softwarefactory-project-zuul[bot]
4c5757b3bd
Merge pull request #8754 from ryanpetrello/strict-csp
...
Introduce a strict Content-Security-Policy
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-10 15:32:53 +00:00
Ryan Petrello
3d5f28f790
Introduce a strict Content-Security-Policy
2020-12-08 13:25:46 -05:00
Shane McDonald
8788c904c8
Revert: Force containers in k8s to run under root group
...
This reverts most of:
423df6618d
Since https://github.com/sclorg/redis-container/pull/62 is now shipped downstream
2020-12-08 13:06:00 -05:00
Shane McDonald
e85a32d463
Fix typo in deployment template
2020-12-08 13:00:14 -05:00
softwarefactory-project-zuul[bot]
d14fa93ce9
Merge pull request #8758 from hjkatz/patch-7
...
Use literal quotation marks for Kubernetes annotations instead of quo…
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 20:03:33 +00:00
softwarefactory-project-zuul[bot]
e7090a6f8a
Merge pull request #8757 from hjkatz/patch-6
...
Add kubernetes_pod_annotations to management-pod.yml.j2
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 19:38:17 +00:00
Harrison Katz
b6b87aea76
Use literal quotation marks for Kubernetes annotations instead of quote filter
2020-12-04 14:34:08 -05:00
Harrison Katz
720e8055f8
Add kubernetes_pod_annotations to management-pod.yml.j2
2020-12-04 14:08:55 -05:00
Harrison Katz
182ff3464e
Fix typo for kubernetes_service_account_annotations variable
2020-12-04 14:02:51 -05:00
softwarefactory-project-zuul[bot]
973c9d313e
Merge pull request #8751 from hjkatz/patch-4
...
Separate Kubernetes Ingress TLS spec from backend spec
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 17:03:26 +00:00
softwarefactory-project-zuul[bot]
a89a683eb4
Merge pull request #8733 from balonik/no-preload-data
...
make preload data optional again
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 15:59:12 +00:00
softwarefactory-project-zuul[bot]
52646362c3
Merge pull request #8747 from hjkatz/patch-3
...
Add Kubernetes Service support for annotations
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 15:53:39 +00:00
softwarefactory-project-zuul[bot]
8a433f30e4
Merge pull request #8746 from hjkatz/patch-2
...
Add quotes to kubernetes annotations
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-12-04 15:53:35 +00:00
Harrison Katz
6ab3d5301c
Separate Kubernetes Ingress TLS spec from backend spec
2020-12-04 10:50:49 -05:00
Harrison Katz
8b4b54d2c4
Add Kubernetes Service support for annotations
2020-12-03 18:36:02 -05:00
Harrison Katz
701deb2268
Add quotes to kubernetes annotations
2020-12-03 18:28:50 -05:00
Harrison Katz
85adc4a0ab
Remove duplicate spec key from Ingress for kubernetes template
2020-12-03 18:18:18 -05:00
JAKUBIS Peter H50R8VA
a5f676c3e1
make preload data optional again
...
Signed-off-by: JAKUBIS Peter H50R8VA <peter.jakubis@erstegroup.com>
2020-12-02 16:17:25 +01:00
softwarefactory-project-zuul[bot]
f54116afbb
Merge pull request #8431 from wenottingham/pg-ate-ten
...
Move to rhel8 PG10 container for persistent PG
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-10-22 21:38:51 +00:00
Bill Nottingham
f1d2d79f00
Move to rhel8 PG10 container for persistent PG
...
Merge in updated liveness checks from upstream template
2020-10-22 17:08:16 -04:00
Nicolas G
a50e32d4ea
Add support for Kubernetes Pod annotations
...
Variable `kubernetes_pod_annotations` will add annotations to Kubernetes pods
2020-10-21 19:59:11 -04:00
Nicolas G
23c386223c
Add Kubernetes Deployment support for annotations
...
Annotations are only supported for ingress and service accounts
This PR will allow you now to specify annotations for Kubernetes Deployment
resources by defining `kubernetes_deployment_annotations` var list
2020-10-19 16:33:54 -04:00
Brant Evans
512da5a01c
Add custom root ca certificate via configmap
...
Signed-off-by: Brant Evans <bevans@redhat.com>
2020-09-22 16:42:39 -07:00
Martinho Moreira
8d5914b3f1
K8s ServiceAccount variabilization
2020-09-14 17:37:45 +02:00
Andrew Gaffney
02252f3f97
ARM image build support
...
* upgrade `chromedriver` for ARM support
* upgrade `pynacl` to fix `libsodium` build issue on ARM
* remove unnecessary i686-specific `libstdc++.so.6` package
* install `kubectl` and `tini` from upstream binaries for ARM support
* use upstream `postgres` and `alpine` docker images for `postgresql` helm chart
Fixes #7051
2020-07-31 14:22:35 -04:00
softwarefactory-project-zuul[bot]
07e86adbb7
Merge pull request #7750 from Orabig/devel
...
Allow to use an existing PVC for postgresql install with Helm
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-07-31 13:53:09 +00:00
Seth Foster
07160d9719
Add kubernetes_web_svc_type variable to installer/inventory
...
awx-web-svc is now settable, e.g. ClusterIP or NodePort. Default
is NodePort
2020-07-29 14:18:10 -04:00
Benoît Chauvet
e917cffb5f
Allow to use an existing PersistanceVolumeClaim for postgresql install with Helm
...
Signed-off-by: Benoît Chauvet <benoit.chauvet@gmail.com>
2020-07-29 14:11:12 +02:00
Joseph Pisciotta
75c6c068a7
Remove the NodePort type for the web svc.
2020-07-17 12:51:29 -04:00
Shane McDonald
e26387cdf3
Remove references to old images
2020-07-01 14:57:48 -04:00
softwarefactory-project-zuul[bot]
5ca66ac806
Merge pull request #7317 from shanemcd/redis-root-group
...
Force containers in k8s to run under root group
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-06-16 23:41:42 +00:00
Shane McDonald
423df6618d
Force containers in k8s to run under root group
...
Normally containers belong to the 'root' group, but for some reason the
downstream red hat scl redis image only belongs to the 'redis' group by default. This fixes that.
2020-06-10 13:40:15 -04:00
mosad
eb5970b4a1
merge and resolve conflicts
2020-06-10 16:01:17 +02:00
Rebeccah
d2bbe7aa1a
remove memcache from everywhere and add djagno-redis to cover it
2020-06-09 10:24:23 -04:00
mo-saeed
0bfcacfcf4
Merge branch 'devel' into devel
2020-06-06 00:19:19 +02:00
mosad
1e6437b773
Resolve conflict 2
2020-06-06 00:17:26 +02:00
mosad
7d0c49c043
Fix conflict
2020-06-05 23:41:20 +02:00
Bill Nottingham
64e3135754
Only build one awx image instead of separate web and task images
2020-06-03 10:48:48 -04:00
Bill Nottingham
559d917184
Make supervisor more consistent
...
Configs go in /etc, sockets in /var/run/supervisor for all invocations.
2020-06-02 19:51:16 -04:00
mosad
4a9603a7ea
Allow priv container for awx_task and option to create psp
2020-05-29 20:24:49 +02:00
mosad
b13a175668
Reshape security context for AWX containers
2020-05-29 12:35:45 +02:00
softwarefactory-project-zuul[bot]
d42f57d726
Merge pull request #7034 from tchellomello/ca_trust_dir
...
Fixes ca_trust_dir mapping for k8s and openshift
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-05-26 20:03:00 +00:00
Bill Nottingham
73b0506e96
Remove obsolete setting.
...
This hasn't been used for years now.
2020-05-18 17:41:15 -04:00
Marcelo Moreira de Mello
736e7a33ac
Fixes ca_trust_dir mapping for k8s and openshift
...
Signed-off-by: Marcelo Moreira de Mello <tchello.mello@gmail.com>
2020-05-15 02:37:33 -04:00
Seth Foster
4da0e0dd80
Vendor collections for isolated jobs to work in ansible 2.10
...
kubectl and synchronize are now part of community.kubernetes
and ansible.posix collections, respectively. This change installs
these collections to a local directory to be used in inventory and
isolated management playbooks.
awx issue #6930
2020-05-13 10:41:01 -04:00
Ryan Petrello
086d6951b4
Merge branch 'downstream' into devel
2020-05-08 16:48:48 -04:00
Christian Adams
c565130b35
TERM rsyslogd instead of KILL for more graceful shutdown
2020-05-05 15:38:57 -04:00
softwarefactory-project-zuul[bot]
def3114b5b
Merge pull request #6856 from ryanpetrello/devel
...
merge in a few downstream fixes
Reviewed-by: https://github.com/apps/softwarefactory-project-zuul
2020-04-28 17:21:28 +00:00
Ryan Petrello
aad371d224
Merge branch 'downstream' into devel
2020-04-28 12:18:13 -04:00
Vyacheslav Andreykiv (Intel)
7659ffca1e
fixed ingress template
2020-04-27 14:33:42 -07:00