Pull CI images from registry.ddbuild.io (#10744)

Pull CI images from registry.ddbuild.io

Revert prefix name and add ci- prefix

Merge branch 'master' into sarahchen6/update-ci-images

Merge branch 'master' into sarahchen6/update-ci-images

Remove update-docker-build-image from README

Merge branch 'master' into sarahchen6/update-ci-images

Merge branch 'master' into sarahchen6/update-ci-images

Co-authored-by: sarah.chen <sarah.chen@datadoghq.com>

Author: sarahchen6

.github/workflows/README.md

@@ -91,16 +91,6 @@ Close them if no following update within a week.
 
 _Recovery:_ Manually trigger the action again.
 
-### update-docker-build-image [🔗](update-docker-build-image.yaml)
-
-_Trigger:_ Quarterly released, loosely [a day after the new image tag is created](https://github.com/DataDog/dd-trace-java-docker-build/blob/master/.github/workflows/docker-tag.yml).
-
-_Action:_ Update the Docker build image used in GitLab CI with the latest tag.
-
-_Recovery:_ Download artifacts and upload them manually to the related _download release_.
-
-_Notes:_  Manually trigger the action again given the desired image tag as input.
-
 ### update-download-releases [🔗](update-download-releases.yaml)
 
 _Trigger:_ When a release is published.

.github/workflows/update-docker-build-image.yaml

@@ -29,7 +29,8 @@ variables:
   GRADLE_VERSION: "8.14.4" # must match gradle-wrapper.properties
   MAVEN_REPOSITORY_PROXY: "https://depot-read-api-java.us1.ddbuild.io/magicmirror/magicmirror/@current/"
   GRADLE_PLUGIN_PROXY: "https://depot-read-api-java.us1.ddbuild.io/magicmirror/magicmirror/@current/"
-  BUILDER_IMAGE_VERSION_PREFIX: "v26.02-" # use either an empty string (e.g. "") for latest images or a version followed by a hyphen (e.g. "v25.05-")
+  BUILDER_IMAGE_REPO: "registry.ddbuild.io/images/mirror/dd-trace-java-docker-build" # images are pinned in images/mirror.lock.yaml in the DataDog/images repo
+  BUILDER_IMAGE_VERSION_PREFIX: "ci-" # use either an empty string (e.g. "") for latest images or a version followed by a hyphen (e.g. "ci-" or "123_merge-")
   REPO_NOTIFICATION_CHANNEL: "#apm-java-escalations"
   DEFAULT_TEST_JVMS: /^(8|11|17|21|25|tip)$/ # the latest "tip" version is 26
   PROFILE_TESTS:
@@ -142,7 +143,7 @@ default:
     fi
 
 .gradle_build: &gradle_build
-  image: ghcr.io/datadog/dd-trace-java-docker-build:${BUILDER_IMAGE_VERSION_PREFIX}base
+  image: ${BUILDER_IMAGE_REPO}:${BUILDER_IMAGE_VERSION_PREFIX}base
   stage: build
   variables:
     MAVEN_OPTS: "-Xms256M -Xmx1024M"
@@ -218,7 +219,7 @@ default:
 # on the central publisher portal, it invalidates the old one. This check prevents going further.
 # See https://datadoghq.atlassian.net/wiki/x/Oog5OgE
 maven-central-pre-release-check:
-  image: ghcr.io/datadog/dd-trace-java-docker-build:${BUILDER_IMAGE_VERSION_PREFIX}base
+  image: ${BUILDER_IMAGE_REPO}:${BUILDER_IMAGE_VERSION_PREFIX}base
   stage: .pre
   rules:
     - if: '$CI_COMMIT_TAG =~ /^v[0-9]+\.[0-9]+\.[0-9]+$/'
@@ -399,7 +400,7 @@ config-inversion-linter:
 
 test_published_artifacts:
   extends: .gradle_build
-  image: ghcr.io/datadog/dd-trace-java-docker-build:${BUILDER_IMAGE_VERSION_PREFIX}7 # Needs Java7 for some tests
+  image: ${BUILDER_IMAGE_REPO}:${BUILDER_IMAGE_VERSION_PREFIX}7 # Needs Java7 for some tests
   stage: tests
   needs: [ build ]
   variables:
@@ -566,7 +567,7 @@ muzzle-dep-report:
 
 .test_job:
   extends: .gradle_build
-  image: ghcr.io/datadog/dd-trace-java-docker-build:${BUILDER_IMAGE_VERSION_PREFIX}$testJvm
+  image: ${BUILDER_IMAGE_REPO}:${BUILDER_IMAGE_VERSION_PREFIX}$testJvm
   tags: [ "docker-in-docker:amd64" ] # use docker-in-docker runner for testcontainers
   needs: [ build_tests ]
   stage: tests
@@ -794,7 +795,7 @@ test_smoke_semeru8_debugger:
     testJvm: "semeru8"
 
 aggregate_test_counts:
-  image: ghcr.io/datadog/dd-trace-java-docker-build:${BUILDER_IMAGE_VERSION_PREFIX}base
+  image: ${BUILDER_IMAGE_REPO}:${BUILDER_IMAGE_VERSION_PREFIX}base
   stage: test-summary
   # Note: No explicit 'needs' or 'dependencies' required
   # By default, GitLab CI automatically downloads artifacts from ALL jobs in previous stages