From ec5e4ec4a3c5bd778177f67181b9d933146dde6b Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 22 Jan 2026 15:33:08 -0300
Subject: [PATCH] images: auth image scan and bump tags

---
 services/bstein-dev-home/image.yaml         | 4 ++++
 services/bstein-dev-home/kustomization.yaml | 4 ++--
 services/maintenance/image.yaml             | 2 ++
 services/maintenance/kustomization.yaml     | 2 +-
 4 files changed, 9 insertions(+), 3 deletions(-)

diff --git a/services/bstein-dev-home/image.yaml b/services/bstein-dev-home/image.yaml
index 3b6c757..eed2736 100644
--- a/services/bstein-dev-home/image.yaml
+++ b/services/bstein-dev-home/image.yaml
@@ -7,6 +7,8 @@ metadata:
 spec:
   image: registry.bstein.dev/bstein/bstein-dev-home-frontend
   interval: 1m0s
+  secretRef:
+    name: harbor-regcred
 ---
 apiVersion: image.toolkit.fluxcd.io/v1beta2
 kind: ImagePolicy
@@ -28,6 +30,8 @@ metadata:
 spec:
   image: registry.bstein.dev/bstein/bstein-dev-home-backend
   interval: 1m0s
+  secretRef:
+    name: harbor-regcred
 ---
 apiVersion: image.toolkit.fluxcd.io/v1beta2
 kind: ImagePolicy
diff --git a/services/bstein-dev-home/kustomization.yaml b/services/bstein-dev-home/kustomization.yaml
index 28bbc3a..7c431b2 100644
--- a/services/bstein-dev-home/kustomization.yaml
+++ b/services/bstein-dev-home/kustomization.yaml
@@ -21,9 +21,9 @@ resources:
   - ingress.yaml
 images:
   - name: registry.bstein.dev/bstein/bstein-dev-home-frontend
-    newTag: 0.1.1-119 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"}
+    newTag: 0.1.1-120 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-frontend:tag"}
   - name: registry.bstein.dev/bstein/bstein-dev-home-backend
-    newTag: 0.1.1-119 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"}
+    newTag: 0.1.1-120 # {"$imagepolicy": "bstein-dev-home:bstein-dev-home-backend:tag"}
 configMapGenerator:
   - name: chat-ai-gateway
     namespace: bstein-dev-home
diff --git a/services/maintenance/image.yaml b/services/maintenance/image.yaml
index 95acbd0..fd28d90 100644
--- a/services/maintenance/image.yaml
+++ b/services/maintenance/image.yaml
@@ -7,6 +7,8 @@ metadata:
 spec:
   image: registry.bstein.dev/bstein/ariadne
   interval: 1m0s
+  secretRef:
+    name: harbor-regcred
 ---
 apiVersion: image.toolkit.fluxcd.io/v1beta2
 kind: ImagePolicy
diff --git a/services/maintenance/kustomization.yaml b/services/maintenance/kustomization.yaml
index c1350eb..992c889 100644
--- a/services/maintenance/kustomization.yaml
+++ b/services/maintenance/kustomization.yaml
@@ -26,7 +26,7 @@ resources:
   - image-sweeper-cronjob.yaml
 images:
   - name: registry.bstein.dev/bstein/ariadne
-    newTag: 0.1.0-21 # {"$imagepolicy": "maintenance:ariadne:tag"}
+    newTag: 0.1.0-35 # {"$imagepolicy": "maintenance:ariadne:tag"}
 configMapGenerator:
   - name: disable-k3s-traefik-script
     namespace: maintenance