The $imagepolicy marker was still present on this line, so FluxCD Image
Automation kept overwriting CI's digest-pinned image every ~2 minutes
with whatever it considered alphabetically "highest" (":latest" beats
any hex SHA tag under an ascending-alphabetical policy) - the exact
race the ai-assistant build.yaml's own comments describe having fixed,
but the marker was never actually removed for this app specifically.
admin-solid and frontend-solid don't carry this marker, which is why
their CI-driven digest pins hold; bring ai-assistant in line with that
convention so its build.yaml "Update GitOps" step is the sole writer
going forward.
Pinned to the digest currently running in the cluster
(sha256:106d0403...) after a manual rollout restart picked up
today's security-fix build.
Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
- Fix PostgreSQL endpoints (now auto-creating correctly)
- Fix Forgejo DB connection
- Update retention to keep 10 SHA tags (was 2, too aggressive)
- Update all deployments to use available tags
- Add missing base images to registry (alpine, node, rust, python)
- Protect base images from retention deletion
- Backend: 9444056 - crane mirror base images, then build
- Frontend: d26f0bf - crane mirror node:20-alpine, then build
- Admin: e044d4c - crane mirror node:20-alpine, then build
- AI: 6f94539 - crane mirror base images, then build
- All repos now use crane to mirror base images before building
- frontend: use registry.nxtgauge.com/node:20-alpine
- admin: use registry.nxtgauge.com/node:20-alpine
- ai: use registry.nxtgauge.com/rust:1.87-alpine and alpine:3.20
- All images now use internal registry to avoid Docker Hub rate limits
- Update kustomization.yaml tags and admin base deployment image
- Remove ghcr.io references from admin gitops
Images needed in registry.nxtgauge.com:
- node:20-alpine
- rust:1.87-alpine
- alpine:3.20
- Add nxtgauge-ai-assistant deployment, service, and kustomization overlays
- Update users service to commit 430711a with AI endpoints
- Set NXTGAUGE_USERS_URL and AI_SERVICE_KEY env vars
