Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add ACR auth to Image Updates examples #877

Merged

Conversation

stealthybox
Copy link
Member

AWS/GCP/Azure all had similar approaches so I factored the 3 approaches onto
a single kustomize base for a Deployment and CronJob option.

The cloud specific reconcile() shell functions are interpolated into the command
array using the Pod API so that we can patch it separately from any shell library funcs.

The KUBE_SECRET is user configurable, and as long as they are using kustomize,
it's updated on the Role as the only allowed resourceName, so that the RBAC is safer.

A similar vars trick is used to keep the AAD Pod label in sync.

The documented example uses a remote base since kustomize does not have a standard vendoring approach.
I can update the GCP and AWS examples to reference kustomize in a follow-up.

  • Document ACR / AKS Image Update Considerations
  • Add registry cred Deployments/CronJobs for aws/gcp/azure via kustomize

@stealthybox stealthybox force-pushed the integrations-registry-credentials-sync branch from ac48ab7 to 2e4585d Compare February 8, 2021 08:32
@stealthybox stealthybox force-pushed the integrations-registry-credentials-sync branch from 2e4585d to 959f499 Compare February 8, 2021 15:43
apiVersion: kustomize.config.k8s.io/v1beta1
kind: Kustomization
resources:
- https://github.com/fluxcd/flux2/archive/main.zip//manifests/integrations/registry-credentials-sync/azure
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated to zip archive @ main.
We don't have a stable tag that denotes the latest release -- that could be useful in the future.

Comment on lines +861 to +862
This example uses the `fluxcd/flux2` github archive as a remote base, but you may copy the [./manifests/integrations/registry-credentials-sync/azure](github.com/fluxcd/flux2/tree/main/manifests/integrations/registry-credentials-sync/azure)
folder into your own repository or use a git submodule to vendor it if preferred.
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Updated this link -- I realized it was broken before

@stealthybox stealthybox changed the title Refactor Image Update Cloud Examples /w Kustomize Add ACR auth to Image Updates examples Feb 8, 2021
Copy link
Member

@stefanprodan stefanprodan left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

Thanks @stealthybox 🍔

@stealthybox stealthybox force-pushed the integrations-registry-credentials-sync branch from 959f499 to e99b1c3 Compare February 8, 2021 16:16
@stefanprodan stefanprodan added area/docs Documentation related issues and pull requests area/image-automation Automated image updates related issues and pull requests labels Feb 8, 2021
@stefanprodan stefanprodan merged commit ec2a834 into fluxcd:main Feb 8, 2021
@stefanprodan stefanprodan mentioned this pull request Feb 10, 2021
29 tasks
ybelleguic pushed a commit to ybelleguic/flux2 that referenced this pull request Jan 9, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/docs Documentation related issues and pull requests area/image-automation Automated image updates related issues and pull requests
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants