Partial Outage — Container Registry

Summary

During routine firewall maintenance, our public GitLab Runner temporarily lost the ability to push images to the Container Registry (rg.boxexchanger.net).
The registry itself remained fully operational, but push operations from the runner consistently failed with timeout errors (context deadline exceeded).

Impact

• Public CI/CD pipelines were unable to complete Docker image builds requiring a push to the registry.
• No impact to end-user services or internal operations outside CI/CD.
• Pull operations and direct registry access remained unaffected.

Root Cause

While updating the list of allowed IPs in the firewall, an incorrect rule was applied.
As a result, the public GitLab Runner’s outgoing traffic was unintentionally blocked from reaching the registry endpoint.
The registry service was functioning normally — only connectivity from the runner was affected.

Resolution

The firewall configuration was corrected and the relevant IP ranges were re-added to the allowlist.
After applying the fix, all push operations from the public runner resumed normal operation.