Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Upgrade the registry to the 2.8.3 version #949

Closed
wants to merge 7 commits into from
Closed

Upgrade the registry to the 2.8.3 version #949

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
7 commits
Select commit Hold shift + click to select a range
1d49892
use 2.8.3 registry version
pPrecel Apr 30, 2024
0d67ed4
fix registry image dir
pPrecel Apr 30, 2024
118d7f6
replace registry-init with tmp one
pPrecel Apr 30, 2024
2bb9ae3
improve comment
pPrecel Apr 30, 2024
f2a5a89
make registry-init privileged
pPrecel Apr 30, 2024
1138fad
make registry-init privileged v2
pPrecel Apr 30, 2024
ab9ccbb
make registry-init privileged v3
pPrecel Apr 30, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion config/serverless/charts/docker-registry/templates/deployment.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -47,7 +47,9 @@ spec:
hostIPC: false # Optional. The default is false if the entry is not there.
initContainers:
- name: generate-htpasswd
image: "{{ include "imageurl" (dict "reg" .Values.global.tpiContainerRegistry "img" .Values.global.images.registry) }}"
# TODO: replace this image with self crafted one with htpasswd installed
# https://github.com/kyma-project/serverless/issues/858#issuecomment-2085199217
image: alpine:3.19.1
{{- if .Values.initContainers.securityContext }}
securityContext:
{{- include "tplValue" ( dict "value" .Values.initContainers.securityContext "context" . ) | nindent 12 }}
Expand All @@ -67,6 +69,7 @@ spec:
- sh
- -ec
- |
apk add --no-cache apache2-utils
htpasswd -Bbn $(cat /regcred/username.txt) $(cat /regcred/password.txt) > ./data/htpasswd
echo "Generated htpasswd file for docker-registry..."
{{- if eq .Values.storage "filesystem" }}
Expand Down
3 changes: 2 additions & 1 deletion config/serverless/charts/docker-registry/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -137,7 +137,8 @@ initContainers:
drop: ["ALL"]
add: ["CHOWN"]
procMount: default # Optional. The default is false if the entry is not there.
readOnlyRootFilesystem: true # Mandatory
# TODO: remove this field after resolving TODO in the init container
readOnlyRootFilesystem: false # Mandatory (true)

pod:
# the following guidelines should be followed for this https://github.com/kyma-project/community/tree/main/concepts/psp-replacement
Expand Down
10 changes: 5 additions & 5 deletions config/serverless/values.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -97,13 +97,13 @@ global:
version: "main"
directory: "prod"
kaniko_executor:
name: "tpi/kaniko-executor"
name: "kaniko-executor"
version: "1.9.2-ea54c1c7"
directory: "prod"
directory: "prod/tpi"
registry:
name: "tpi/registry"
version: "2.8.1-1ae4c190"
directory: "prod"
name: "registry"
version: "2.8.3"
directory: "prod/external"
serverlessPriorityClassValue: 2000000
serverlessPriorityClassName: "serverless-priority"
images:
Expand Down
2 changes: 1 addition & 1 deletion sec-scanners-config.yaml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ protecode:
- europe-docker.pkg.dev/kyma-project/prod/function-runtime-python39:main
- europe-docker.pkg.dev/kyma-project/prod/function-runtime-python312:main
- europe-docker.pkg.dev/kyma-project/prod/tpi/kaniko-executor:1.9.2-ea54c1c7
- europe-docker.pkg.dev/kyma-project/prod/tpi/registry:2.8.1-1ae4c190
- europe-docker.pkg.dev/kyma-project/prod/external/registry:2.8.3
whitesource:
language: golang-mod
subprojects: false
Expand Down
Loading