_PROJECT}/${APP_NAME}"
DOCKER_HOST = 'tcp://localhost:2375' DOCKER_HOST = 'tcp://localhost:2375'