Commit 4c0e7745 authored by Craig Russell's avatar Craig Russell
Browse files

Deploying a local docker registry

parent d8db79ba
......@@ -18,6 +18,12 @@ beta.binder.deploy.prod:
beta.binder.deploy.staging:
helmsman --apply --debug --target binderhub-production -f helmsman.yaml -f helmsman/gpu.yaml --always-upgrade
alpha.trow.deploy.prod:
helmsman --apply --debug --target trow -f helmsman.yaml -f helmsman/production.yaml -f helmsman/openstack.yaml --always-upgrade
alpha.registry.deploy.prod:
helmsman --apply --debug --target docker-registry -f helmsman.yaml -f helmsman/production.yaml -f helmsman/openstack.yaml --always-upgrade
# Beta gpu enabled service
......
persistence:
enabled: true
size: 350Gi
ingress:
enabled: true
hosts:
- "registry.ctr26.duckdns.org"
annotations:
kubernetes.io/ingress.class: nginx
kubernetes.io/tls-acme: "true"
cert-manager.k8s.io/acme-challenge-type: http01
cert-manager.io/cluster-issuer: letsencrypt-production
nginx.ingress.kubernetes.io/proxy-body-size: "0"
tls:
- secretName: registry-alpha-binder-bioimagearchive-org
hosts:
- "registry.ctr26.duckdns.org"
secrets:
htpasswd: ctr26:$apr1$u1qd43lg$4x/B/j2CDT8GIh.QlQ92F0
# ingress:
# enabled: true
# hosts:
# - "binder.bioimagearchive.org"
# annotations:
# kubernetes.io/ingress.class: nginx
# kubernetes.io/tls-acme: "true"
# cert-manager.k8s.io/acme-challenge-type: http01
# cert-manager.io/cluster-issuer: letsencrypt-production
# # https:
# # enabled: true
# # type: nginx
# tls:
# - secretName: binder-bioimagearchive-org-cert
# hosts:
# - binder.bioimagearchive.org
\ No newline at end of file
......@@ -34,7 +34,8 @@ helmRepos:
jetstack: "https://charts.jetstack.io"
persistent_binderhub: "https://gesiscss.github.io/persistent_binderhub"
nginx-stable: "https://helm.nginx.com/stable"
trow: "https://trow.io"
twuni: "https://helm.twun.io"
appsTemplates:
binderhub: &binderhub
name: "binderhub"
......@@ -55,9 +56,10 @@ appsTemplates:
set:
registry.username: "$CI_REGISTRY_USER"
registry.password: "$CI_REGISTRY_PASSWORD"
# config.BinderHub.image_prefix: "$CI_REGISTRY_IMAGE"
jupyterhub.hub.services.binder.apiToken: "$SECRET_JUPYTERHUB_PROXY_TOKEN"
jupyterhub.proxy.secretToken: "$SECRET_BINDERHUB_SERVICE"
config.BinderHub.image_prefix: "$CI_REGISTRY_IMAGE"
config.GitHubRepoProvider.access_token: "$SECRET_GITHUBREPOPROVIDER"
# jupyterhub.auth.github.clientId: "$SECRET_GITHUB_CLIENTID"
# jupyterhub.auth.github.clientSecret: "$SECRET_GITHUB_CLIENTSECRET"
......@@ -71,7 +73,24 @@ appsTemplates:
# config.DockerRegistry.url: "https://dockerhub.ebi.ac.uk"
# config.DockerRegistry.token_url: ""
# registry.url: "https://dockerhub.ebi.ac.uk"
# registry.username: "$CI_REGISTRY_USER"
# registry.password: "$CI_REGISTRY_PASSWORD"
# config.DockerRegistry.url: https://trow.ctr26.duckdns.org
# config.DockerRegistry.token_url: ""
# config.DockerRegistry.token_url: "https://trow.ctr26.duckdns.org/v2/token?service="
# config.BinderHub.image_prefix: "trow.ctr26.duckdns.org/"
# registry.url: https://trow.ctr26.duckdns.org
# registry.username: "bia"
# registry.password: "ocft71NtyxkbRkZpRzesA1bdjF0mr1Cc3f0Xb0btHN8="
# config.BinderHub.use_registry: true
# config.DockerRegistry.token_url: None
# config.DockerRegistry.token_url: "https://registry.ctr26.duckdns.org/v2/token?service="
config.DockerRegistry.token_url: ""
config.BinderHub.image_prefix: "registry.ctr26.duckdns.org/"
registry.url: https://registry.ctr26.duckdns.org
# registry.username: "admin"
# registry.password: "password"
config.BinderHub.use_registry: true
jupyterhub: &jupyterhub
name: "jupyterhub"
chart: "jupyterhub/jupyterhub"
......@@ -119,6 +138,30 @@ appsTemplates:
timeout: 120
apps:
trow:
name: "trow"
namespace: "trow"
chart: "trow/trow"
enabled: true
version: "0.3.3"
valuesFiles:
- trow/values.yaml
docker-registry:
name: "docker-registry"
namespace: "docker-registry"
chart: "twuni/docker-registry"
enabled: true
version: "1.11.0"
set:
proxy:enabled: true
proxy.username: "$CI_REGISTRY_USER"
proxy.password: "$CI_REGISTRY_PASSWORD"
secrets.htpasswd: |
["ctr26:$$apr1$$EXYGtKUe$$5Rp1YRR85iNvnc9xamn391"]
valuesFiles:
- docker-registry/values.yaml
nginx-ingress:
name: "ingress-nginx"
namespace: "ingress-nginx"
......
......@@ -27,3 +27,7 @@ namespaces:
protected: false
ingress-nginx:
protected: false
trow:
protected: false
docker-registry:
protected: false
\ No newline at end of file
......@@ -27,3 +27,7 @@ namespaces:
protected: true
ingress-nginx:
protected: true
trow:
protected: true
docker-registry:
protected: true
\ No newline at end of file
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment