From af159b6b4f5cd21abaabb17decc15a2b4aa9210c Mon Sep 17 00:00:00 2001
From: Charile Zhou <charilezhou@Charile-MacBook-Pro.local>
Date: Thu, 22 Jan 2026 22:07:22 +0800
Subject: [PATCH] =?UTF-8?q?perf(ci):=20=E4=BD=BF=E7=94=A8=20Kubernetes=20?=
 =?UTF-8?q?=E5=86=85=E9=83=A8=20Service=20=E5=8A=A0=E9=80=9F=E9=95=9C?=
 =?UTF-8?q?=E5=83=8F=E6=8E=A8=E9=80=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 使用 gitea-http.infra.svc.cluster.local:3000 替代外部域名
- 避免流量经过外部网络，提升推送速度
- 配置 BuildKit 支持 HTTP insecure registry
- 同一集群内部通信，延迟更低
---
 .gitea/workflows/deploy.yaml | 20 +++++++++++++++++---
 1 file changed, 17 insertions(+), 3 deletions(-)

diff --git a/.gitea/workflows/deploy.yaml b/.gitea/workflows/deploy.yaml
index 53916f0..a98e993 100644
--- a/.gitea/workflows/deploy.yaml
+++ b/.gitea/workflows/deploy.yaml
@@ -6,7 +6,8 @@ on:
       - main
 
 env:
-  REGISTRY: gitea.tegical.world
+  # 集群内部使用 Service 名称，避免外部网络跳转
+  REGISTRY: gitea-http.infra.svc.cluster.local:3000
   IMAGE_PREFIX: tegical/seclusion
 
 jobs:
@@ -19,8 +20,21 @@ jobs:
       - name: Checkout
         uses: actions/checkout@v4
 
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+      - name: Set up Docker Buildx with insecure registry
+        run: |
+          # 创建 BuildKit 配置文件
+          mkdir -p ~/.docker
+          cat > ~/.docker/buildkitd.toml <<EOF
+          [registry."${{ env.REGISTRY }}"]
+            http = true
+            insecure = true
+          EOF
+
+          # 创建并使用新的 builder
+          docker buildx create --use --name insecure-builder \
+            --driver docker-container \
+            --driver-opt network=host \
+            --config ~/.docker/buildkitd.toml
 
       - name: Generate image tag
         id: meta