feat: master/agent phase 4 — registry polling and version history (#9) #23
@@ -11,8 +11,10 @@
|
|||||||
# part of the entrypoint, the service secret and the secrets entry); the endpoint then answers 503.
|
# part of the entrypoint, the service secret and the secrets entry); the endpoint then answers 503.
|
||||||
# The reverse proxy must allow a read timeout longer than UPDATE_TIMEOUT (default 5m).
|
# The reverse proxy must allow a read timeout longer than UPDATE_TIMEOUT (default 5m).
|
||||||
# 5. Optional, for registry polling of private images: put a config.json written by
|
# 5. Optional, for registry polling of private images: put a config.json written by
|
||||||
# `docker login` (inline "auths" only; no credsStore) in /path/to/docker-config on the
|
# `docker login` (inline "auths" only; no credsStore) in /path/to/docker-config and
|
||||||
# manager and keep the volumes entry below. Without it registries are accessed anonymously.
|
# uncomment DOCKER_CONFIG and the volumes entry below. The directory must exist on every
|
||||||
|
# manager node (the master is placed on a manager), or Swarm rejects the task. Without
|
||||||
|
# it registries are accessed anonymously.
|
||||||
services:
|
services:
|
||||||
master:
|
master:
|
||||||
image: gitea.shcizo.se/shcizo/package-updater:latest
|
image: gitea.shcizo.se/shcizo/package-updater:latest
|
||||||
@@ -25,13 +27,13 @@ services:
|
|||||||
ALLOWED_GROUP: updater-admins
|
ALLOWED_GROUP: updater-admins
|
||||||
# UPDATE_TIMEOUT: 5m
|
# UPDATE_TIMEOUT: 5m
|
||||||
# POLL_INTERVAL: 6h
|
# POLL_INTERVAL: 6h
|
||||||
DOCKER_CONFIG: /docker-config
|
# DOCKER_CONFIG: /docker-config # step 5
|
||||||
secrets:
|
secrets:
|
||||||
- pu_database_url
|
- pu_database_url
|
||||||
- pu_oidc_client_secret
|
- pu_oidc_client_secret
|
||||||
- pu_updater_api_key
|
- pu_updater_api_key
|
||||||
volumes:
|
# volumes: # step 5
|
||||||
- /path/to/docker-config:/docker-config:ro
|
# - /path/to/docker-config:/docker-config:ro
|
||||||
ports:
|
ports:
|
||||||
# Agents connect here directly over the internal network, not via the proxy.
|
# Agents connect here directly over the internal network, not via the proxy.
|
||||||
- target: 8090
|
- target: 8090
|
||||||
|
|||||||
Reference in New Issue
Block a user