-
Notifications
You must be signed in to change notification settings - Fork 47
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Embed pause image #424
Embed pause image #424
Conversation
Both these packages are needed for downloading and embedding container images in the podvm image Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
Skipping CI for Draft Pull Request. |
@savitaashture fyi |
d2fa672
to
e2c89a3
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, thanks! added some minor comments
Downloads the pause image using skopeo and uses umoci to create the oci bundle for embedding The following OCP pause image is embedded by default quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7f3cb6f9d265291b47a7491c2ba4f4dd0752a18b661eee40584f9a5dbcbe13bb A new bash method download_and_extract_pause_image is introduced which accepts three parameters via env variable: PAUSE_IMAGE_REPO, PAUSE_IMAGE_VERSION and PAUSE_IMAGE_REPO_AUTH_FILE These can be set in the respective podvm image configMap (<provider>-podvm-image-cm.yaml) before kickstarting the pod vm image generation if required. The PAUSE_IMAGE_REPO_AUTH_FILE points to a json file containing the registry secret to pull the image from authenticated registry. The default is the cluster secret that is mounted as a volume in the `/tmp/regauth/auth.json` for osc-podvm-create-job.yaml to download OCP pause image. Fixes: #KATA-3156 Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
The upstream code layout changed from src/cloud-api-adaptor to src/cloud-api-adaptor/src/cloud-api-adaptor. Accordingly change the handling of source code directory. Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
Latest stable image with security fixes Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
cloud-api-adaptor uses kata/main now. So update the labels to reflect the current versions of kata used with CAA Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
When RELATED_IMAGE_PODVM_PAYLOAD is set, update the job spec to use this image in initContainer. Signed-off-by: Pradipta Banerjee <pradipta.banerjee@gmail.com>
@bpradipt: The following tests failed, say
Full PR test history. Your PR dashboard. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Tested with custom operator and podvm-builder image to generate a podvm image with embedded pause image in Azure |
No description provided.