ce7cb702218693d08ea6d83464d2457c9250027c
This commit is contained in:
commit
34c5f8963c
4 changed files with 145336 additions and 0 deletions
3
services/smartctl-image/k8s/kustomizeconfig.yaml
Normal file
3
services/smartctl-image/k8s/kustomizeconfig.yaml
Normal file
|
|
@ -0,0 +1,3 @@
|
|||
images:
|
||||
- path: spec/templates/container/image
|
||||
kind: WorkflowTemplate
|
||||
94
services/smartctl-image/k8s/network-policy.yaml
Normal file
94
services/smartctl-image/k8s/network-policy.yaml
Normal file
|
|
@ -0,0 +1,94 @@
|
|||
apiVersion: cilium.io/v2
|
||||
kind: CiliumNetworkPolicy
|
||||
metadata:
|
||||
name: toolchain
|
||||
namespace: project-delivery
|
||||
spec:
|
||||
endpointSelector:
|
||||
matchLabels:
|
||||
delivery.quorate.dev/stage: smartctl-toolchain
|
||||
egress:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:io.kubernetes.pod.namespace: kube-system
|
||||
k8s-app: kube-dns
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "53", protocol: UDP}
|
||||
- {port: "53", protocol: TCP}
|
||||
rules:
|
||||
dns:
|
||||
- matchName: packages.wolfi.dev
|
||||
- matchName: proxy.golang.org
|
||||
- matchName: codeload.github.com
|
||||
- matchName: storage.googleapis.com
|
||||
- matchName: sum.golang.org
|
||||
- toFQDNs:
|
||||
- {matchName: packages.wolfi.dev}
|
||||
- {matchName: proxy.golang.org}
|
||||
- {matchName: codeload.github.com}
|
||||
- {matchName: storage.googleapis.com}
|
||||
- {matchName: sum.golang.org}
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "443", protocol: TCP}
|
||||
---
|
||||
apiVersion: cilium.io/v2
|
||||
kind: CiliumNetworkPolicy
|
||||
metadata:
|
||||
name: publish
|
||||
namespace: project-delivery
|
||||
spec:
|
||||
endpointSelector:
|
||||
matchLabels:
|
||||
delivery.quorate.dev/project: smartctl
|
||||
delivery.quorate.dev/stage: smartctl-publish
|
||||
io.cilium.k8s.policy.serviceaccount: project-delivery-executor
|
||||
egress:
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:io.kubernetes.pod.namespace: kube-system
|
||||
k8s-app: kube-dns
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "53", protocol: UDP}
|
||||
- {port: "53", protocol: TCP}
|
||||
rules:
|
||||
dns:
|
||||
- matchName: registry.quorate.internal
|
||||
- toCIDR:
|
||||
- 10.108.252.250/32
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "443", protocol: TCP}
|
||||
- toEndpoints:
|
||||
- matchLabels:
|
||||
k8s:io.kubernetes.pod.namespace: quay
|
||||
app: quay
|
||||
quay-component: quay-app
|
||||
quay-operator/quayregistry: quay-registry
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "8443", protocol: TCP}
|
||||
---
|
||||
apiVersion: cilium.io/v2
|
||||
kind: CiliumNetworkPolicy
|
||||
metadata:
|
||||
name: ingress
|
||||
namespace: quay
|
||||
spec:
|
||||
endpointSelector:
|
||||
matchLabels:
|
||||
app: quay
|
||||
quay-component: quay-app
|
||||
quay-operator/quayregistry: quay-registry
|
||||
ingress:
|
||||
- fromEndpoints:
|
||||
- matchLabels:
|
||||
k8s:io.kubernetes.pod.namespace: project-delivery
|
||||
delivery.quorate.dev/project: smartctl
|
