ecb592b2cc
The docker hub rate limits continue to pester us (though many of the mitigations we have already employed seem to be helping). One thing we haven't done is to force connectivity to the docker hub registry via ipv4 when building images. This should help because docker hub treats ipv6 /64 blocks as a single entity for rate limiting purposes but ipv4 addrs are individually tracked. Change-Id: Ia108e6fd6c19727083ae4b3b07c45d3503b5fe89
116 lines
5.1 KiB
YAML
116 lines
5.1 KiB
YAML
# Base image building jobs
|
|
# Docker + Docker Hub
|
|
- secret:
|
|
name: system-config-dockerhub
|
|
data:
|
|
username: opendevzuul
|
|
password: !encrypted/pkcs1-oaep
|
|
- FF2mwsdYo4b9QI/kEmeFdZS32I+OJUac2xy4JEQJaIevRK9E3rQ/11cBn7xX6zelA/htY
|
|
hENMM1gGTYO8BKgTVNijFfCiVCTYFJ9efsOrSeMdj2aLcq/OkZFeq8gMHAZDv+3qaiggq
|
|
hbDmldgSouNahhJByWMsDjYqnItfR8w1dYisNQBkDEJdNW5+Cin5WgHRYv2skui9pjumU
|
|
vWHjwLbITLEjb0hwVErggAzvED4x0UjNEMfb6KCpoXeKdlCaI8h1DXVD9RdQ4s1WvUCro
|
|
xwl4AIUyCmdtXbqW787PQ4j8BgdOi8RD40ZTSxpoV/bwT+/NrP3Jj2KVYdEKQJimzXnwL
|
|
goDclapu9aFrAaqwWSnWCRc7GQptSZ7DBXmA7MsNinBclWHX/chX5k9Q1+XifAhmKJZqP
|
|
ovkzEGtmUjTQZFjvuCtFxIWZEGVtGHDmgEkzevgVCeuHDTeIDlkAvA3+TT+/A70zyYdbP
|
|
EHOTSSjCU6RSlJxAXjNb5pzKjpeT7PyX2f4/8Zn3JnwTlfPJ0C7qdEYjQ54hbsKynjrpQ
|
|
7f6NN9pAeQS1pid5J7oH4f7YaKM78pnhoTxRl3LmeitIlAG+zCpiT4J+se2eG27ep4aUA
|
|
bYuO0L+KBosY6DcvEbR9TqkYLPgJuEPi/6SQr9bBOldEspXXAv9msyCB4VMhVU=
|
|
|
|
- job:
|
|
name: system-config-build-image
|
|
parent: opendev-build-docker-image
|
|
dependencies: opendev-buildset-registry
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
vars:
|
|
docker_mirror_base_url: "https://{{ zuul_site_mirror_fqdn }}/deb-docker/{{ ansible_distribution_release }}"
|
|
zuul_work_dir: "{{ zuul.projects['opendev.org/opendev/system-config'].src_dir }}"
|
|
|
|
- job:
|
|
name: system-config-upload-image
|
|
parent: opendev-upload-docker-image
|
|
dependencies: opendev-buildset-registry
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
vars:
|
|
docker_mirror_base_url: "https://{{ zuul_site_mirror_fqdn }}/deb-docker/{{ ansible_distribution_release }}"
|
|
zuul_work_dir: "{{ zuul.projects['opendev.org/opendev/system-config'].src_dir }}"
|
|
secrets:
|
|
name: docker_credentials
|
|
secret: system-config-dockerhub
|
|
pass-to-parent: true
|
|
|
|
- job:
|
|
name: system-config-promote-image
|
|
parent: opendev-promote-docker-image
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
secrets:
|
|
name: docker_credentials
|
|
secret: system-config-dockerhub
|
|
pass-to-parent: true
|
|
|
|
# Docker + Quay.io
|
|
- secret:
|
|
name: system-config-quayio
|
|
data:
|
|
quay.io:
|
|
username: opendevorg+opendevrobot
|
|
password: !encrypted/pkcs1-oaep
|
|
- ciY1a7eIFcRsx6t13tsrga0AtQHXxC7hitboOS5yiqNcBhB1zeWOVmShFukNZeKNooDhH
|
|
DjacDEI2vp61mvZphahyjbH9O1Zuoy/F2TNn3JO1EaFFMSiPvT6BH5UhRZnUwWMuP5sLP
|
|
6EogAAy02HglHck6H3+HSSLwawdW5zwXxUsQhjxItG0psKtIKBMHPwdBw+Iva8jexrtX6
|
|
jxgAm8NU8dr7BZs/wLPYQrLfiBF4mxOsYsjoSOQzWMqp0y/HUVd5YW01bUEeWHTkdL1ir
|
|
gU23UcMnC+MEwT7snK623i+fD5oW2L6TCvdJGMSpJLku60h9MXKx+KpM3gYU4OEst/Vfv
|
|
rwrIkwjE3CsXOiIORYB+Nq/RiMwHMEzA1EMAmg3Mgbr/JZNILh7nSY9AkbhI7wun1jFnN
|
|
mUE6zRBEkxgHj9W0R6imCEbHhm/pJD2Apxzkcjty9BuY/flT6dm14hHzn22kUf2Vu0AXF
|
|
GkyqHIO8ANkRkrrrVkMj9+wNoAynKVqa7MKS7Ye7XPAHdEsL9bXlaS0o6EAaGK5ApJ9mG
|
|
XZJ5pgSvl7dJ5So3YOkIT2PnwmpaF9iHIpjyk7+pjfk3oz3Gx2UdDdyxooZoDNOCIzoTC
|
|
aXORFbHQbvjAphygrFyr6h3NhOFsnZ8RC+HBgnAjyTRiqXdw5c5IMebMiWphoA=
|
|
api_token: !encrypted/pkcs1-oaep
|
|
- S60USRQz0l1eQtc5uXEJZzFf1IyDofbN5mHyMx/lAhdSLa/oc5UMjH/rF2dfQ57f1VZLi
|
|
qU8SkGDk5Qg0ODujdbH5rreKlLEg+r2YfUGMtN6cq/faOpoWu0TPEpHBcEd0B4HmgMBIl
|
|
LcDdKsQmooas1dAaEcOqxTn8LJXaBZlb5ABYrKeSo4j3pQZJtJRSBVdc8WBAtzWJK27q6
|
|
F390tT331JLDk4Q9pw9txc5iWIoftsPkR/RLWyuddZx9nYU1GLt5pS/Ep9HIbADmz2wWT
|
|
3f2mc+IE00ZautUuW1ikjhzelx/oXhUzIlwCuftXpTksDdeGn46IS9Qo2wA/clHRcmFUo
|
|
r08fp4cMWwOuBkVSIrICu07CuEBNNSroS4ZZGfHdowcHIFS5PUs0491lNZ8n8sKnN+H7C
|
|
+KXvKonyolD1YO7UTgZQGd+Nf0NMGDBagAZe08d28RL/yvAHScqssiFdOk6x0gejaLGNP
|
|
s1SW4/FePyJ4a/G4NqzYWfukEPnawONarv7sVxHyu4ZBGvN8yeh5K6KtOxyFanO0r/lO/
|
|
Dh6UGjVFGgfVagl9l1dpqLX3ENjrYTyQnxpytFpxLBr5xPgYiuSI8McH4JBrzsBkuP0Vd
|
|
orQikh+hhVTuMZ/arspkVA/LC7uZqp6UUq3jt9wWlES8/PLoEA+b43UQzBCHmM=
|
|
|
|
- job:
|
|
name: system-config-build-container-image
|
|
parent: opendev-build-container-image
|
|
dependencies: opendev-buildset-registry
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
vars: &system_config_image_vars
|
|
docker_mirror_base_url: "https://{{ zuul_site_mirror_fqdn }}/deb-docker/{{ ansible_distribution_release }}"
|
|
zuul_work_dir: "{{ zuul.projects['opendev.org/opendev/system-config'].src_dir }}"
|
|
promote_container_image_method: intermediate-registry
|
|
container_command: podman
|
|
|
|
- job:
|
|
name: system-config-upload-container-image
|
|
parent: opendev-upload-container-image
|
|
dependencies: opendev-buildset-registry
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
vars: *system_config_image_vars
|
|
secrets:
|
|
name: container_registry_credentials
|
|
secret: system-config-quayio
|
|
pass-to-parent: true
|
|
|
|
- job:
|
|
name: system-config-promote-container-image
|
|
parent: opendev-promote-container-image
|
|
pre-run: playbooks/zuul/force-dockerhub-ipv4.yaml
|
|
abstract: true
|
|
vars: *system_config_image_vars
|
|
secrets:
|
|
name: container_registry_credentials
|
|
secret: system-config-quayio
|
|
pass-to-parent: true
|