From d11b10549652b525b0a2f62567836ea6609d605e Mon Sep 17 00:00:00 2001
From: Oleksandr Bezdieniezhnykh <oleksandr.bezdieniezhnykh@pwc.com>
Date: Mon, 20 Apr 2026 03:49:20 +0300
Subject: [PATCH] [AZ-203] Parameterize registry host via REGISTRY_HOST secret

Pipeline reads $REGISTRY_HOST from the Woodpecker global secret
'registry_host' instead of hardcoding 'localhost:5000'. The full
host:port lives in the secret, so Harbor migration (AZ-205) becomes
one secret edit rather than editing every submodule pipeline.

Made-with: Cursor
---
 .woodpecker/build-arm.yml | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/.woodpecker/build-arm.yml b/.woodpecker/build-arm.yml
index c8ac981..2a344bc 100644
--- a/.woodpecker/build-arm.yml
+++ b/.woodpecker/build-arm.yml
@@ -8,9 +8,12 @@ labels:
 steps:
   - name: build-push
     image: docker
+    environment:
+      REGISTRY_HOST:
+        from_secret: registry_host
     commands:
       - if [ "$CI_COMMIT_BRANCH" = "main" ]; then export TAG=arm; else export TAG=${CI_COMMIT_BRANCH}-arm; fi
-      - docker build -f Dockerfile -t localhost:5000/autopilot:$TAG .
-      - docker push localhost:5000/autopilot:$TAG
+      - docker build -f Dockerfile -t $REGISTRY_HOST/autopilot:$TAG .
+      - docker push $REGISTRY_HOST/autopilot:$TAG
     volumes:
       - /var/run/docker.sock:/var/run/docker.sock