From 3191402f23a9530ee39bc7dbe280c0304c1dd1ec Mon Sep 17 00:00:00 2001
From: stefanbaxter <stefan@snjallgogn.is>
Date: Tue, 7 Jul 2026 16:56:11 +0000
Subject: [PATCH] ci: mirror synmetrix images to registry.fraios.dev
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Enable the registry.fraios.dev mirror in the build pipeline so the ArgoCD
Image Updater (whose only configured registry is registry.fraios.dev) can
track synmetrix images by digest — the Docker Hub quicklookup/* images have
no registry entry in the updater config, so auto-deploy never fired for them.

Every built image now pushes to BOTH Docker Hub (existing deployments) and
registry.fraios.dev/fraios/synmetrix-* (matches the working fraios app
pattern: data-services, memory-service, etc.). Uses the FRAIOS_REGISTRY_*
secrets, same as the other fraios build workflows.

The trailing Dockerfile comments force a one-time rebuild of cube/actions/
hasura so they populate registry.fraios.dev under this pipeline.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
---
 .github/workflows/build-containers.yml | 20 +++++++++++++++++++-
 services/actions/Dockerfile            |  2 ++
 services/cubejs/Dockerfile             |  2 ++
 services/hasura/Dockerfile             |  2 ++
 4 files changed, 25 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/build-containers.yml b/.github/workflows/build-containers.yml
index 7051949e..0ee66b40 100644
--- a/.github/workflows/build-containers.yml
+++ b/.github/workflows/build-containers.yml
@@ -143,11 +143,29 @@ jobs:
           username: ${{ secrets.DOCKER_USER }}
           password: ${{ secrets.DOCKER_PASS }}
 
+      - name: Log in to registry.fraios.dev
+        if: github.event_name != 'pull_request'
+        uses: docker/login-action@v3
+        with:
+          registry: registry.fraios.dev
+          username: ${{ secrets.FRAIOS_REGISTRY_USERNAME }}
+          password: ${{ secrets.FRAIOS_REGISTRY_PASSWORD }}
+
+      # Mirror every image we build to registry.fraios.dev (on-prem installs
+      # pull from there; Docker Hub remains for existing deployments).
+      - name: Compute fraios registry image name
+        id: fraios
+        run: |
+          IMAGE="${{ matrix.image }}"
+          echo "image=registry.fraios.dev/fraios/${IMAGE#quicklookup/}" >> $GITHUB_OUTPUT
+
       - name: Extract metadata
         id: meta
         uses: docker/metadata-action@v5
         with:
-          images: ${{ matrix.image }}
+          images: |
+            ${{ matrix.image }}
+            ${{ steps.fraios.outputs.image }}
           tags: |
             type=ref,event=branch
             type=ref,event=pr
diff --git a/services/actions/Dockerfile b/services/actions/Dockerfile
index 9808edaa..19831de0 100644
--- a/services/actions/Dockerfile
+++ b/services/actions/Dockerfile
@@ -31,3 +31,5 @@ COPY src/ /app/src/
 RUN ln -s $NODE_PATH ./node_modules
 
 CMD ["yarn", "start.dev"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger
diff --git a/services/cubejs/Dockerfile b/services/cubejs/Dockerfile
index a095ca6f..c0612e06 100644
--- a/services/cubejs/Dockerfile
+++ b/services/cubejs/Dockerfile
@@ -39,3 +39,5 @@ RUN apt-get update && apt-get install -y wget unzip && \
     rm /tmp/DatabricksJDBC.zip
 
 CMD ["yarn", "start"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger
diff --git a/services/hasura/Dockerfile b/services/hasura/Dockerfile
index 1c804c85..46cd2ea5 100644
--- a/services/hasura/Dockerfile
+++ b/services/hasura/Dockerfile
@@ -21,3 +21,5 @@ COPY ./config.yaml ./config.yaml
 
 # Default command shows help; override with specific migration commands  
 CMD ["hasura-cli", "--help"]
+
+# registry.fraios.dev mirror enabled — rebuild trigger