Add new infra architecture 10

Tiltfile

@@ -52,8 +52,11 @@ if use_dockerhub:
 
 # For Gitea registry mode
 # Gitea registry is accessed via the registry subdomain (TLS terminated at ingress)
+# However, for internal cluster builds (like Kaniko), we need to use the internal service name
 if use_gitea_registry:
-    base_registry = 'registry.bakery-ia.local'
+    # For external access (ingress): registry.bakery-ia.local
+    # For internal cluster access: gitea-http.gitea.svc.cluster.local:3000
+    base_registry = 'gitea-http.gitea.svc.cluster.local:3000'
     python_image = 'python:3.11-slim'
     # Add fallback to local registry if Gitea registry is not available
     fallback_registry = 'localhost:5001'
@@ -299,7 +302,7 @@ elif use_gitea_registry:
     print("""
     GITEA REGISTRY MODE ENABLED
     Images will be pushed to Gitea registry: registry.bakery-ia.local
-    Base images will be pulled from: %s/%s
+    Base images will be pulled from internal cluster registry: %s/%s
     Make sure Gitea is running and accessible
     To disable: unset USE_GITEA_REGISTRY or set USE_GITEA_REGISTRY=false
     To use Docker Hub: export USE_DOCKERHUB=true
@@ -315,6 +318,7 @@ else:
     To use Gitea registry: export USE_GITEA_REGISTRY=true
     To change base registry: export BASE_REGISTRY=<registry-url>
     To change Python image: export PYTHON_IMAGE=<image:tag>
+    Note: When using Gitea registry, base images use internal cluster registry: gitea-http.gitea.svc.cluster.local:3000
     """ % (base_registry, python_image))
     default_registry('localhost:5001')
 
@@ -1331,14 +1335,16 @@ local_resource(
                 -n tekton-pipelines \
                 --create-namespace \
                 --timeout 10m \
-                --wait
+                --wait \
+                --set pipeline.build.baseRegistry="${base_registry}"
         else
             echo "  Installing new Tekton CICD deployment..."
             helm upgrade --install tekton-cicd infrastructure/cicd/tekton-helm \
                 -n tekton-pipelines \
                 --create-namespace \
                 --timeout 10m \
-                --wait
+                --wait \
+                --set pipeline.build.baseRegistry="${base_registry}"
         fi
 
         echo ""