Skip to content

Conversation

@maelvls
Copy link
Member

@maelvls maelvls commented Jan 28, 2021

This PR aims at creating the deployer image by following building-deployer-helm.md, i.e.,

  • create ./ Dockerfile for the deployer image
  • create a ./schema.yaml
  • require the cert-manager chart (see readme)
  • create the ./chart/cert-manager/application.yaml manifest
  • build deployer image as gcr.io/jetstack-mael-valais/jetstack-secure-platform/deployer with
    export REGISTRY=gcr.io/$(gcloud config get-value project | tr ':' '/')
    export APP_NAME=jetstack-secure-platform
    docker build --tag $REGISTRY/$APP_NAME/deployer .
  • get the mpdev CLI:
    docker run gcr.io/cloud-marketplace-tools/k8s/dev cat /scripts/dev > /tmp/mpdev && install /tmp/mpdev ~/bin
  • get mpdev install to "not fail" (i.e., running the command exits with 0)
    k delete ns test || k create ns test
    mpdev install --deployer=$REGISTRY/$APP_NAME/deployer --parameters='{"name": "test", "namespace": "test"}'
  • make sure the deployer job log does not have any error
    k delete ns test || k create ns test
    mpdev install --deployer=$REGISTRY/$APP_NAME/deployer --parameters='{"name": "test", "namespace": "test"}'
    
    # Then check that the logs look fine:
    k -n test logs -l job-name=test-deployer
    
    # Finally run the verification step:
    mpdev verify --deployer=$REGISTRY/$APP_NAME/deployer --parameters='{"name": "test", "namespace": "test"}'
  • get mpdev verify to pass
    # Finally run the verification step:
    mpdev verify --deployer=$REGISTRY/$APP_NAME/deployer --parameters='{"name": "test", "namespace": "test"}'

Note: PR created during a pairing session with @wallrj. See progress document: https://docs.google.com/document/d/1-iigFCpXbKsscpmjbTkjUJZUognUeXZPGvMrPqo9eXE/edit#.

@maelvls
Copy link
Member Author

maelvls commented Jan 28, 2021

Oops, wrong branch?

@maelvls maelvls closed this Jan 28, 2021
@wallrj wallrj reopened this Jan 28, 2021
@wallrj
Copy link
Member

wallrj commented Jan 28, 2021

Hey @maelvls, thanks for creating the new PR. This is the correct branch. I've re-opened it.
Sorry for screwing up #1

@maelvls
Copy link
Member Author

maelvls commented Jan 28, 2021

Progress: publish still fails with

apitools.base.py.exceptions.CommunicationError: Could not reach metadata service: Not Found

I added the role Storage Object Admin but it didn't seem to do it :(

maelvls and others added 2 commits January 28, 2021 19:30
This seems to have fixed the permission-denied error when publishing to the GCP bucket

Signed-off-by: Richard Wall <[email protected]>
@wallrj wallrj changed the title Draft 2 Create Google marketplace configuration and a build scripts for cert-manager Jan 29, 2021
@wallrj
Copy link
Member

wallrj commented Jan 29, 2021

With the addition of the docker --net cloudbuild option, the deploy step now succeeds:

gsutil cat gs://jetstack-richard/1.1.0.yaml
releaseDate: '2021-01-29T10:38:11Z'
url: gcr.io/jetstack-richard/cert-manager/deployer:1.1.0
digest: 5f4bbce0f3d3085b4aca90e5934cf893415adb6ff987f7f5944e69dc62bd5ca1
releaseNote: Initial release.
releaseTypes:
- Feature
- BugFix
- Security
recommended: true

@wallrj wallrj merged commit adacc84 into main Jan 29, 2021
@wallrj wallrj deleted the draft-2 branch January 29, 2021 11:29
@maelvls maelvls mentioned this pull request Feb 1, 2021
Closed
@maelvls maelvls modified the milestones: Beta, beta, initial-release Feb 9, 2021
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants