From 2ed816e05adb56625e336ff03ea15572998dd686 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 02:17:52 +0000
Subject: [PATCH 1/5] Initial plan


From 05bf76ae16df8ebceb049fee92d7fc1c23021e1d Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 02:24:21 +0000
Subject: [PATCH 2/5] Remove Docker login from CI by switching to public Apache
 Pulsar images

The CI workflows logged in to Docker Hub to pull a private StreamNative
image (snstage/pulsar-all). This is no longer needed since the public
Apache Pulsar image (apachepulsar/pulsar-all) can be used instead.

- Remove docker login steps from all 5 CI workflow files
- Switch Dockerfile base image from snstage/pulsar-all to apachepulsar/pulsar-all
- Update default Pulsar version from 4.1.0.10 to 4.0.3

Co-authored-by: zymap <24502569+zymap@users.noreply.github.com>
---
 .github/workflows/ci-auth-checks.yml           | 2 --
 .github/workflows/ci-checks.yml                | 2 --
 .github/workflows/ci-functions-checks.yml      | 6 ------
 .github/workflows/ci-install-script-checks.yml | 2 --
 .github/workflows/ci-packages-checks.yml       | 2 --
 scripts/run-integration-tests.sh               | 2 +-
 scripts/test-docker/Dockerfile                 | 2 +-
 7 files changed, 2 insertions(+), 16 deletions(-)

diff --git a/.github/workflows/ci-auth-checks.yml b/.github/workflows/ci-auth-checks.yml
index 879252366..5bd4047c9 100644
--- a/.github/workflows/ci-auth-checks.yml
+++ b/.github/workflows/ci-auth-checks.yml
@@ -12,8 +12,6 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
-      - name: Login SN docker hub
-        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Run token tests
         run: scripts/run-integration-tests.sh token
       - name: Run TLS tests
diff --git a/.github/workflows/ci-checks.yml b/.github/workflows/ci-checks.yml
index 1c6ad006b..047ee0eab 100644
--- a/.github/workflows/ci-checks.yml
+++ b/.github/workflows/ci-checks.yml
@@ -11,8 +11,6 @@ jobs:
   ut-tests:
     runs-on: ubuntu-latest
     steps:
-    - name: Login SN docker hub
-      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - uses: actions/checkout@v2
     - name: Run tests
       run: scripts/run-integration-tests.sh
diff --git a/.github/workflows/ci-functions-checks.yml b/.github/workflows/ci-functions-checks.yml
index cfdc4a619..1339cef6f 100644
--- a/.github/workflows/ci-functions-checks.yml
+++ b/.github/workflows/ci-functions-checks.yml
@@ -11,8 +11,6 @@ jobs:
   function-tests:
     runs-on: ubuntu-latest
     steps:
-    - name: Login SN docker hub
-      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - name: Set up Go 1.25.8
       uses: actions/setup-go@v6
       with:
@@ -28,8 +26,6 @@ jobs:
   sink-tests:
     runs-on: ubuntu-latest
     steps:
-      - name: Login SN docker hub
-        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v6
         with:
@@ -42,8 +38,6 @@ jobs:
   source-tests:
     runs-on: ubuntu-latest
     steps:
-      - name: Login SN docker hub
-        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/ci-install-script-checks.yml b/.github/workflows/ci-install-script-checks.yml
index aba93c6a2..0d3963d5e 100644
--- a/.github/workflows/ci-install-script-checks.yml
+++ b/.github/workflows/ci-install-script-checks.yml
@@ -10,8 +10,6 @@ jobs:
   install-script-check:
     runs-on: ubuntu-latest
     steps:
-    - name: Login SN docker hub
-      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
     - name: Test install
diff --git a/.github/workflows/ci-packages-checks.yml b/.github/workflows/ci-packages-checks.yml
index 20392ff70..fcf22dc63 100644
--- a/.github/workflows/ci-packages-checks.yml
+++ b/.github/workflows/ci-packages-checks.yml
@@ -11,8 +11,6 @@ jobs:
   packages-tests:
     runs-on: ubuntu-latest
     steps:
-      - name: Login SN docker hub
-        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v5
         with:
diff --git a/scripts/run-integration-tests.sh b/scripts/run-integration-tests.sh
index 1ce71ba20..89537de2c 100755
--- a/scripts/run-integration-tests.sh
+++ b/scripts/run-integration-tests.sh
@@ -3,7 +3,7 @@ set -e
 
 readonly PROJECT_ROOT=`cd $(dirname $0)/..; pwd`
 readonly IMAGE_NAME=pulsarctl-test
-readonly PULSAR_DEFAULT_VERSION="4.1.0.10"
+readonly PULSAR_DEFAULT_VERSION="4.0.3"
 readonly PULSAR_VERSION=${PULSAR_VERSION:-${PULSAR_DEFAULT_VERSION}}
 
 docker build --build-arg PULSAR_VERSION=${PULSAR_VERSION} \
diff --git a/scripts/test-docker/Dockerfile b/scripts/test-docker/Dockerfile
index 3a0dc1c8c..4f2016fd0 100644
--- a/scripts/test-docker/Dockerfile
+++ b/scripts/test-docker/Dockerfile
@@ -1,5 +1,5 @@
 ARG PULSAR_VERSION
-FROM snstage/pulsar-all:$PULSAR_VERSION
+FROM apachepulsar/pulsar-all:$PULSAR_VERSION
 
 # use root user
 USER root

From 81b27e6494cd9751c099c36e61c7e12941212b8c Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 02:32:27 +0000
Subject: [PATCH 3/5] Update Pulsar version from 4.0.3 to 4.1.3

Co-authored-by: zymap <24502569+zymap@users.noreply.github.com>
---
 scripts/run-integration-tests.sh | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/scripts/run-integration-tests.sh b/scripts/run-integration-tests.sh
index 89537de2c..94ecc201d 100755
--- a/scripts/run-integration-tests.sh
+++ b/scripts/run-integration-tests.sh
@@ -3,7 +3,7 @@ set -e
 
 readonly PROJECT_ROOT=`cd $(dirname $0)/..; pwd`
 readonly IMAGE_NAME=pulsarctl-test
-readonly PULSAR_DEFAULT_VERSION="4.0.3"
+readonly PULSAR_DEFAULT_VERSION="4.1.3"
 readonly PULSAR_VERSION=${PULSAR_VERSION:-${PULSAR_DEFAULT_VERSION}}
 
 docker build --build-arg PULSAR_VERSION=${PULSAR_VERSION} \

From ebb65a9ee830c7a13b58df4b6b3a30e81d8d8522 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 02:43:10 +0000
Subject: [PATCH 4/5] Re-add Docker login in CI workflows conditioned on
 github.actor == 'streamnativebot'

Co-authored-by: zymap <24502569+zymap@users.noreply.github.com>
---
 .github/workflows/ci-auth-checks.yml           | 3 +++
 .github/workflows/ci-checks.yml                | 3 +++
 .github/workflows/ci-functions-checks.yml      | 9 +++++++++
 .github/workflows/ci-install-script-checks.yml | 3 +++
 .github/workflows/ci-packages-checks.yml       | 3 +++
 5 files changed, 21 insertions(+)

