Page MenuHomePhabricator

toolforge: identify and cache in our container registry all kyverno images
Closed, ResolvedPublic

Description

Kyverno uses a number of container images that we would want to cache in our container registry, to don't rely on external infrastructure being online for us to deploy our stuff.

This is similar to what we do with ingress-nginx

Details

TitleReferenceAuthorSource BranchDest Branch
kyverno: settings: fix values for kubectl imagesrepos/cloud/toolforge/toolforge-deploy!395aborreroarturo-498-kyverno-settings-fimain
kyverno: use more images from our registryrepos/cloud/toolforge/toolforge-deploy!394aborreroarturo-211-kyverno-use-more-immain
Customize query in GitLab

Event Timeline

aborrero triaged this task as Medium priority.May 3 2024, 12:20 PM
aborrero created this task.
aborrero moved this task from Backlog to Next on the User-aborrero board.

Change #1037822 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[cloud/wmcs-cookbooks@main] wmcs.toolforge.k8s: add cookbook to upload kyverno container images

https://gerrit.wikimedia.org/r/1037822

Change #1037822 merged by Arturo Borrero Gonzalez:

[cloud/wmcs-cookbooks@main] wmcs.toolforge.k8s: add cookbook to upload kyverno container images

https://gerrit.wikimedia.org/r/1037822

Done, we have now:

  • docker-registry.tools.wmflabs.org/toolforge-kyverno-kyverno:v1.10.7
  • docker-registry.tools.wmflabs.org/toolforge-kyverno-kyvernopre:v1.10.7
  • docker-registry.tools.wmflabs.org/toolforge-kyverno-background-controller:v1.10.7
  • docker-registry.tools.wmflabs.org/toolforge-kyverno-cleanup-controller:v1.10.7
  • docker-registry.tools.wmflabs.org/toolforge-kyverno-reports-controller:v1.10.7
aborrero added a subscriber: Slst2020.

reopen because we are missing this one:

image.png (434×946 px, 63 KB)

reported by @Slst2020

Change #1052296 had a related patch set uploaded (by Arturo Borrero Gonzalez; author: Arturo Borrero Gonzalez):

[cloud/wmcs-cookbooks@main] kyverno: copy_images_to_registry: add bitnami/kubectl image

https://gerrit.wikimedia.org/r/1052296

Change #1052296 merged by Arturo Borrero Gonzalez:

[cloud/wmcs-cookbooks@main] kyverno: copy_images_to_registry: add bitnami/kubectl image

https://gerrit.wikimedia.org/r/1052296