mirror of
https://github.com/gitpod-io/gitpod.git
synced 2025-12-08 17:36:30 +00:00
76781bf322
* [workspace] Set lib versions: containerd to 1.6.36, runc 1.1.14 and buildkit to 0.12.5 Reasoning: https://linear.app/gitpod/issue/CLC-982/update-containerd-to-latest-patch-16x-k8s-and-runc-libs-in-gitpod-mono#comment-d5450e2c * [golangci] Remove superfluous notlint and checks * [image-builder-mk3] Fix incomplete tests where a library made the field "mediaType" non-optimal Original change: https://github.com/opencontainers/image-spec/pull/1091 * [docker] Switch from github.com/docker/distribution/reference to github.com/distribution/reference * [ws-daemon] Internalize libcontainer/specconv because it got dropped between runc 1.1.10 and 1.1.14
64 lines
1.7 KiB
Go
64 lines
1.7 KiB
Go
// Copyright (c) 2021 Gitpod GmbH. All rights reserved.
|
|
// Licensed under the GNU Affero General Public License (AGPL).
|
|
// See License.AGPL.txt in the project root for license information.
|
|
|
|
package dockerregistry
|
|
|
|
import (
|
|
"encoding/base64"
|
|
"encoding/json"
|
|
"fmt"
|
|
|
|
"github.com/gitpod-io/gitpod/installer/pkg/common"
|
|
corev1 "k8s.io/api/core/v1"
|
|
metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
|
|
"k8s.io/apimachinery/pkg/runtime"
|
|
"k8s.io/kubectl/pkg/cmd/create"
|
|
"k8s.io/utils/pointer"
|
|
)
|
|
|
|
func secret(ctx *common.RenderContext) ([]runtime.Object, error) {
|
|
if !pointer.BoolDeref(ctx.Config.ContainerRegistry.InCluster, false) {
|
|
return nil, nil
|
|
}
|
|
|
|
user := ctx.Values.InternalRegistryUsername
|
|
if user == "" {
|
|
return nil, fmt.Errorf("unknown value: internal registry username")
|
|
}
|
|
|
|
password := ctx.Values.InternalRegistryPassword
|
|
if password == "" {
|
|
return nil, fmt.Errorf("unknown value: internal registry password")
|
|
}
|
|
|
|
// todo(sje): handle if bypassing registry with proxy
|
|
registryHost := "registry." + ctx.Config.Domain
|
|
|
|
config, err := json.Marshal(create.DockerConfigJSON{
|
|
Auths: map[string]create.DockerConfigEntry{
|
|
registryHost: {
|
|
Auth: base64.StdEncoding.EncodeToString([]byte(user + ":" + password)),
|
|
},
|
|
},
|
|
})
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return []runtime.Object{&corev1.Secret{
|
|
TypeMeta: common.TypeMetaSecret,
|
|
ObjectMeta: metav1.ObjectMeta{
|
|
Name: BuiltInRegistryAuth,
|
|
Namespace: ctx.Namespace,
|
|
Labels: common.DefaultLabels(Component),
|
|
},
|
|
Type: corev1.SecretTypeDockerConfigJson,
|
|
Data: map[string][]byte{
|
|
".dockerconfigjson": config,
|
|
"user": []byte(user),
|
|
"password": []byte(password),
|
|
},
|
|
}}, nil
|
|
}
|