Skip to content

REQUEST: Allow public visibility for Github Packages for kubernetes-sigs/minikube-os #6358

Open

Description

@medyagh

Organization or Repo

kubernetes-sigs/minikube-os

Name of integration

github packages

Link to integration website

https://github.com/orgs/kubernetes-sigs/packages/container/minikube-os%2Fkicbase/settings

Describe what is attempting to be accomplished

Trying to change this from private to public:

Image

Per Slack Conversations

Description
We are currently working on moving minikube images out of internal Google infrastructure and into the community. To unblock this migration, we are requesting the ability to publish public GitHub Packages (specifically container images to ghcr.io) for the kubernetes-sigs/minikube-os repository.

Currently, our GitHub Actions can push images to ghcr.io, but they default to private. We need them to be publicly accessible for our CI/CD workflows and testing to function correctly.

Why standard k8s staging registries don't work for this use case
We are fully aware of and intend to use registry.k8s.io for our official releases. However, we have a unique challenge with our PR builds:

High Volume of Components: We build 40-50 component images in the base image on PRs. It is entirely impractical to make 40-50 image promotion PRs for intermediate images that are only valid between releases.

PR Collisions: We need to test every PR with a base image built specifically for that PR before merging it back to master. If we rely on a shared staging registry, multiple PRs building at the same time will overwrite the "latest" staging tags and collide with each other.

Cron Job Instability: Because of these overwrites, master would end up pulling unpredictable intermediate staging images, which will drastically mess up our flake rates for cron jobs.

Proposed Solution & Lifecycle
Enabling public ghcr.io access for this repo gives us a temporary, isolated place to push these ephemeral PR build images.

We plan to name these temporary images kic-builds (or similar).

Once a cycle is complete and we are ready for a release, we will promote the finalized images to registry.k8s.io.

Cleanup: We are absolutely willing to prune or delete these temporary build images from ghcr.io after a release if that makes this request easier to approve or helps manage storage quotas.

Could we get public package publishing enabled for kubernetes-sigs/minikube-os to help us unblock our migration out of Google internal infra?

Thank you!

Additional context for request

No response

Activity

  1. palnabarun commented on Jun 30, 2026

    @palnabarun
    Member

    The k8s-staging approach works without promotion PRs.

    • Images in the staging registry are publicly readable and usable directly without ever running the promoter
    • The promoter is only needed to copy to registry.k8s.io — only needed for actual releases
    • PR collision issue: you can use a PR-specific tag such as gcr.io/k8s-staging-minikube-os/kicbase:pr-{PR_NUMBER} — no collision
    • Cleanup: staging has 90-day retention, no manual work needed

    The approach is similar to how Kubernetes builds the CI build images periodically.


    GHCR Approach

    • With this, you still need to run a periodic action to prune the stale staging images
    • Images will be publicly visible to users
  2. palnabarun commented on Jun 30, 2026

    @palnabarun
    Member

    Curious, what does the current internal Google infra use?

  3. k8s-triage-robot commented on Oct 21, 2026

    @k8s-triage-robot

    The Kubernetes project currently lacks enough contributors to adequately respond to all issues.

    This bot triages un-triaged issues according to the following rules:

    • After 90d of inactivity, lifecycle/stale is applied
    • After 30d of inactivity since lifecycle/stale was applied, lifecycle/rotten is applied
    • After 30d of inactivity since lifecycle/rotten was applied, the issue is closed

    You can:

    • Mark this issue as fresh with /remove-lifecycle stale
    • Close this issue with /close
    • Offer to help out with Issue Triage

    Please send feedback to sig-contributor-experience at kubernetes/community.

    /lifecycle stale

  4. added
    lifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.
    on Oct 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    area/github-integrationThird-party integrations, webhooks, or GitHub Appslifecycle/staleDenotes an issue or PR has remained open with no activity and has become stale.

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions