1
0
mirror of https://github.com/quay/quay.git synced 2026-01-26 06:21:37 +03:00
Commit Graph

115 Commits

Author SHA1 Message Date
Adam Drew
02feee3efe frontend: Change frontend name so that correct paths will be generated (RHCLOUD-28385) (#2244)
Change frontend name so that correct paths will be generated
2023-09-21 08:39:20 -04:00
Syed Ahmed
ee2e12abd4 deploy: Add a startup probe to the py3 deployment (PROJQUAY-522) (#2149)
* deploy: Add a startup probe to the py3 deployment (PROJQUAY-522)

This is for cases where we have a long running
migraiton and we don't want to kill the pod mid migration

* add timeout
2023-08-29 11:43:30 -04:00
Brandon Caton
c93928f28f adding load balancer service to recovery deploy template (#1916) 2023-06-01 12:06:12 -04:00
Joseph Crosland
42c9ebc45c chore: Delete outdated k8 manifests (PROJQUAY-5490) (#1880)
The manifests contained in this dir are very outdated and not
maintained, this has led to some confusion. As there are other
examples of how to deploy Quay, this feels more of a liability.

Signed-off-by: crozzy <joseph.crosland@gmail.com>
2023-05-23 12:02:26 +02:00
Syed Ahmed
b7d95a180a build: Add template for deploying quayio frontend in console (PROJQUAY-5229) (#1835)
Adds the quayio-frontend-deploy-template.yaml for console dot deployment
2023-04-25 16:33:52 -04:00
Brandon Caton
d72b1bb3dc deploy: Allow for dynamic service names (PROJQUAY-5103) (#1759)
Allows for creation of separate services for multiple deployments.
2023-02-20 13:42:13 -05:00
Marcus Kok
aa78a8c80f deploy: add value for empty annotation (PROJQUAY-3860) (#1755) 2023-02-15 15:53:36 -05:00
Marcus Kok
a0ea7d7bf6 deploy: add annotation for disabling DVO check (PROJQUAY-3680) (#1753)
disable min replicas check for staging environment where we only have a single replica
2023-02-14 15:55:42 -05:00
Marcus Kok
633cfaec40 deploy: fix units in slo panel (PROJQUAY-4956) (#1749)
panel calculating quay_secscan_result_duration_seconds as minutes, change to seconds.
2023-02-08 09:48:25 -05:00
Marcus Kok
b39876d5e6 deploy: change push-pull panel (PROJQUAY-4956) (#1735)
add panel to track push/pull monitor across all regions
2023-02-06 11:32:59 -05:00
Marcus Kok
f3f608f22c deploy: change slo dashboard (PROJQUAY-5026) (#1732)
re-arrange dashboard based on received feedback
2023-01-31 09:40:01 -05:00
Marcus Kok
ea0f6f0248 deploy: update slo dashboard (PROJQUAY-4488) (#1712)
add two new panels for tracking security scan results on slo dashboard
2023-01-17 16:00:03 -05:00
Marcus Kok
b0b35184f9 deploy: add weight to anti-affinity (PROJQUAY-3684) (#1711)
fixing error on deploy:
`spec.template.spec.affinity.podAntiAffinity.preferredDuringSchedulingIgnoredDuringExecution[0].weight: Invalid value: 0: must be in the range 1-100`
2023-01-17 13:38:58 -05:00
Marcus Kok
45a40d4d6a deploy: add podAntiAffinity to deployment (PROJQUAY-3684) (#1700)
Adds pod anti-affinity in `quay-py3-app.yaml` according to https://kubernetes.io/docs/concepts/scheduling-eviction/assign-pod-node/#inter-pod-affinity-and-anti-affinity

Trying to address alert received for quay.io where pod anti-affinity is not set for deployment.
2023-01-11 15:41:24 -05:00
Marcus Kok
a6177291c1 deploy: add panel to dashboard (PROJQUAY-4486) (#1698)
Adds panel for tracking build success %
2023-01-09 09:57:17 -05:00
Marcus Kok
b69f3f36af deploy: fix api panels in dashboard (PROJQUAY-4485) (#1668)
Api success rate was previously calculated by only looking at 2XXs as successful and everything else as an error.
This adjusts the query so only 5XXs are considered errors and 4XXs are not being incorrectly grouped as issues with the service.
2022-12-09 14:35:46 -05:00
Marcus Kok
cc5c3c7996 deploy: update grafana dashboard (PROJQUAY-4484) (#1655)
add panels for registry api metrics along with adding a heatmap for build queue duration
2022-12-08 15:46:51 -05:00
Marcus Kok
da370590df add dashboard dir for grafana (#1638) 2022-11-23 13:42:36 -05:00
Syed Ahmed
ad4c13d713 deploy: Add deployment manifests for CloudFlare (PROJQUAY-3512) (#1604)
* Add deployment manifests for CloudFlare (PROJQUAY-3512)

Deployment files for cloudflare deployment for quay.io

* Update the key for matching
2022-11-02 10:48:04 -04:00
Pratik Raj
34cd7d0918 doc : update Instructions for Deploying on OpenShift (#1537) 2022-09-21 17:58:53 +02:00
Syed Mushtaq Ahmed
6356fbb1b9 deploy: Add ignore validation for py3 deployment (PROJQUAY-2542) (#1121)
Add an environment variable to the deployment to disable config
validation
2022-02-17 10:56:33 -05:00
Syed Mushtaq Ahmed
d43b41c58a deploy: Add GRPC service for builds (PROJQUAY-3189) (#1109)
GRPC needs a different loadbalancer service for builders
The setting `BUILDMAN_HOSTNAME` will point to the new LB
2022-02-10 18:42:16 -05:00
Syed Mushtaq Ahmed
293e0619de deploy: Add LB service with no proxy-protocol (PROJQUAY-2883) (#1006)
This is required to support ALB. Without this service, the
default ELB endpoints forces the L4 proxy procotol which makes
Nginx see all the remote client IP as the IP of ALB. If the
request goes through an ELB without proxy-protocol enabled,
Nginx will parse the X-Forwarded-For header to get the remote
IP
2021-12-01 09:58:22 -05:00
Syed Mushtaq Ahmed
1589351b74 deploy: Add clair back fill worker deployment manifests (#991) 2021-11-19 14:29:22 -05:00
Syed Mushtaq Ahmed
01d4136406 deploy: Update syslog image tag(PROJQUAY-2374) (#966)
Set tag explicitly in the SaaS file
2021-11-09 12:21:14 -05:00
Syed Mushtaq Ahmed
7458578d1a deploy: Seperate py3 deployment manifests (PROJQUAY-2374) (#931)
This makes the deployment more readable via app-sre automation
2021-11-08 15:47:23 -05:00
Syed Mushtaq Ahmed
173dfbfc8a deploy: Update quay deployment manifests for py3 canary (PROJQUAY-2373) (#902)
This change adds the Deployment and Service resources required to
canary python3 in quay.io
2021-10-13 15:51:24 -04:00
Syed Mushtaq Ahmed
ce3cb357bd deploy: update component label value for recovery (PROJQUAY-970) (#832)
Adds new component label "app-recovery" for the recovery endpoint"
2021-07-12 10:57:07 -04:00
Syed Mushtaq Ahmed
d6616e9e1f deploy: Add recovery endpoint deployment manifests (PROJQUAY-970) (#831)
This change adds the deployment and service manifests for the recovery endpoint
that will be used for quay.io to recover accounts which have not already been
transitioned to RH SSO
2021-07-09 16:13:49 -04:00
Syed Mushtaq Ahmed
242d4defc7 deployment: Change canary to blue deployment (PROJQUAY-1896) (#781)
Updating from canary deployment to a blue-green style deployment
2021-05-05 20:12:06 -04:00
Syed Mushtaq Ahmed
080010e8cd deployment: Add image tag param to the deploy file (PROJQUAY-1896) (#759)
This change adds the parameter IMAGE_TAG_CANARY to the deployment
file quay-app.yaml to use a different image tag for the canary
deployment

Co-authored-by: Syed <syed@apache.org>
2021-04-20 17:09:02 -04:00
Syed Mushtaq Ahmed
03c610d510 deployment: Add canary deployment to quay-app (PROJQUAY-1896) (#754)
Adds a new deployment quay-app-canary to the deployment YAML file. This
will be picked up AppSRE when deploying quay.io. The canary deployment
can have a different image than the main deployment and can point to a
differnt config secret.

Co-authored-by: Syed <syed@apache.org>
2021-04-20 11:07:11 -04:00
Tejas Parikh
bb5e2b5672 added quay worker env vars (#427) 2020-06-05 16:19:26 -04:00
Tejas Parikh
32330d690c added quay worker params to openshift template (#426) 2020-06-05 16:12:40 -04:00
Tejas Parikh
994c0fe097 OpenShift deploy template updates for log shipper (#425)
This PR removes load balancer service that is no longer used. It also sets log stream name to pod name and makes ticker for syslog configurable.

[ci skip]
2020-06-05 16:09:10 -04:00
Maor Friedman
b2b2fa6e95 quay-app template - update apiVersions and remove default readOnly (#411) 2020-06-05 14:08:39 -04:00
Maor Friedman
4f847d0efa add ServiceAccount with imagePullSecrets (#408) 2020-06-03 12:16:55 -04:00
Maor Friedman
fc95d2e2b9 fix value for DB_CONNECTION_POOLING (#386)
* fix value for DB_CONNECTION_POOLING

* changing to true while we're at it
2020-05-26 12:33:09 -04:00
Tejas Parikh
fd9975d20f [ci skip] param to allow us to disable conn pool (#384) 2020-05-19 13:31:10 -04:00
Jake Moshenko
6ed2b14825 Accept the entrypoint from the template. (#318)
* Accept the entrypoint from the template.

* Add QUAY_ENTRYPOINT to the parameters section.
2020-04-06 15:45:36 -04:00
Jake Moshenko
8dcc8ed394 Use the new registry-nomigrate entrypoint. (#314) 2020-04-03 13:23:48 -04:00
Kurtis Mullins
1b2d29d1e8 Revert "Revert "Remove the active migration for encrypted tokens now that it is complete"" 2020-01-27 11:22:22 -05:00
Tejas Parikh
50fed725bb Debug needs to be passed as string and not boolean
[ci skip]

Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2020-01-21 15:06:06 -05:00
Kurtis Mullins
90d0dbf3fb Revert "Remove the active migration for encrypted tokens now that it is complete" 2020-01-21 11:53:54 -05:00
Joseph Schorr
883a415dc4 Remove the active migration for encrypted tokens now that it is complete
Fixes https://issues.redhat.com/browse/PROJQUAY-185
2020-01-20 14:51:51 -05:00
Tejas Parikh
72dff0ef21 PROJQUAY-181: redirect http to https for quay.io
[ci skip]

JIRA: https://issues.redhat.com/browse/PROJQUAY-181

http://quay.io should be redirected to https://quay.io

Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2020-01-17 11:57:59 -05:00
Tejas Parikh
c90cd5d09e PROJQUAY-138: Enable proxy protocol for Quay application ELB
[ci skip]

JIRA: https://issues.redhat.com/browse/PROJQUAY-138

Proxy protocol support must be enabled in the ELB so that quay app can get source IP address.

Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2020-01-08 16:12:45 -05:00
Tejas Parikh
c7ee4ccaeb PROJQUAY-117 - Set ELB timeout to 3600 seconds
[ci skip]

Default timeout on ELB is 60 seconds and this can cause issue when user is pushing container image with large (4GB+) layers.

JIRA: https://issues.redhat.com/browse/PROJQUAY-117

Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2019-12-19 11:07:17 -05:00
Tejas Parikh
729a748125 removed extra ca certs mount
Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2019-12-17 12:07:19 -05:00
Tejas Parikh
6b34f33030 mount extra ca certs in /conf/kube_extra_certs
Signed-off-by: Tejas Parikh <tparikh@redhat.com>
2019-12-17 11:50:16 -05:00