diff --git a/.github/workflows/ci-auth-checks.yml b/.github/workflows/ci-auth-checks.yml
index 5bd4047c9..986870b31 100644
--- a/.github/workflows/ci-auth-checks.yml
+++ b/.github/workflows/ci-auth-checks.yml
@@ -12,6 +12,9 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v2
+      - name: Login SN docker hub
+        if: github.actor == 'streamnativebot'
+        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Run token tests
         run: scripts/run-integration-tests.sh token
       - name: Run TLS tests
diff --git a/.github/workflows/ci-checks.yml b/.github/workflows/ci-checks.yml
index 047ee0eab..27bc09168 100644
--- a/.github/workflows/ci-checks.yml
+++ b/.github/workflows/ci-checks.yml
@@ -11,6 +11,9 @@ jobs:
   ut-tests:
     runs-on: ubuntu-latest
     steps:
+    - name: Login SN docker hub
+      if: github.actor == 'streamnativebot'
+      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - uses: actions/checkout@v2
     - name: Run tests
       run: scripts/run-integration-tests.sh
diff --git a/.github/workflows/ci-functions-checks.yml b/.github/workflows/ci-functions-checks.yml
index 1339cef6f..1be357b22 100644
--- a/.github/workflows/ci-functions-checks.yml
+++ b/.github/workflows/ci-functions-checks.yml
@@ -11,6 +11,9 @@ jobs:
   function-tests:
     runs-on: ubuntu-latest
     steps:
+    - name: Login SN docker hub
+      if: github.actor == 'streamnativebot'
+      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - name: Set up Go 1.25.8
       uses: actions/setup-go@v6
       with:
@@ -26,6 +29,9 @@ jobs:
   sink-tests:
     runs-on: ubuntu-latest
     steps:
+      - name: Login SN docker hub
+        if: github.actor == 'streamnativebot'
+        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v6
         with:
@@ -38,6 +44,9 @@ jobs:
   source-tests:
     runs-on: ubuntu-latest
     steps:
+      - name: Login SN docker hub
+        if: github.actor == 'streamnativebot'
+        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v6
         with:
diff --git a/.github/workflows/ci-install-script-checks.yml b/.github/workflows/ci-install-script-checks.yml
index 0d3963d5e..3bba52767 100644
--- a/.github/workflows/ci-install-script-checks.yml
+++ b/.github/workflows/ci-install-script-checks.yml
@@ -10,6 +10,9 @@ jobs:
   install-script-check:
     runs-on: ubuntu-latest
     steps:
+    - name: Login SN docker hub
+      if: github.actor == 'streamnativebot'
+      run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
     - name: Check out code into the Go module directory
       uses: actions/checkout@v2
     - name: Test install
diff --git a/.github/workflows/ci-packages-checks.yml b/.github/workflows/ci-packages-checks.yml
index fcf22dc63..058db7d61 100644
--- a/.github/workflows/ci-packages-checks.yml
+++ b/.github/workflows/ci-packages-checks.yml
@@ -11,6 +11,9 @@ jobs:
   packages-tests:
     runs-on: ubuntu-latest
     steps:
+      - name: Login SN docker hub
+        if: github.actor == 'streamnativebot'
+        run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Set up Go 1.25.8
         uses: actions/setup-go@v5
         with:

From d02eed548a954d18863f9282eea64d0a11afeff4 Mon Sep 17 00:00:00 2001
From: "copilot-swe-agent[bot]" <198982749+Copilot@users.noreply.github.com>
Date: Wed, 18 Mar 2026 02:47:23 +0000
Subject: [PATCH 5/5] Use snstage/pulsar-all image for streamnativebot,
 apachepulsar/pulsar-all for others

Co-authored-by: zymap <24502569+zymap@users.noreply.github.com>
---
 .github/workflows/ci-auth-checks.yml      | 4 ++++
 .github/workflows/ci-checks.yml           | 2 ++
 .github/workflows/ci-functions-checks.yml | 6 ++++++
 .github/workflows/ci-packages-checks.yml  | 2 ++
 scripts/run-integration-tests.sh          | 2 ++
 scripts/test-docker/Dockerfile            | 3 ++-
 6 files changed, 18 insertions(+), 1 deletion(-)

