From 407aa4fc4d8915dcb8cf6cdcc6bac594f2b521bf Mon Sep 17 00:00:00 2001
From: Khue Doan <mail@khuedoan.com>
Date: Mon, 11 Aug 2025 19:48:23 +0700
Subject: [PATCH] fix: temporary workaround for plain HTTP OCI

Change-Id: Ib418c40782a57d4e5c026cf346932c77fa7622a6
---
 platform/production/apps.yaml | 17 ++++++++++++++---
 1 file changed, 14 insertions(+), 3 deletions(-)

diff --git a/platform/production/apps.yaml b/platform/production/apps.yaml
index f3f4d65..65835f2 100644
--- a/platform/production/apps.yaml
+++ b/platform/production/apps.yaml
@@ -11,8 +11,8 @@ spec:
         elements:
           - namespace: test
             app: example
-            # - namespace: khuedoan
-            #   app: blog
+          - namespace: khuedoan
+            app: blog
             # - namespace: khuedoan
             #   app: notes
             # - namespace: khuedoan
@@ -28,7 +28,7 @@ spec:
         name: in-cluster
         namespace: '{{.namespace}}'
       source:
-        repoURL: 'oci://registry.cloudlab.khuedoan.com/{{.namespace}}/{{.app}}'
+        repoURL: 'oci://registry.registry.svc.cluster.local/{{.namespace}}/{{.app}}'
         targetRevision: production
         path: '.'
       syncPolicy:
@@ -39,3 +39,14 @@ spec:
           - CreateNamespace=true
           - ApplyOutOfSyncOnly=true
           - ServerSideApply=true
+---
+# TODO remove this stupid shit
+apiVersion: v1
+kind: Secret
+metadata:
+  name: oci-khuedoan-blog
+  labels:
+    argocd.argoproj.io/secret-type: repository
+stringData:
+  url: oci://registry.registry.svc.cluster.local/khuedoan/blog
+  insecureOCIForceHttp: "true"
-- 
2.51.2