[core-dev] change registry-facade PodSecurityPolicy

gitpod-io · Mar 4, 2022 · f893ad5 · f893ad5
1 parent 6c71369
commit f893ad5
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/.werft/jobs/build/installer/post-process.sh b/.werft/jobs/build/installer/post-process.sh
@@ -308,6 +308,13 @@ while [ "$documentIndex" -le "$DOCS" ]; do
       yq w -i k8s.yaml -d "$documentIndex" spec.suspend "true"
    fi
 
+   # change registry-facade PodSecurityPolicy
+   NAMESPACE=$(kubens -c)
+   if [[ "$NAMESPACE-ns-registry-facade" == "$NAME" ]] && [[ "$KIND" == "PodSecurityPolicy" ]]; then
+      yq w -i k8s.yaml -d "$documentIndex" spec.hostPorts[0].min "$REG_DAEMON_PORT"
+      yq w -i k8s.yaml -d "$documentIndex" spec.hostPorts[0].max "$REG_DAEMON_PORT"
+   fi
+
    # Uncomment to change or remove resources from the configmap which can be used to uninstall Gitpod
    # There are a couple use cases where you may want to do this:
    # 1. We don't want to uninstall a shared resource that is needed by other preview env namespaces