[builds-api,harbor,image-config] Move pre-built images to harbor
Open, Stalled, MediumPublic
Actions

Assigned To

Authored By

	dcaro
	Nov 10 2025, 1:16 PM

Description

(Not necessary for the stable release of push-to-deploy feature set, rather a next step improvement)

This means:

push them to harbor, under toolforge-pre-built/<image_name> for example
Fix jobs-api to support harbor-based pre-buit image urls (see https://gitlab.wikimedia.org/repos/cloud/toolforge/jobs-api/-/merge_requests/252)
update image-config to use those images (also toollabs-images ? )
the image-builder hosts might need harbor auth for docker login (research)
might need special immutability policy too (like the toolforge repo)
update docs (wiki/scripts/readmes/cookbooks) to point there instead
- https://wikitech.wikimedia.org/wiki/Portal:Toolforge/Admin/Jobs_Service#Prebuilt_image_management
- https://codesearch.wmcloud.org/search/?q=docker-registry.tools.wmflabs.org&files=&excludeFiles=&repos= (not every repo needs updating)
- https://codesearch.wmcloud.org/search/?q=docker-registry.svc.toolforge.org&files=&excludeFiles=&repos= (not every repo needs updating)

Related Objects
Search...

Status	Subtype	Assigned	Task
Resolved		LucasWerkmeister	T320140 Migrate wd-shex-infer from Toolforge GridEngine to Toolforge Kubernetes
Resolved		matmarex	T319707 Migrate dtcheck from Toolforge GridEngine to Toolforge Kubernetes
Resolved		Legoktm	T320062 Migrate steve-adder from Toolforge GridEngine to Toolforge Kubernetes
Resolved		Legoktm	T320011 Migrate rfa-voting-history from Toolforge GridEngine to Toolforge Kubernetes
In Progress		dcaro	T194332 [builds-api,components-api,webservice,jobs-api] Make Toolforge a proper platform as a service with push-to-deploy and build packs
Resolved		dcaro	T393564 [Hypothesis] WE6.3.10 start a beta for the push-to-deploy features
In Progress		komla	T368600 [KR] WE6.3 Introduce a sustainability scoring system for the Toolforge platform
Resolved		dcaro	T375199 [Hypothesis] WE6.3.4 If we enable the automatic deployment of a minimal tool, we will be able to evaluate the end to end flow and set the groundwork for adding support for more complex tools and deployment flows.
Resolved		dcaro	T362051 [components-api] First iteration of the component API
Open		None	T362077 [components-api] Add webservice support
Open		None	T401102 Prebuilt webservice containers should not log to NFS by default
In Progress	Feature	Raymond_Ndibe	T348755 [jobs-api,webservice] Run webservices via the jobs framework
Open		None	T409728 [image-config] deprecate and move all data to builds-api
Open		None	T409725 [jobs-api,webservice] Fetch images from builds-api
Open		None	T409726 [builds-api] Add an endpoint to get all available images
Stalled		Raymond_Ndibe	T409727 [builds-api,harbor,image-config] Move pre-built images to harbor