Skip to content

Instantly share code, notes, and snippets.

@cmoulliard

cmoulliard/gist:9b882b4b45982f2f59d1283e6e563822

Last active March 11, 2021 13:24
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save cmoulliard/9b882b4b45982f2f59d1283e6e563822 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save cmoulliard/9b882b4b45982f2f59d1283e6e563822 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
gistfile1.txt
apiVersion: v1
kind: Pod
metadata:
name: tutorial-image-pod
namespace: demo
spec:
containers:
- image: gcr.io/cf-build-service-public/kpack/completion@sha256:7b8b829ee21f6009ea9b580cad86fb2f74f28d2aa34676d4a130fb62b9fc9893
imagePullPolicy: IfNotPresent
name: completion
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
dnsPolicy: ClusterFirst
enableServiceLinks: true
imagePullSecrets:
- name: tutorial-registry-credentials
initContainers:
- env:
- name: CA_CERTS_DATA
value: |
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
image: cmoulliard/my-setup-ca-certs
imagePullPolicy: IfNotPresent
name: setup-ca-certs
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /workspace
name: ca-certs
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
workingDir: /workspace
- args:
- -dockerconfig=tutorial-registry-credentials
env:
- name: GIT_URL
value: https://github.com/spring-projects/spring-petclinic
- name: GIT_REVISION
value: master
- name: PLATFORM_ENV_VARS
value: "null"
- name: IMAGE_TAG
value: kube-registry.infra.svc:5000
- name: RUN_IMAGE
value: paketobuildpacks/run:base-cnb
- name: DNS_PROBE_HOSTNAME
value: index.docker.io
- name: BUILD_CHANGES
value: '[{"reason":"CONFIG","old":{"resources":{},"source":{}},"new":{"resources":{},"source":{"git":{"url":"https://github.com/spring-projects/spring-petclinic","revision":"master"}}}}]'
image: gcr.io/cf-build-service-public/kpack/build-init@sha256:94cdd9223310c2bbc6b9f10d17f754337d782f32ac1cd7de58d3e78746d5ab7c
imagePullPolicy: IfNotPresent
name: prepare
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /var/build-secrets/tutorial-registry-credentials
name: secret-volume-tutorial-registry-credentials
- mountPath: /builderPullSecrets
name: builder-pull-secrets-dir
readOnly: true
- mountPath: /imagePullSecrets
name: image-pull-secrets-dir
readOnly: true
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /projectMetadata
name: layers-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
workingDir: /workspace
- args:
- -app=/workspace
- -group=/layers/group.toml
- -plan=/layers/plan.toml
command:
- /cnb/lifecycle/detector
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder@sha256:b621231a6c2b0cbbf81cbea9ba0835fc32d746f6286aee76acd10ef57fb69b82
imagePullPolicy: IfNotPresent
name: detect
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -group=/layers/group.toml
- -analyzed=/layers/analyzed.toml
- -cache-dir=/cache
- kube-registry.infra.svc:5000
command:
- /cnb/lifecycle/analyzer
env:
- name: HOME
value: /builder/home
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder@sha256:b621231a6c2b0cbbf81cbea9ba0835fc32d746f6286aee76acd10ef57fb69b82
imagePullPolicy: IfNotPresent
name: analyze
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -group=/layers/group.toml
- -layers=/layers
- -cache-dir=/cache
command:
- /cnb/lifecycle/restorer
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder@sha256:b621231a6c2b0cbbf81cbea9ba0835fc32d746f6286aee76acd10ef57fb69b82
imagePullPolicy: IfNotPresent
name: restore
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -app=/workspace
- -group=/layers/group.toml
- -plan=/layers/plan.toml
command:
- /cnb/lifecycle/builder
env:
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder@sha256:b621231a6c2b0cbbf81cbea9ba0835fc32d746f6286aee76acd10ef57fb69b82
imagePullPolicy: IfNotPresent
name: build
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /platform
name: platform-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
- args:
- -layers=/layers
- -app=/workspace
- -group=/layers/group.toml
- -analyzed=/layers/analyzed.toml
- -cache-dir=/cache
- -project-metadata=/layers/project-metadata.toml
- -report=/var/report/report.toml
- -process-type=web
- kube-registry.infra.svc:5000
- index.docker.io/library/kube-registry.infra.svc:5000-b1.20210311.131631
command:
- /cnb/lifecycle/exporter
env:
- name: HOME
value: /builder/home
- name: CNB_PLATFORM_API
value: "0.5"
image: kube-registry.infra.svc:5000/demo/default-builder@sha256:b621231a6c2b0cbbf81cbea9ba0835fc32d746f6286aee76acd10ef57fb69b82
imagePullPolicy: IfNotPresent
name: export
resources: {}
terminationMessagePath: /dev/termination-log
terminationMessagePolicy: File
volumeMounts:
- mountPath: /layers
name: layers-dir
- mountPath: /workspace
name: workspace-dir
- mountPath: /builder/home
name: home-dir
- mountPath: /cache
name: cache-dir
- mountPath: /var/report
name: report-dir
- mountPath: /var/run/secrets/kubernetes.io/serviceaccount
name: tutorial-service-account-token-t4z2k
readOnly: true
- mountPath: /etc/ssl/certs
name: ca-certs
readOnly: true
serviceAccountName: tutorial-service-account
volumes:
- name: secret-volume-tutorial-registry-credentials
secret:
defaultMode: 420
secretName: tutorial-registry-credentials
- emptyDir: {}
name: cache-dir
- emptyDir: {}
name: layers-dir
- emptyDir: {}
name: home-dir
- emptyDir: {}
name: workspace-dir
- emptyDir: {}
name: platform-dir
- emptyDir: {}
name: report-dir
- emptyDir: {}
name: network-wait-launcher-dir
- emptyDir: {}
name: image-pull-secrets-dir
- emptyDir: {}
name: builder-pull-secrets-dir
- emptyDir: {}
name: notary-dir
- name: tutorial-service-account-token-t4z2k
secret:
defaultMode: 420
secretName: tutorial-service-account-token-t4z2k
- emptyDir: {}
name: ca-certs
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment