KHIYANI, RAHUL (rk0850)
This updates the drydock chart to include the pod security context on the pod template. This also adds the container security context to set readOnlyRootFilesystem flag to true Change-Id: Ibeb60d0b88f3519730b5b76996ab137c5af4f4f5
|1 week ago|
|.github||1 month ago|
|alembic||1 year ago|
|charts/drydock||1 week ago|
|doc||1 month ago|
|etc/drydock||1 year ago|
|go/src/baclient||1 year ago|
|images/drydock||5 months ago|
|python||3 weeks ago|
|tools||3 weeks ago|
|.dockerignore||1 year ago|
|.gitignore||1 year ago|
|.gitreview||1 year ago|
|.readthedocs.yaml||10 months ago|
|.style.yapf||2 years ago|
|.zuul.yaml||4 months ago|
|LICENSE||3 years ago|
|Makefile||5 months ago|
|README.md||1 year ago|
|alembic.ini||2 years ago|
|entrypoint.sh||2 years ago|
|hostdeps.sh||5 months ago|
|requirements-host-test.txt||1 year ago|
|requirements-host.txt||1 year ago|
|tox.ini||10 months ago|
A python REST orchestrator to translate a YAML host topology to a provisioned set of hosts and provide a set of post-provisioning instructions.
See full documentation at https://airship-drydock.readthedocs.io/.
This service is intended to be built as a Docker container, not as a standalone Python package. That being said, instructions are included below for building as a package and as an image.
To build and install Drydock locally in a virtualenv first generate configuration and policy file templates to be customized
$ tox -e genconfig $ tox -e genpolicy $ virtualenv -p python3.5 /var/tmp/drydock $ . /var/tmp/drydock/bin/activate $ pip install -r requirements-lock.txt $ pip install . $ cp -r etc/drydock /etc/drydock
$ docker build . -t drydock
The preferred deployment pattern of Drydock is via a Helm chart to deploy Drydock into a Kubernetes cluster. Additionally use of the rest of the Airship services provides additional functionality for deploying (Armada) and using (Promenade, Deckhand) Drydock.
You can see an example of a full Airship deployment in the Airship in a Bottle repository.
Use the Airship Promenade tool for starting a self-hosted Kubernetes cluster with Kubernetes Helm deployed.
There are Helm charts for deploying all the dependencies of Dryodck. Use them for preparing your Kuberentes cluster to host Drydock.
Ideally you will use the Airship Armada
tool for deploying the Drydock chart with proper overrides, but if not you can
helm CLI tool. The below are overrides needed during deployment