The AutoCoder/AutoCoder-Engine workflow .gitea/workflows/autodeploy.yaml was failing after moving the runner to ubuntu-latest. This change set repaired the end-to-end pipeline so it can:
autocoder-engineDate: 2026-02-10
IMAGE_REPO, registry creds, kubeconfig).docker login to fail.DOCKER_HOST strategy).gitea.app.lan).GITHUB_ENV but did not export PATH within the step.kubectl cluster-info required kube-system perms; CI SA is namespace-scoped.AutoCoder/AutoCoder-Engine:
REGISTRY, REGISTRY_USERNAME, REGISTRY_PASSWORDIMAGE_REPOKUBECONFIG_BASE64INTERNAL_CA_CERT_PEMINTERNAL_CA_CERT_PEM into the runner image trust store before docker login.Install kubectl step to export PATH="$HOME/.local/bin:$PATH" before invoking kubectl.kubectl -n autocoder-engine get deploy/autocoder-engine).autocoder-engine:
k8s/07-ci-deployer-rbac.yaml (ServiceAccount autocoder-engine-ci + Role/RoleBinding).autocoder-engine-ci-token and generated a kubeconfig for Actions.gitea-registry-cred and attached it to ServiceAccount autocoder-engine.gitea:
deployment/gitea-act-runner to mount internal CA for Docker registry into dind.configmap/gitea-act-runner-config:
runner.envs.DOCKER_HOST -> tcp://172.17.0.1:2375--host=tcp://0.0.0.0:2375./etc/containerd/config.toml:
plugins."io.containerd.grpc.v1.cri".registry.config_path = "/etc/containerd/certs.d"/etc/containerd/certs.d/gitea.app.lan/hosts.toml referencing the internal CA.containerd.deployment/autocoder-engine.