||||
delivery.quorate.dev/stage: smartctl-publish
|
||||
io.cilium.k8s.policy.serviceaccount: project-delivery-executor
|
||||
toPorts:
|
||||
- ports:
|
||||
- {port: "8443", protocol: TCP}
|
||||
25
services/smartctl-image/k8s/project.yaml
Normal file
25
services/smartctl-image/k8s/project.yaml
Normal file
|
|
@ -0,0 +1,25 @@
|
|||
apiVersion: delivery.quorate.dev/v1alpha1
|
||||
kind: ProjectDelivery
|
||||
metadata:
|
||||
name: image
|
||||
namespace: project-delivery
|
||||
spec:
|
||||
source:
|
||||
repository: https://forge.quorate.internal/quorate/cluster
|
||||
continuous:
|
||||
ref: refs/heads/master
|
||||
paths:
|
||||
- packages/smartctl
|
||||
- services/smartctl-image
|
||||
- services/project-delivery/actions/go-oci/cache.fsx
|
||||
- services/project-delivery/actions/go-oci/contract.fsx
|
||||
- services/project-delivery/actions/go-oci/image.fsx
|
||||
- services/project-delivery/actions/go-oci/initialize.fsx
|
||||
- services/project-delivery/actions/go-oci/publish.fsx
|
||||
- services/project-delivery/actions/go-oci/source.fsx
|
||||
- services/project-delivery/k8s/workflows/go-oci/base
|
||||
targets:
|
||||
- kind: QuayOCI
|
||||
repository: quorate/smartctl-exporter
|
||||
workflowTemplateRef:
|
||||
name: build
|
||||
49
services/smartctl-image/k8s/workflow-patch.yaml
Normal file
49
services/smartctl-image/k8s/workflow-patch.yaml
Normal file
|
|
@ -0,0 +1,49 @@
|
|||
- op: replace
|
||||
path: /metadata/labels/app.kubernetes.io~1instance
|
||||
value: smartctl
|
||||
- op: replace
|
||||
path: /spec/podMetadata/labels/delivery.quorate.dev~1project
|
||||
value: smartctl
|
||||
- op: replace
|
||||
path: /spec/templates/5/metadata/labels/delivery.quorate.dev~1stage
|
||||
value: smartctl-toolchain
|
||||
- op: replace
|
||||
path: /spec/templates/7/metadata/labels/delivery.quorate.dev~1stage
|
||||
value: smartctl-publish
|
||||
- op: replace
|
||||
path: /spec/templates/1/volumes/0
|
||||
value: &orchestration
|
||||
name: orchestration
|
||||
projected:
|
||||
defaultMode: 0444
|
||||
sources:
|
||||
- configMap:
|
||||
name: go-oci-orch
|
||||
items:
|
||||
- {key: cache.fsx, path: cache.fsx}
|
||||
- {key: cache-gc.fsx, path: cache-gc.fsx}
|
||||
- {key: contract.fsx, path: contract.fsx}
|
||||
- {key: image.fsx, path: image.fsx}
|
||||
- {key: initialize.fsx, path: initialize.fsx}
|
||||
- {key: publish.fsx, path: publish.fsx}
|
||||
- {key: source.fsx, path: source.fsx}
|
||||
- configMap:
|
||||
name: smartctl-project
|
||||
- op: replace
|
||||
path: /spec/templates/3/volumes/0
|
||||
value: *orchestration
|
||||
- op: replace
|
||||
path: /spec/templates/4/volumes/0
|
||||
value: *orchestration
|
||||
- op: replace
|
||||
path: /spec/templates/5/volumes/0
|
||||
value: *orchestration
|
||||
- op: replace
|
||||
path: /spec/templates/6/volumes/0
|
||||
value: *orchestration
|
||||
- op: replace
|
||||
path: /spec/templates/7/volumes/0
|
||||
value: *orchestration
|
||||
- op: replace
|
||||
path: /spec/templates/8/volumes/0
|
||||
value: *orchestration
|
||||
Loading…
Reference in a new issue