ce7cb702218693d08ea6d83464d2457c9250027c

services/quay-operator/k8s/workflow-patch.yaml

@@ -0,0 +1,80 @@
+- op: replace
+  path: /metadata/labels/app.kubernetes.io~1instance
+  value: quay-op
+- op: replace
+  path: /spec/podMetadata/labels/delivery.quorate.dev~1project
+  value: quay-op
+- op: replace
+  path: /spec/templates/5/metadata/labels/delivery.quorate.dev~1stage
+  value: quay-op-toolchain
+- op: replace
+  path: /spec/templates/7/metadata/labels/delivery.quorate.dev~1stage
+  value: quay-op-publish
+- op: replace
+  path: /spec/templates/1/volumes/0
+  value: &orchestration
+    name: orchestration
+    projected:
+      defaultMode: 0444
+      sources:
+        - configMap:
+            name: go-oci-orch
+            items:
+              - {key: contract.fsx, path: contract.fsx}
+              - {key: initialize.fsx, path: go-init.fsx}
+              - {key: image.fsx, path: image.fsx}
+        - configMap:
+            name: quay-op-project
+- op: replace
+  path: /spec/templates/3/volumes/0
+  value: *orchestration
+- op: replace
+  path: /spec/templates/4/volumes/0
+  value: *orchestration
+- op: replace
+  path: /spec/templates/5/volumes/0
+  value: *orchestration
+- op: replace
+  path: /spec/templates/6/volumes/0
+  value: *orchestration
+- op: replace
+  path: /spec/templates/7/volumes/0
+  value: *orchestration
+- op: replace
+  path: /spec/templates/7/volumes/1/secret/secretName
+  value: quay-op-writer
+- op: replace
+  path: /spec/templates/8/volumes/0
+  value: *orchestration
+- op: add
+  path: /spec/templates/6/container/volumeMounts/-
+  value:
+    name: workflow-workspace
+    mountPath: /workspace
+    subPath: output/workspace
+- op: replace
+  path: /spec/templates/4/container/volumeMounts
+  value:
+    - {name: orchestration, mountPath: /orchestration, readOnly: true}
+    - {name: cache-auth, mountPath: /cache-auth, readOnly: true}
+    - {name: cache-ca, mountPath: /cache-ca, readOnly: true}
+    - {name: workflow-workspace, mountPath: /cache, subPath: cache}
+    - {name: workflow-workspace, mountPath: /tmp, subPath: state/cache-tmp}
+- op: replace
+  path: /spec/templates/5/container/volumeMounts
+  value:
+    - {name: orchestration, mountPath: /orchestration, readOnly: true}
+    - {name: workflow-workspace, mountPath: /toolchain, subPath: toolchain}
+    - {name: workflow-workspace, mountPath: /tmp, subPath: state/toolchain-tmp}
+- op: add
+  path: /spec/templates/6/container/volumeMounts/5/readOnly
+  value: true
+- op: replace
+  path: /spec/templates/8/container/volumeMounts
+  value:
+    - {name: orchestration, mountPath: /orchestration, readOnly: true}
+    - {name: cache-auth, mountPath: /cache-auth, readOnly: true}
+    - {name: cache-ca, mountPath: /cache-ca, readOnly: true}
+    - {name: workflow-workspace, mountPath: /source, subPath: source, readOnly: true}
+    - {name: workflow-workspace, mountPath: /build-cache, subPath: output/go-cache, readOnly: true}
+    - {name: workflow-workspace, mountPath: /tmp, subPath: output/cache-tmp}