Update .gitea/workflows/deploy.yaml

.gitea/workflows/deploy.yaml

@@ -19,6 +19,14 @@ jobs:
           git config --global http.https://git.kimchi.sslVerify false
           git clone --depth 1 https://${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}@git.kimchi/tas/major_tom.git .
 
+      - name: Debug registry auth
+        run: |
+          curl -s -D- http://git.kimchi/v2/ | head -15
+          TOKEN=$(curl -s "http://git.kimchi/v2/token?service=container_registry&scope=repository:tas/major_tom:push,pull" -u "${{
+          secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}" | jq -r .token)
+          echo "Token received: ${TOKEN:0:20}..."
+          curl -s -D- -H "Authorization: Bearer $TOKEN" http://git.kimchi/v2/tas/major_tom/tags/list | head -15
+
       - name: Build and push container image
         run: |
           set -ex
@@ -30,10 +38,6 @@ jobs:
 
           CREDS="${{ secrets.REGISTRY_USER }}:${{ secrets.REGISTRY_PASSWORD }}"
 
-          echo "=== debug: Www-Authenticate header ==="
-          curl -sk -I http://git.kimchi/v2/ | grep -i www-authenticate || true
-          echo ""
-
           echo "=== buildah push tag ==="
           buildah push --tls-verify=false --creds "$CREDS" "$IMAGE_TAG"