Adding new docker pull secret
This commit is contained in:
parent
20b1a3a8f4
commit
d74a839bc5
|
|
@ -90,6 +90,41 @@ Currently only for one user:
|
||||||
kubectl apply -f datalab/rstudio.yaml
|
kubectl apply -f datalab/rstudio.yaml
|
||||||
```
|
```
|
||||||
|
|
||||||
|
|
||||||
|
## Add private docker registry
|
||||||
|
|
||||||
|
*Current state:* Registry of hub.moritzgraf.de:5000 is used.
|
||||||
|
|
||||||
|
```sh
|
||||||
|
# create secret base64 encoded and put it in htpasswd helm chart
|
||||||
|
USER='moritz'
|
||||||
|
PASSWORD='xxx'
|
||||||
|
docker run --entrypoint htpasswd --rm registry:2 -Bbn $USER $PASSWORD
|
||||||
|
#
|
||||||
|
kubectl apply -f development/registry.secret.yaml
|
||||||
|
```
|
||||||
|
|
||||||
|
### creating docker-pull-secret
|
||||||
|
|
||||||
|
Create credentials secret [according to docu](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/#create-a-secret-by-providing-credentials-on-the-command-line):
|
||||||
|
|
||||||
|
```sh
|
||||||
|
namespaces="datalab"
|
||||||
|
for i in $( echo $namespaces ) ; do
|
||||||
|
kubectl create secret docker-registry registry-haumdaucher-de \
|
||||||
|
-n $i \
|
||||||
|
--docker-server=registry.haumdaucher.de \
|
||||||
|
--docker-username=moritz \
|
||||||
|
--docker-password='xxx' \
|
||||||
|
--docker-email=moritz@moritzgraf.de \
|
||||||
|
--dry-run -o yaml > ./${i}/docker-pull.yaml.secret
|
||||||
|
done
|
||||||
|
# apply
|
||||||
|
for i in $( echo $namespaces ) ; do
|
||||||
|
kubectl apply -f ${i}/docker-pull.yaml.secret
|
||||||
|
done
|
||||||
|
```
|
||||||
|
|
||||||
## auth
|
## auth
|
||||||
|
|
||||||
Including:
|
Including:
|
||||||
|
|
@ -117,41 +152,6 @@ Migate
|
||||||
|
|
||||||
Backup
|
Backup
|
||||||
|
|
||||||
## Add private docker registry
|
|
||||||
|
|
||||||
*Current state:* Registry of hub.moritzgraf.de:5000 is used.
|
|
||||||
|
|
||||||
```sh
|
|
||||||
# create secret base64 encoded
|
|
||||||
USER="moritz"
|
|
||||||
PASSWORD="password"
|
|
||||||
docker run --entrypoint htpasswd --rm registry:2 -Bbn admin admin123 | base64
|
|
||||||
# use the output and put it in development/registry.secret.yaml
|
|
||||||
kubectl apply -f development/registry.yaml
|
|
||||||
|
|
||||||
```
|
|
||||||
|
|
||||||
|
|
||||||
### after
|
|
||||||
|
|
||||||
Create credentials secret [according to docu](https://kubernetes.io/docs/tasks/configure-pod-container/pull-image-private-registry/#create-a-secret-by-providing-credentials-on-the-command-line):
|
|
||||||
|
|
||||||
```sh
|
|
||||||
namespaces="datalab"
|
|
||||||
for i in $( echo $namespaces ) ; do
|
|
||||||
kubectl create secret docker-registry hub-moritzgraf-de \
|
|
||||||
-n $i \
|
|
||||||
--docker-server=hub.moritzgraf.de:5000 \
|
|
||||||
--docker-username=moritz \
|
|
||||||
--docker-password='xxx' \
|
|
||||||
--docker-email=moritz@moritzgraf.de \
|
|
||||||
--dry-run -o yaml > ./${i}/docker-pull.yaml.secret
|
|
||||||
done
|
|
||||||
# apply
|
|
||||||
for i in $( echo $namespaces ) ; do
|
|
||||||
kubectl apply -f ${i}/docker-pull.yaml.secret
|
|
||||||
done
|
|
||||||
```
|
|
||||||
|
|
||||||
## Add mopbot & corona & corona-api
|
## Add mopbot & corona & corona-api
|
||||||
|
|
||||||
|
|
|
||||||
Binary file not shown.
Binary file not shown.
|
|
@ -1,14 +0,0 @@
|
||||||
---
|
|
||||||
apiVersion: cert-manager.io/v1alpha2
|
|
||||||
kind: Certificate
|
|
||||||
metadata:
|
|
||||||
name: registry
|
|
||||||
namespace: development
|
|
||||||
spec:
|
|
||||||
secretName: registry-haumdaucher-de
|
|
||||||
dnsNames:
|
|
||||||
- registry.haumdaucher.de
|
|
||||||
issuerRef:
|
|
||||||
name: letsencrypt-prod
|
|
||||||
kind: ClusterIssuer
|
|
||||||
group: cert-manager.io
|
|
||||||
Loading…
Reference in New Issue