feat: master/agent phase 4 — registry polling and version history (#9) #23

Merged
shcizo merged 14 commits from feat/registry-polling-version-history-9 into main 2026-10-13 07:02:38 +00:00
Showing only changes of commit e2f71521bb - Show all commits
+7 -5
View File
@@ -11,8 +11,10 @@
# part of the entrypoint, the service secret and the secrets entry); the endpoint then answers 503. # part of the entrypoint, the service secret and the secrets entry); the endpoint then answers 503.
# The reverse proxy must allow a read timeout longer than UPDATE_TIMEOUT (default 5m). # The reverse proxy must allow a read timeout longer than UPDATE_TIMEOUT (default 5m).
# 5. Optional, for registry polling of private images: put a config.json written by # 5. Optional, for registry polling of private images: put a config.json written by
# `docker login` (inline "auths" only; no credsStore) in /path/to/docker-config on the # `docker login` (inline "auths" only; no credsStore) in /path/to/docker-config and
# manager and keep the volumes entry below. Without it registries are accessed anonymously. # uncomment DOCKER_CONFIG and the volumes entry below. The directory must exist on every
# manager node (the master is placed on a manager), or Swarm rejects the task. Without
# it registries are accessed anonymously.
services: services:
master: master:
image: gitea.shcizo.se/shcizo/package-updater:latest image: gitea.shcizo.se/shcizo/package-updater:latest
@@ -25,13 +27,13 @@ services:
ALLOWED_GROUP: updater-admins ALLOWED_GROUP: updater-admins
# UPDATE_TIMEOUT: 5m # UPDATE_TIMEOUT: 5m
# POLL_INTERVAL: 6h # POLL_INTERVAL: 6h
DOCKER_CONFIG: /docker-config # DOCKER_CONFIG: /docker-config # step 5
secrets: secrets:
- pu_database_url - pu_database_url
- pu_oidc_client_secret - pu_oidc_client_secret
- pu_updater_api_key - pu_updater_api_key
volumes: # volumes: # step 5
- /path/to/docker-config:/docker-config:ro # - /path/to/docker-config:/docker-config:ro
ports: ports:
# Agents connect here directly over the internal network, not via the proxy. # Agents connect here directly over the internal network, not via the proxy.
- target: 8090 - target: 8090