diff --git a/.github/workflows/ci-auth-checks.yml b/.github/workflows/ci-auth-checks.yml
index 986870b31..7c5b7a506 100644
--- a/.github/workflows/ci-auth-checks.yml
+++ b/.github/workflows/ci-auth-checks.yml
@@ -17,5 +17,9 @@ jobs:
         run: docker login -u="${{ secrets.DOCKER_USER }}" -p="${{ secrets.DOCKER_PASSWORD}}"
       - name: Run token tests
         run: scripts/run-integration-tests.sh token
+        env:
+          PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
       - name: Run TLS tests
         run: scripts/run-integration-tests.sh tls
+        env:
+          PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
diff --git a/.github/workflows/ci-checks.yml b/.github/workflows/ci-checks.yml
index 27bc09168..fca8ca51f 100644
--- a/.github/workflows/ci-checks.yml
+++ b/.github/workflows/ci-checks.yml
@@ -17,3 +17,5 @@ jobs:
     - uses: actions/checkout@v2
     - name: Run tests
       run: scripts/run-integration-tests.sh
+      env:
+        PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
diff --git a/.github/workflows/ci-functions-checks.yml b/.github/workflows/ci-functions-checks.yml
index 1be357b22..c2553d6ef 100644
--- a/.github/workflows/ci-functions-checks.yml
+++ b/.github/workflows/ci-functions-checks.yml
@@ -23,6 +23,8 @@ jobs:
       uses: actions/checkout@v2
     - name: Function tests
       run: scripts/run-integration-tests.sh function
+      env:
+        PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
     - name: Setup tmate session
       if: failure()
       uses: mxschmitt/action-tmate@v3
@@ -41,6 +43,8 @@ jobs:
         uses: actions/checkout@v2
       - name: Sink tests
         run: scripts/run-integration-tests.sh sink
+        env:
+          PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
   source-tests:
     runs-on: ubuntu-latest
     steps:
@@ -56,3 +60,5 @@ jobs:
         uses: actions/checkout@v2
       - name: Source tests
         run: scripts/run-integration-tests.sh source
+        env:
+          PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
diff --git a/.github/workflows/ci-packages-checks.yml b/.github/workflows/ci-packages-checks.yml
index 058db7d61..a31acfc6e 100644
--- a/.github/workflows/ci-packages-checks.yml
+++ b/.github/workflows/ci-packages-checks.yml
@@ -23,6 +23,8 @@ jobs:
         uses: actions/checkout@v2
       - name: Packages tests
         run: scripts/run-integration-tests.sh packages
+        env:
+          PULSAR_IMAGE: ${{ github.actor == 'streamnativebot' && 'snstage/pulsar-all' || 'apachepulsar/pulsar-all' }}
       - name: Setup tmate session
         if: failure()
         uses: mxschmitt/action-tmate@v3
diff --git a/scripts/run-integration-tests.sh b/scripts/run-integration-tests.sh
index 94ecc201d..9d60043ef 100755
--- a/scripts/run-integration-tests.sh
+++ b/scripts/run-integration-tests.sh
@@ -5,8 +5,10 @@ readonly PROJECT_ROOT=`cd $(dirname $0)/..; pwd`
 readonly IMAGE_NAME=pulsarctl-test
 readonly PULSAR_DEFAULT_VERSION="4.1.3"
 readonly PULSAR_VERSION=${PULSAR_VERSION:-${PULSAR_DEFAULT_VERSION}}
+readonly PULSAR_IMAGE=${PULSAR_IMAGE:-"apachepulsar/pulsar-all"}
 
 docker build --build-arg PULSAR_VERSION=${PULSAR_VERSION} \
+             --build-arg PULSAR_IMAGE=${PULSAR_IMAGE} \
              -t ${IMAGE_NAME} \
              -f ${PROJECT_ROOT}/scripts/test-docker/Dockerfile ${PROJECT_ROOT}
 case ${1} in
diff --git a/scripts/test-docker/Dockerfile b/scripts/test-docker/Dockerfile
index 4f2016fd0..ed962cc5e 100644
--- a/scripts/test-docker/Dockerfile
+++ b/scripts/test-docker/Dockerfile
@@ -1,5 +1,6 @@
+ARG PULSAR_IMAGE=apachepulsar/pulsar-all
 ARG PULSAR_VERSION
-FROM apachepulsar/pulsar-all:$PULSAR_VERSION
+FROM ${PULSAR_IMAGE}:${PULSAR_VERSION}
 
 # use root user
 USER root