feat(gateway): Publish galactic-gateway as its own image - #353
Merged
Conversation
privateip
force-pushed
the
feat/edge-gateway-04-cmd-wiring
branch
from
August 12, 2026 18:26
bed30c2 to
19e0d98
Compare
privateip
force-pushed
the
feat/edge-gateway-05-images-ci
branch
from
August 12, 2026 18:26
76455c5 to
15a4155
Compare
privateip
force-pushed
the
feat/edge-gateway-04-cmd-wiring
branch
from
August 12, 2026 19:04
19e0d98 to
2a23577
Compare
privateip
force-pushed
the
feat/edge-gateway-05-images-ci
branch
2 times, most recently
from
August 12, 2026 19:18
6d85070 to
4344c1a
Compare
privateip
force-pushed
the
feat/edge-gateway-04-cmd-wiring
branch
from
August 12, 2026 19:26
2a23577 to
66f6fa4
Compare
privateip
force-pushed
the
feat/edge-gateway-05-images-ci
branch
2 times, most recently
from
August 12, 2026 19:44
469c9d0 to
53414db
Compare
ecv
previously approved these changes
Aug 12, 2026
ecv
left a comment
ecv
left a comment
Contributor
There was a problem hiding this comment.
Approving. Small and correct: the new image job is wired the same way as the others, publish-kustomize-bundles correctly needs all four, and stamping config/gateway/base twice for the two containers in that pod is right.
CI red here is inherited from #351's module replace, tracked in #358.
One thing to carry into that fix rather than this PR. publish.yaml passes no build-contexts input to the reusable publish workflow, and #355 later adds COPY --from=network . /network to both the router and gateway Dockerfiles. Once that lands, these publish jobs cannot build, including the router image that ships today. Both Dockerfile lines need to come out with the replace.
privateip
force-pushed
the
feat/edge-gateway-04-cmd-wiring
branch
from
August 12, 2026 20:44
66f6fa4 to
de11cb4
Compare
- containers/galactic-gateway/Dockerfile: same shape as galactic-router's (golang builder -> distroless static:nonroot, no shell), regenerating both internal/plumbing/ebpf/prog's and internal/plumbing/ebpf/edgeprog's bpf2go output at build time (via edgepreflight's transitive import of the former), since neither is committed to git. - containers/galactic-router/Dockerfile: no functional change, just points its 'regenerate both bpf2go outputs' comment at galactic-gateway's Dockerfile (which now exists) instead of galactic-cni's (which only regenerates prog, not edgeprog). - containers/galactic-cni/Dockerfile: no functional change. - .github/workflows/publish.yaml: adds publish-galactic-gateway-image and adds it to publish-kustomize-bundles' needs. Does NOT yet stamp config/gateway/base with either image's tag -- that path doesn't exist until the next branch, so referencing it here would 404 the kustomize-bundle job on this branch's own CI. - AGENTS.md: describes the new publish pipeline in place of the now-stale 'no production release image build in this repo' note. Fifth branch in the edge-gateway stack; builds on feat/edge-gateway-04-cmd-wiring. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
privateip
force-pushed
the
feat/edge-gateway-05-images-ci
branch
from
August 12, 2026 21:30
53414db to
a635a3a
Compare
scotwells
approved these changes
Aug 13, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
The new binary from the previous PR needs a release image and a way to get it published. This adds a Dockerfile for galactic-gateway, matching galactic-router's shape, and a publish job that pushes it and stamps its tag into the two-container gateway DaemonSet's OCI Kustomize bundle entry. Fifth branch in the edge-gateway stack; builds on the galactic-gateway binary PR.
Test plan
docker buildsucceeds for the new Dockerfiletask lintis cleanRelated to #17