Skip to content

Commit

Permalink
Merge pull request #176 from StrongMonkey/gitjob-0.1.10
Browse files Browse the repository at this point in the history
Update gitjob to v0.1.10, fleet docs to add cabundle and insecureSkipTls
  • Loading branch information
ibuildthecloud authored Dec 11, 2020
2 parents c5ae8c2 + 04f26bf commit e9de0b6
Show file tree
Hide file tree
Showing 4 changed files with 16 additions and 19 deletions.
4 changes: 2 additions & 2 deletions charts/fleet/charts/gitjob/Chart.yaml
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
apiVersion: v2
appVersion: 0.1.9
appVersion: 0.1.10
description: Controller that run jobs based on git events
name: gitjob
version: 0.1.9
version: 0.1.10
14 changes: 1 addition & 13 deletions charts/fleet/charts/gitjob/templates/clusterrole.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -22,19 +22,7 @@ rules:
resources:
- 'secrets'
verbs:
- 'list'
- 'get'
- 'watch'
- apiGroups:
- ""
resources:
- 'configmaps'
verbs:
- 'create'
- 'list'
- 'get'
- 'update'
- 'watch'
- '*'
- apiGroups:
- "gitjob.cattle.io"
resources:
Expand Down
2 changes: 1 addition & 1 deletion charts/fleet/charts/gitjob/values.yaml
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
gitjob:
repository: rancher/gitjob
tag: v0.1.9
tag: v0.1.10

tekton:
repository: rancher/tekton-utils
Expand Down
15 changes: 12 additions & 3 deletions docs/gitrepo-add.md
Original file line number Diff line number Diff line change
Expand Up @@ -48,7 +48,15 @@ spec:
# same namespace as the GitRepo
#
# clientSecretName: my-ssh-key

#
# To add additional ca-bundle for self-signed certs, caBundle can be filled with base64 encoded pem data. For example: `cat /path/to/ca.pem | base64 -w 0`
#
# caBundle: my-ca-bundle
#
# Disable SSL verification for git repo
#
# insecureSkipTLSVerify: true
#
# A git repo can read multiple paths in a repo at once.
# The below field is expected to be an array of paths and
# supports path globbing (ex: some/*/path)
Expand Down Expand Up @@ -96,13 +104,13 @@ kubectl create secret generic $name -n $namespace --from-file=ssh-privatekey=/fi

Fleet supports putting `known_hosts` into ssh secret. Here is an example of how to add it:

1. Fetch the public key hash(take github as an example)
Fetch the public key hash(take github as an example)

```text
ssh-keyscan -H github.com
```

2. And add it into secret:
And add it into secret:

```text
apiVersion: v1
Expand All @@ -117,3 +125,4 @@ stringData:
```

Note: If you don't add it any server's public key will be trusted and added.

0 comments on commit e9de0b6

Please sign in to comment.