mward4
9dbe3749ba
- build chain: project, Gitea basic-auth source secret, output ImageStream, BuildConfig (Docker strategy, ubuntu:24.04 base), optional base-image ImageStream and Docker Hub pull secret - runtime: ServiceAccount + least-privilege SCC and its RoleBinding (VShell needs UID 0), PVC for config/certificate, Deployment with ImageStream trigger, ClusterIP Service, passthrough HTTPS Route - all manifests verified with 'oc create --dry-run=client' against the OpenShift 4.22 client scheme (12/12 decode cleanly)
24 lines
773 B
YAML
24 lines
773 B
YAML
# Git credentials for the private Gitea repository that holds the Dockerfile,
|
|
# the build tooling and the vendored .deb.
|
|
#
|
|
# The password is the Gitea access token (see ~/.dsh/AGENTS.md on the bastion).
|
|
# Do not commit a real token here - create the secret from the command line:
|
|
#
|
|
# oc create secret generic gitea-vshell-source -n vshell \
|
|
# --type=kubernetes.io/basic-auth \
|
|
# --from-literal=username=mward4 \
|
|
# --from-literal=password=<gitea-token>
|
|
#
|
|
# This file is the equivalent manifest if you prefer to apply it directly.
|
|
apiVersion: v1
|
|
kind: Secret
|
|
metadata:
|
|
name: gitea-vshell-source
|
|
namespace: vshell
|
|
labels:
|
|
app.kubernetes.io/name: vshell
|
|
type: kubernetes.io/basic-auth
|
|
stringData:
|
|
username: mward4
|
|
password: REPLACE_WITH_GITEA_TOKEN
|