feat: set network pullpolicy to Never, fix for cert-manager on AWS, doc updates
This commit is contained in:
parent
36ec01657c
commit
1ec1bf8448
@ -1,6 +1,6 @@
|
|||||||
# kubezero-ci
|
# kubezero-ci
|
||||||
|
|
||||||
![Version: 0.8.15](https://img.shields.io/badge/Version-0.8.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
|
![Version: 0.8.16](https://img.shields.io/badge/Version-0.8.16-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
|
||||||
|
|
||||||
KubeZero umbrella chart for all things CI
|
KubeZero umbrella chart for all things CI
|
||||||
|
|
||||||
@ -22,7 +22,7 @@ Kubernetes: `>= 1.25.0`
|
|||||||
| https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
|
| https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
|
||||||
| https://charts.jenkins.io | jenkins | 5.5.8 |
|
| https://charts.jenkins.io | jenkins | 5.5.8 |
|
||||||
| https://dl.gitea.io/charts/ | gitea | 10.4.0 |
|
| https://dl.gitea.io/charts/ | gitea | 10.4.0 |
|
||||||
| https://docs.renovatebot.com/helm-charts | renovate | 37.440.7 |
|
| https://docs.renovatebot.com/helm-charts | renovate | 38.57.0 |
|
||||||
|
|
||||||
# Jenkins
|
# Jenkins
|
||||||
- default build retention 10 builds, 32days
|
- default build retention 10 builds, 32days
|
||||||
|
@ -19,6 +19,5 @@ Installs Istio Ingress Gateways, requires kubezero-istio to be installed !
|
|||||||
|
|
||||||
## Resources
|
## Resources
|
||||||
|
|
||||||
- https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec
|
- https://github.com/cilium/cilium/blob/main/operator/pkg/model/translation/envoy_listener.go#L134
|
||||||
- https://github.com/istio/istio/blob/master/manifests/profiles/default.yaml
|
|
||||||
- https://istio.io/latest/docs/setup/install/standalone-operator/
|
|
||||||
|
@ -28,6 +28,8 @@ spec:
|
|||||||
containers:
|
containers:
|
||||||
- name: kube-multus
|
- name: kube-multus
|
||||||
image: {{ .Values.multus.image.repository }}:{{ .Values.multus.image.tag }}
|
image: {{ .Values.multus.image.repository }}:{{ .Values.multus.image.tag }}
|
||||||
|
# Always used cached images
|
||||||
|
imagePullPolicy: Never
|
||||||
command: ["/entrypoint.sh"]
|
command: ["/entrypoint.sh"]
|
||||||
args:
|
args:
|
||||||
- "--multus-conf-file=/tmp/multus-conf/00-multus.conf"
|
- "--multus-conf-file=/tmp/multus-conf/00-multus.conf"
|
||||||
@ -45,6 +47,7 @@ spec:
|
|||||||
privileged: true
|
privileged: true
|
||||||
capabilities:
|
capabilities:
|
||||||
add: ["SYS_ADMIN"]
|
add: ["SYS_ADMIN"]
|
||||||
|
terminationMessagePolicy: FallbackToLogsOnError
|
||||||
volumeMounts:
|
volumeMounts:
|
||||||
- name: run
|
- name: run
|
||||||
mountPath: /run
|
mountPath: /run
|
||||||
|
@ -27,9 +27,10 @@ multus:
|
|||||||
cilium:
|
cilium:
|
||||||
enabled: false
|
enabled: false
|
||||||
|
|
||||||
# breaks preloaded images otherwise
|
# Always use cached images
|
||||||
image:
|
image:
|
||||||
useDigest: false
|
useDigest: false
|
||||||
|
pullPolicy: Never
|
||||||
|
|
||||||
resources:
|
resources:
|
||||||
requests:
|
requests:
|
||||||
|
@ -181,6 +181,7 @@ aws-eks-asg-rolling-update-handler:
|
|||||||
- name: AWS_WEB_IDENTITY_TOKEN_FILE
|
- name: AWS_WEB_IDENTITY_TOKEN_FILE
|
||||||
value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
|
value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
|
||||||
- name: AWS_STS_REGIONAL_ENDPOINTS
|
- name: AWS_STS_REGIONAL_ENDPOINTS
|
||||||
|
value: "regional"
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
|
||||||
{{- end }}
|
{{- end }}
|
||||||
|
Loading…
Reference in New Issue
Block a user