-
Notifications
You must be signed in to change notification settings - Fork 24
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
use read-only filesystem with mounted tmp volumes unless in developme…
…nt mode
Showing
8 changed files
with
136 additions
and
42 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,46 @@ | ||
| #!/bin/bash | ||
|
|
||
| # Outputs the generated helm configurations after templating. | ||
|
|
||
| yaml_output=/tmp/op-hc-yaml-output.txt | ||
| error_output=/tmp/op-hc-error-output.txt | ||
| section_output=/tmp/op-hc-section-output.yml | ||
| vimrc=/tmp/op-hc-vim-rc | ||
|
|
||
| rm $yaml_output $error_output $section_output $vimrc &>/dev/null | ||
|
|
||
| helm template --debug "$@" . 1> $yaml_output 2> $error_output | ||
|
|
||
| if [ $? -gt 0 ]; then | ||
| section=`cat $error_output | grep 'Error: YAML parse error on' | cut -d: -f2 | cut -d' ' -f6-` | ||
|
|
||
| if [ -n "$section" ]; then | ||
| cat $yaml_output | sed -e "0,/\# Source: ${section//\//\\/}/d" | tail -n+2 | sed -e '/---/,$d' > $section_output | ||
|
|
||
| line=`cat $error_output | grep line | head -n1 | perl -nle 'm/line (\d+)/; print $1'` | ||
|
|
||
| if [ -n "$line" ]; then | ||
| echo "autocmd VimEnter * echo '`cat $error_output | grep line | head -n1`'" > $vimrc | ||
| vim +$line -u $vimrc $section_output | ||
| else | ||
| echo | ||
| echo "Template error: " | ||
| echo | ||
| echo --- | ||
| cat $section_output | ||
| cat $error_output | ||
| fi | ||
| else | ||
| echo | ||
| echo "Template error: " | ||
| echo | ||
| echo --- | ||
| cat $yaml_output | ||
| cat $error_output | ||
| fi | ||
| else | ||
| cat $yaml_output | ||
|
|
||
| echo | ||
| echo "Syntax ok" | ||
| fi |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,6 @@ | ||
| # !/bin/bash | ||
|
|
||
| # Install OpenProject in development mode, that is without https and allowing writes | ||
| # to the container file system. | ||
|
|
||
| helm upgrade --create-namespace --namespace openproject --install openproject --set develop=true . |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,40 @@ | ||
| {{/* | ||
| Returns the OpenProject image to be used including the respective registry and image tag. | ||
| */}} | ||
| {{- define "openproject.image" -}} | ||
| {{ .Values.image.registry }}/{{ .Values.image.repository }}{{ if .Values.image.sha256 }}@sha256:{{ .Values.image.sha256 }}{{ else }}:{{ .Values.image.tag }}{{ end }} | ||
| {{- end -}} | ||
|
|
||
| {{/* | ||
| Yields the configured container security context if enabled. | ||
| Allows writing to the container file system in development mode | ||
| This way the OpenProject container works without mounted tmp volumes | ||
| which may not work correctly in local development clusters. | ||
| */}} | ||
| {{- define "openproject.containerSecurityContext" }} | ||
| {{- if .Values.containerSecurityContext.enabled }} | ||
| securityContext: | ||
| {{- | ||
| mergeOverwrite | ||
| (omit .Values.containerSecurityContext "enabled" | deepCopy) | ||
| (dict "readOnlyRootFilesystem" (not .Values.develop)) | ||
| | toYaml | ||
| | nindent 2 | ||
| }} | ||
| {{- end }} | ||
| {{- end }} | ||
|
|
||
| {{/* Yields the configured pod security context if enabled. */}} | ||
| {{- define "openproject.podSecurityContext" }} | ||
| {{- if .Values.podSecurityContext.enabled }} | ||
| securityContext: | ||
| {{ omit .Values.podSecurityContext "enabled" | toYaml | nindent 2 | trim }} | ||
| {{- end }} | ||
| {{- end }} | ||
|
|
||
| {{- define "openproject.useTmpVolumes" -}} | ||
| {{- if not .Values.develop -}} | ||
| {{- true -}} | ||
| {{- end -}} | ||
| {{- end -}} |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters