-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
RS-574: Deploy dev infra to the PR development cluster #711
Conversation
A single node development cluster (infra-pr-711) was allocated in production infra for this PR. CI will attempt to deploy us.gcr.io/stackrox-infra/infra-server:0.4.0-22-g694d32f7c3 to it. 🔌 You can connect to this cluster with:
🛠️ And pull infractl from the deployed dev infra-server with:
🚲 You can then use the dev infra instance e.g.:
Further Development☕ If you make changes, you can commit and push and CI will take care of updating the development cluster. 🚀 If you only modify configuration (chart/infra-server/configuration) or templates (chart/infra-server/{static,templates}), you can get a faster update with:
|
5a67a23
to
578c647
Compare
f00f4f5
to
f2ab1a6
Compare
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM
The comment formatting is a nit.
.github/workflows/PR.yaml
Outdated
gcloud auth activate-service-account --key-file <(echo "$GOOGLE_APPLICATION_CREDENTIALS") | ||
gcloud auth list | ||
|
||
export KUBECONFIG=artifacts/kubeconfig |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
You might consider setting this env var in line 93.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
LGTM, one small hint about env var.
3bf6977
to
694d32f
Compare
#710 creates the cluster and this PR is a follow up to deploy PR changes to this development cluster. It is more involved than it might have been because I wanted to avoid the creation of local configuration with opaque secrets when deploying with CI.
The main change in order to avoid local filesystem writes was to consolidate all the credential files under chart/infra-server/configuration/{development,production} into helm values files that can be piped to template rendering.
Testing Performed
A qa-demo cluster with a private
rhacs-eng
image:An osd-gcp cluster: