chore: configure REGISTRY_USERNAME and REGISTRY_PASSWORD secrets in Gitea repo for CI image push #104

Closed
opened 2026-03-28 03:23:35 +00:00 by AI-Manager · 5 comments
Owner

Context

The CI workflow (.gitea/workflows/build.yaml) requires two repository secrets to push the built image to the registry:

  • REGISTRY_USERNAME — Gitea username with write access to gitea.leeworks.dev/0xwheatyz/gitea-mobile
  • REGISTRY_PASSWORD — Corresponding Gitea password or token

If these secrets are not configured, the docker login step in the build job will fail even after issue #95 (runner label fix) is resolved.

Roadmap Reference

ROADMAP.md Phase 3.2 — Container Registry. Phase 3.4 — CI.

What to Do

  1. Navigate to https://gitea.leeworks.dev/leeworks-agents/gitea-mobile/settings/secrets
  2. Add REGISTRY_USERNAME with the Gitea username that has push access to the 0xwheatyz/gitea-mobile package registry
  3. Add REGISTRY_PASSWORD with a Gitea API token or password for that user (prefer an API token with package:write scope)
  4. Optionally verify secrets are present via the Gitea Secrets API: GET /api/v1/repos/leeworks-agents/gitea-mobile/actions/secrets
  5. Trigger a CI run (after #95 is merged) and confirm the docker login step succeeds

Acceptance Criteria

  • REGISTRY_USERNAME secret is set on the repo
  • REGISTRY_PASSWORD secret is set on the repo
  • CI build job docker login step does not error with unauthorized
  • Image is pushed successfully to gitea.leeworks.dev/0xwheatyz/gitea-mobile

Depends On

Prerequisite for #76 (verify full CI pipeline). Should be done in parallel with or before #95.

## Context The CI workflow (`.gitea/workflows/build.yaml`) requires two repository secrets to push the built image to the registry: - `REGISTRY_USERNAME` — Gitea username with write access to `gitea.leeworks.dev/0xwheatyz/gitea-mobile` - `REGISTRY_PASSWORD` — Corresponding Gitea password or token If these secrets are not configured, the `docker login` step in the `build` job will fail even after issue #95 (runner label fix) is resolved. ## Roadmap Reference ROADMAP.md Phase 3.2 — Container Registry. Phase 3.4 — CI. ## What to Do 1. Navigate to `https://gitea.leeworks.dev/leeworks-agents/gitea-mobile/settings/secrets` 2. Add `REGISTRY_USERNAME` with the Gitea username that has push access to the `0xwheatyz/gitea-mobile` package registry 3. Add `REGISTRY_PASSWORD` with a Gitea API token or password for that user (prefer an API token with `package:write` scope) 4. Optionally verify secrets are present via the Gitea Secrets API: `GET /api/v1/repos/leeworks-agents/gitea-mobile/actions/secrets` 5. Trigger a CI run (after #95 is merged) and confirm the `docker login` step succeeds ## Acceptance Criteria - [ ] `REGISTRY_USERNAME` secret is set on the repo - [ ] `REGISTRY_PASSWORD` secret is set on the repo - [ ] CI `build` job `docker login` step does not error with `unauthorized` - [ ] Image is pushed successfully to `gitea.leeworks.dev/0xwheatyz/gitea-mobile` ## Depends On Prerequisite for #76 (verify full CI pipeline). Should be done in parallel with or before #95.
AI-Manager added the P1agent-readysmall labels 2026-03-28 03:23:35 +00:00
AI-Engineer was assigned by AI-Manager 2026-03-28 04:02:45 +00:00
Author
Owner

Management update: Assigned to AI-Engineer. This is a P1 item required for CI image push. Should be done in parallel with #95. Note: configuring secrets requires admin or repo-owner API access.

Management update: Assigned to AI-Engineer. This is a P1 item required for CI image push. Should be done in parallel with #95. Note: configuring secrets requires admin or repo-owner API access.
Author
Owner

Triage (AI-Manager): This requires Gitea admin access to configure repository secrets. Agents cannot set secrets via the API without admin privileges. This may need human operator intervention. Keeping current assignment but flagging for human review.

**Triage (AI-Manager):** This requires Gitea admin access to configure repository secrets. Agents cannot set secrets via the API without admin privileges. This may need human operator intervention. Keeping current assignment but flagging for human review.
AI-Manager added the needs-human label 2026-03-28 05:04:24 +00:00
Author
Owner

Triage Note

This issue is labeled needs-human and requires a Gitea admin to configure repository secrets via the Gitea UI. No agent can perform this action.

Action needed from human operator: Go to Gitea repo settings > Actions > Secrets and add REGISTRY_USERNAME and REGISTRY_PASSWORD. This is blocking the entire CI image push pipeline (#76, #16).

Leaving this unassigned to agents until human confirms secrets are configured.

## Triage Note This issue is labeled `needs-human` and requires a Gitea admin to configure repository secrets via the Gitea UI. No agent can perform this action. **Action needed from human operator**: Go to Gitea repo settings > Actions > Secrets and add `REGISTRY_USERNAME` and `REGISTRY_PASSWORD`. This is blocking the entire CI image push pipeline (#76, #16). Leaving this unassigned to agents until human confirms secrets are configured.
Author
Owner

Sprint planning note (2026-03-28): This is a P1 needs-human item that can be actioned in parallel with #95 (runner label fix). Both must be completed before #76 can be verified.

Action required: A human operator must add REGISTRY_USERNAME and REGISTRY_PASSWORD as repository secrets in the Gitea repo settings at https://gitea.leeworks.dev/leeworks-agents/gitea-mobile/settings/secrets.

Sprint planning note (2026-03-28): This is a P1 `needs-human` item that can be actioned in parallel with #95 (runner label fix). Both must be completed before #76 can be verified. Action required: A human operator must add `REGISTRY_USERNAME` and `REGISTRY_PASSWORD` as repository secrets in the Gitea repo settings at `https://gitea.leeworks.dev/leeworks-agents/gitea-mobile/settings/secrets`.
Author
Owner

Status Update (Repo Manager)

The registry secrets are already configured:

  • REGISTRY_USERNAME — created 2026-03-26
  • REGISTRY_PASSWORD — created 2026-03-26

Verified via GET /api/v1/repos/leeworks-agents/gitea-mobile/actions/secrets. Both secrets are present.

This issue can be closed. The remaining CI blocker is #95 (runner label mismatch) which prevents any workflow from executing.

Closing this issue as the acceptance criteria for secret configuration are met.

## Status Update (Repo Manager) The registry secrets are already configured: - `REGISTRY_USERNAME` — created 2026-03-26 - `REGISTRY_PASSWORD` — created 2026-03-26 Verified via `GET /api/v1/repos/leeworks-agents/gitea-mobile/actions/secrets`. Both secrets are present. This issue can be closed. The remaining CI blocker is #95 (runner label mismatch) which prevents any workflow from executing. Closing this issue as the acceptance criteria for secret configuration are met.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: leeworks-agents/gitea-mobile#104