⚡ GitHub Actions
Secrets: AWS_ROLE_ARN (OIDC) · KUBECONFIG_DATA · GITHUB_TOKEN for GHCR
Deploy from CI
Real pipeline patterns — YAML templates, secrets, and fix links.
🪣 Bitbucket Pipelines
Secrets: AWS_ACCESS_KEY_ID · AWS_SECRET_ACCESS_KEY · DOCKER_REGISTRY credentials
🦊 GitLab CI
Secrets: CI_REGISTRY_USER · CI_REGISTRY_PASSWORD · KUBECONFIG
🤖 Jenkins
Secrets: kubeconfig credential · registry creds · AWS keys
If push / deploy fails
- docker login before push in pipeline script
- Use OIDC (GHA) instead of long-lived AWS keys
- imagePullSecrets on K8s if pull fails after push
- Check registry URL matches image tag prefix