Skip to content

Commit c7dfe69

Browse files
ci(deploy): move ghcr namespace from personal -> org
The packages should live under the org, not a personal user namespace: ghcr.io/mastermanas805/instant-X -> ghcr.io/instanode-dev/instant-X Reason: - 403 Forbidden on push from worker/provisioner workflows because the org repo's GITHUB_TOKEN can't write to a personal-namespace package without explicit per-package "Manage Actions access" linking. - Personal-namespace packages are tied to an individual; org-namespace is the right ownership boundary for shared infra. First successful push from this workflow will create the org package (default visibility: private). The k8s cluster needs read access; if pods hit ImagePullBackOff after this lands, either flip the package visibility to public OR add an imagePullSecret pointing at the new namespace. The personal-namespace packages can be deleted after we verify the org-namespace deploys are working end-to-end. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
1 parent 683909c commit c7dfe69

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

.github/workflows/deploy.yml

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ permissions:
3838
packages: write
3939

4040
env:
41-
IMAGE_REPO: ghcr.io/mastermanas805/instant-worker
41+
IMAGE_REPO: ghcr.io/instanode-dev/instant-worker
4242
K8S_NAMESPACE: instant-infra
4343
K8S_DEPLOYMENT: instant-worker
4444
K8S_CONTAINER: worker

0 commit comments

Comments
 (0)