|
| 1 | +apiVersion: kustomize.config.k8s.io/v1beta1 |
| 2 | +kind: Kustomization |
| 3 | + |
| 4 | +resources: |
| 5 | +- ../../yamls |
| 6 | + |
| 7 | +images: |
| 8 | +- name: cloud-api-adaptor |
| 9 | + newName: quay.io/confidential-containers/cloud-api-adaptor # change image if needed |
| 10 | + newTag: latest |
| 11 | + |
| 12 | +generatorOptions: |
| 13 | + disableNameSuffixHash: true |
| 14 | + |
| 15 | +configMapGenerator: |
| 16 | +- name: peer-pods-cm |
| 17 | + namespace: confidential-containers-system |
| 18 | + literals: |
| 19 | + - CLOUD_PROVIDER="openstack" |
| 20 | + - ENABLE_CLOUD_PROVIDER_EXTERNAL_PLUGIN="false" # flag to enable/disable dynamically load cloud provider external plugin feature |
| 21 | + - CLOUD_CONFIG_VERIFY="false" # It's better set as true to enable could config verify in production env |
| 22 | + - OPENSTACK_SERVER_PREFIX="" # set |
| 23 | + - OPENSTACK_IMAGE_ID="" # set |
| 24 | + - OPENSTACK_FLAVOR_ID="" # set |
| 25 | + - OPENSTACK_SECURITY_GROUP="" # set |
| 26 | + - OPENSTACK_NETWORK_ID="" # set |
| 27 | + - OPENSTACK_FLOATING_IP_NETWORK_ID="" # set if specific floating IP needed |
| 28 | + |
| 29 | + # The following options are not implemented for OpenStack at this time. |
| 30 | + #- DISABLECVM="" |
| 31 | + #- PAUSE_IMAGE="" |
| 32 | + #- TUNNEL_TYPE="" |
| 33 | + #- VXLAN_PORT="" |
| 34 | + #- TAGS="" |
| 35 | + #- USE_PUBLIC_IP="true" |
| 36 | + #- EXTERNAL_NETWORK_VIA_PODVM="true" |
| 37 | + #- POD_SUBNET_CIDRS="10.244.0.0/16,10.96.0.0/12" |
| 38 | + #- ROOT_VOLUME_SIZE="30" |
| 39 | + #- FORWARDER_PORT="" |
| 40 | + #- PEERPODS_LIMIT_PER_NODE="10" |
| 41 | + #- REMOTE_HYPERVISOR_ENDPOINT="/run/peerpod/hypervisor.sock" |
| 42 | + #- PEER_PODS_DIR="/run/peerpod/pods" |
| 43 | + #- ENABLE_SCRATCH_SPACE="false" |
| 44 | +##TLS_SETTINGS |
| 45 | + #- CACERT_FILE="/etc/certificates/ca.crt" # for TLS |
| 46 | + #- CERT_FILE="/etc/certificates/client.crt" # for TLS |
| 47 | + #- CERT_KEY="/etc/certificates/client.key" # for TLS |
| 48 | + #- TLS_SKIP_VERIFY="" # for testing only |
| 49 | +##TLS_SETTINGS |
| 50 | + |
| 51 | +secretGenerator: |
| 52 | +- name: peer-pods-secret |
| 53 | + namespace: confidential-containers-system |
| 54 | + # This file should look like this (w/o quotes!): |
| 55 | + # OPENSTACK_IDENTITY_ENDPOINT=... |
| 56 | + # OPENSTACK_USERNAME=... |
| 57 | + # OPENSTACK_PASSWORD=... |
| 58 | + # OPENSTACK_TENANT_NAME=... |
| 59 | + envs: |
| 60 | + - openstack-cred.env |
| 61 | +##TLS_SETTINGS |
| 62 | +#- name: certs-for-tls |
| 63 | +# namespace: confidential-containers-system |
| 64 | +# files: |
| 65 | +# - <path_to_ca.crt> # set - relative path to ca.crt, located either in the same folder as the kustomization.yaml file or within a subfolder |
| 66 | +# - <path_to_client.crt> # set - relative path to client.crt, located either in the same folder as the kustomization.yaml file or within a subfolder |
| 67 | +# - <path_to_client.key> # set - relative path to client.key, located either in the same folder as the kustomization.yaml file or within a subfolder |
| 68 | +##TLS_SETTINGS |
| 69 | + |
| 70 | +patchesStrategicMerge: |
| 71 | +##TLS_SETTINGS |
| 72 | + #- tls_certs_volume_mount.yaml # set (for tls) |
| 73 | +##TLS_SETTINGS |
0 commit comments