Skip to content

Instantly share code, notes, and snippets.

@cmoulliard

cmoulliard/gist:28d61d6d16233b720e133f4d7fad48cb

Last active March 11, 2021 10:07
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save cmoulliard/28d61d6d16233b720e133f4d7fad48cb to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save cmoulliard/28d61d6d16233b720e133f4d7fad48cb to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
apiVersion: v1
kind: Pod
metadata:
annotations:
kpack.io/build: cert
labels:
image.kpack.io/buildNumber: "1"
image.kpack.io/image: tutorial-image
image.kpack.io/imageGeneration: "1"
kpack.io/build: tutorial-image-build-1
name: tutorial-image-build-1-build-pod
namespace: demo
spec:
containers:
- image: gcr.io/cf-build-service-public/kpack/completion@sha256:7b8b829ee21f6009ea9b580cad86fb2f74f28d2aa34676d4a130fb62b9fc9893
imagePullPolicy: IfNotPresent
name: completion
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
imagePullSecrets:
- name: tutorial-registry-credentials
initContainers:
- env:
- name: CA_CERTS_DATA
value: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
image: cmoulliard/my-setup-ca-certs
imagePullPolicy: IfNotPresent
name: setup-ca-certs
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /workspace
name: ca-certs
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
workingDir: /workspace
- args:
- -dockerconfig=tutorial-registry-credentials
env:
- name: GIT_URL
value: https://github.com/spring-projects/spring-petclinic
- name: GIT_REVISION
value: master
- name: PLATFORM_ENV_VARS
value: "null"
- name: IMAGE_TAG
value: kube-registry.infra.svc:5000/tutorial
- name: RUN_IMAGE
value: paketobuildpacks/run:base-cnb
- name: DNS_PROBE_HOSTNAME
value: kube-registry.infra.svc:5000
- name: BUILD_CHANGES
image: gcr.io/cf-build-service-public/kpack/build-init@sha256:94cdd9223310c2bbc6b9f10d17f754337d782f32ac1cd7de58d3e78746d5ab7c
imagePullPolicy: IfNotPresent
name: prepare
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/build-secrets/tutorial-registry-credentials
name: secret-volume-tutorial-registry-credentials
- mountPath: /builderPullSecrets
name: builder-pull-secrets-dir
readOnly: true
- mountPath: /imagePullSecrets
name: image-pull-secrets-dir
readOnly: true
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /projectMetadata
name: layers-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
workingDir: /workspace
- args:
- -app=/workspace
- -group=/layers/group.toml
- -plan=/layers/plan.toml
command:
- /cnb/lifecycle/detector
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder
imagePullPolicy: IfNotPresent
name: detect
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -group=/layers/group.toml
- -analyzed=/layers/analyzed.toml
- -cache-dir=/cache
- kube-registry.infra.svc:5000/tutorial
command:
- /cnb/lifecycle/analyzer
env:
- name: HOME
value: /builder/home
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder
imagePullPolicy: IfNotPresent
name: analyze
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -group=/layers/group.toml
- -layers=/layers
- -cache-dir=/cache
command:
- /cnb/lifecycle/restorer
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder
imagePullPolicy: IfNotPresent
name: restore
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -app=/workspace
- -group=/layers/group.toml
- -plan=/layers/plan.toml
command:
- /cnb/lifecycle/builder
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder
imagePullPolicy: IfNotPresent
name: build
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -app=/workspace
- -group=/layers/group.toml
- -analyzed=/layers/analyzed.toml
- -cache-dir=/cache
- -project-metadata=/layers/project-metadata.toml
- -report=/var/report/report.toml
- -process-type=web
- kube-registry.infra.svc:5000/tutorial
- kube-registry.infra.svc:5000/tutorial:b1.20210311.095254
command:
- /cnb/lifecycle/exporter
env:
- name: HOME
value: /builder/home
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder
imagePullPolicy: IfNotPresent
name: export
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/report
name: report-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-m8cvc
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
nodeName: h01-118
nodeSelector:
kubernetes.io/os: linux
priority: 0
restartPolicy: Never
schedulerName: default-scheduler
securityContext:
fsGroup: 1000
runAsGroup: 1000
runAsUser: 1000
serviceAccount: tutorial-service-account
serviceAccountName: tutorial-service-account
terminationGracePeriodSeconds: 30
tolerations:
- effect: NoExecute
key: node.kubernetes.io/not-ready
operator: Exists
tolerationSeconds: 300
- effect: NoExecute
key: node.kubernetes.io/unreachable
operator: Exists
tolerationSeconds: 300
volumes:
- name: secret-volume-tutorial-registry-credentials
secret:
defaultMode: 420
secretName: tutorial-registry-credentials
- emptyDir: {}
name: cache-dir
- emptyDir: {}
name: layers-dir
- emptyDir: {}
name: home-dir
- emptyDir: {}
name: workspace-dir
- emptyDir: {}
name: platform-dir
- emptyDir: {}
name: report-dir
- emptyDir: {}
name: network-wait-launcher-dir
- emptyDir: {}
name: image-pull-secrets-dir
- emptyDir: {}
name: builder-pull-secrets-dir
- emptyDir: {}
name: notary-dir
- name: tutorial-service-account-token-m8cvc
secret:
defaultMode: 420
secretName: tutorial-service-account-token-m8cvc
- emptyDir: {}
name: ca-certs
initContainerStatuses:
- containerID: containerd://4793cbede7bcf18a9212b88c8fcd712a807118e1f423913cfb3062ca4373d2c2
image: docker.io/cmoulliard/my-setup-ca-certs:latest
imageID: docker.io/cmoulliard/my-setup-ca-certs@sha256:dadfe5e03f031f893183b55bd7a5c7cb608163d2261d675b19399f17dc8f601f
lastState: {}
name: setup-ca-certs
ready: false
restartCount: 0
state:
terminated:
containerID: containerd://4793cbede7bcf18a9212b88c8fcd712a807118e1f423913cfb3062ca4373d2c2
exitCode: 1
finishedAt: "2021-03-11T10:01:44Z"
reason: Error
startedAt: "2021-03-11T10:01:44Z"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment