-
Notifications
You must be signed in to change notification settings - Fork 617
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add ACR auth to Image Updates examples #877
Add ACR auth to Image Updates examples #877
Conversation
ac48ab7
to
2e4585d
Compare
2e4585d
to
959f499
Compare
apiVersion: kustomize.config.k8s.io/v1beta1 | ||
kind: Kustomization | ||
resources: | ||
- https://github.com/fluxcd/flux2/archive/main.zip//manifests/integrations/registry-credentials-sync/azure |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated to zip archive @ main
.
We don't have a stable
tag that denotes the latest release -- that could be useful in the future.
This example uses the `fluxcd/flux2` github archive as a remote base, but you may copy the [./manifests/integrations/registry-credentials-sync/azure](github.com/fluxcd/flux2/tree/main/manifests/integrations/registry-credentials-sync/azure) | ||
folder into your own repository or use a git submodule to vendor it if preferred. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated this link -- I realized it was broken before
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
Thanks @stealthybox 🍔
Signed-off-by: leigh capili <[email protected]>
Signed-off-by: leigh capili <[email protected]>
959f499
to
e99b1c3
Compare
Release v0.28.0
AWS/GCP/Azure all had similar approaches so I factored the 3 approaches onto
a single kustomize base for a Deployment and CronJob option.
The cloud specific reconcile() shell functions are interpolated into the command
array using the Pod API so that we can patch it separately from any shell library funcs.
The KUBE_SECRET is user configurable, and as long as they are using kustomize,
it's updated on the Role as the only allowed resourceName, so that the RBAC is safer.
A similar vars trick is used to keep the AAD Pod label in sync.
The documented example uses a remote base since kustomize does not have a standard vendoring approach.
I can update the GCP and AWS examples to reference kustomize in a follow-up.