insecure registry

internal/generator/gitea_actions.go

@@ -78,27 +78,36 @@ func writeDeployJobs(b *strings.Builder, cfg *config.KforgeConfig, opts GiteaAct
 		"run": `echo "SHORT_SHA=$(git rev-parse --short HEAD)" >> $GITHUB_ENV`,
 	})
 
-	writeStep(b, "Login to registry", map[string]any{
-		"uses": "docker/login-action@v2",
-		"with": map[string]any{
-			"registry": cfg.Registry.URL,
-			"username": "${{ secrets.DOCKER_USERNAME }}",
-			"password": "${{ secrets.DOCKER_PASSWORD }}",
-		},
-	})
+	if !cfg.Registry.Insecure {
+		writeStep(b, "Login to registry", map[string]any{
+			"uses": "docker/login-action@v2",
+			"with": map[string]any{
+				"registry": cfg.Registry.URL,
+				"username": "${{ secrets.DOCKER_USERNAME }}",
+				"password": "${{ secrets.DOCKER_PASSWORD }}",
+			},
+		})
+	}
 
 	fullRepo := cfg.Registry.URL + "/" + cfg.Meta.Tenant + "/" + cfg.Meta.Name
+	buildWith := map[string]any{
+		"context":    ".",
+		"platforms":  "linux/amd64",
+		"file":       cfg.Defaults.Dockerfile,
+		"push":       true,
+		"tags":       fmt.Sprintf("%s:latest\n%s:${{ env.SHORT_SHA }}", fullRepo, fullRepo),
+		"provenance": false,
+		"sbom":       false,
+	}
+	if cfg.Registry.Insecure {
+		buildWith["buildkitd-config-inline"] = fmt.Sprintf(
+			"[registry.%q]\n  http = true\n  insecure = true",
+			cfg.Registry.URL,
+		)
+	}
 	writeStep(b, "Build and push image", map[string]any{
 		"uses": "docker/build-push-action@v5",
-		"with": map[string]any{
-			"context":    ".",
-			"platforms":  "linux/amd64",
-			"file":       cfg.Defaults.Dockerfile,
-			"push":       true,
-			"tags":       fmt.Sprintf("%s:latest\n%s:${{ env.SHORT_SHA }}", fullRepo, fullRepo),
-			"provenance": false,
-			"sbom":       false,
-		},
+		"with": buildWith,
 	})
 
 	if cfg.ActionRef != "" {

internal/generator/manifests.go

@@ -151,8 +151,10 @@ func Deployment(env *config.ResolvedEnvironment, tokens interpolate.Tokens) (str
 
 	b.WriteString(renderResourceLines(env.Resources, "        "))
 
-	b.WriteString("      imagePullSecrets:\n")
-	fmt.Fprintf(&b, "      - name: %s\n", env.ImagePullSecret)
+	if env.ImagePullSecret != "" {
+		b.WriteString("      imagePullSecrets:\n")
+		fmt.Fprintf(&b, "      - name: %s\n", env.ImagePullSecret)
+	}
 
 	return b.String(), nil
 }
@@ -331,8 +333,10 @@ func CronJob(env *config.ResolvedEnvironment, job *config.ResolvedCronJob, token
 		b.WriteString(renderResourceLines(*job.Resources, "            "))
 	}
 
-	b.WriteString("          imagePullSecrets:\n")
-	fmt.Fprintf(&b, "          - name: %s\n", env.ImagePullSecret)
+	if env.ImagePullSecret != "" {
+		b.WriteString("          imagePullSecrets:\n")
+		fmt.Fprintf(&b, "          - name: %s\n", env.ImagePullSecret)
+	}
 
 	return b.String(), nil
 }