Skip to content

config.md

Latest commit

 

History

History
140 lines (108 loc) · 2.95 KB

config.md

File metadata and controls

140 lines (108 loc) · 2.95 KB
Raw

Config

Example

See App Spec for details.

apiVersion: kappctrl.k14s.io/v1alpha1
kind: App
metadata:
  name: simple-app
spec:
  serviceAccountName: default
  fetch:
  - git:
      url: https://github.com/k14s/k8s-simple-app-example
      ref: origin/develop
      subPath: config-step-2-template
  template:
  - ytt: {}
  deploy:
  - kapp: {}

spec.fetch

Fetches set of files from various sources. Multiple sources can be used (for example, helmChart and inline).

  • inline: specify one or more files within resource
  • image: download Docker image from registry
  • http: download file at URL
  • git: clone Git repository
  • helmChart: fetch Helm chart from Helm repository

Pull helm chart via helm fetch

spec:
  fetch:
  - helmChart:
      name: stable/concourse
  # ...

Pull helm chart via git

spec:
  fetch:
  - git:
      url: https://github.com/bitnami/charts
      ref: origin/master
      subPath: bitnami/nginx
  # ...

Note, following sections describes contents of Secret resources referenced by various fetch strategies. kapp-controller does not check for type value of Secret resource.

git authentication

Allowed secret keys:

  • ssh-privatekey: PEM-encoded key that will be provided to SSH
  • ssh-knownhosts: Optional, set of known hosts allowed to connect (if not specified, all hosts are allowed)
  • username and password: Alternative to private key authentication

http authentication

Allowed secret keys:

  • username and password

helmChart authentication

Allowed secret keys:

  • username and password

spec.template

Transform set of files.

  • helmTemplate: uses helm template command to render chart
  • ytt: uses ytt to rended templates
  • kbld: uses kbld to resolve image URLs to include digests
  • kustomize: (not implemented yet) uses kustomize to render configuration
  • jsonnnet: (not implemented yet) renders jsonnet files
  • sops: uses sops to decrypt secrets. More details. Available in v0.11.0+.

Template source via helm template

spec:
  # ...
  template:
  - helmTemplate:
      valuesFrom:
      - secretRef:
          name: redis-values
  # ...

Template source via helm template and then modify via ytt overlay

spec:
  # ...
  template:
  - helmTemplate: {}
  - ytt:
      ignoreUnknownComments: true
      inline:
        paths:
          remove-lb.yml: |
            #@ load("@ytt:overlay", "overlay")
            #@overlay/match by=overlay.subset({"kind":"Service","metadata":{"name":"nginx"}})
            ---
            spec:
              type: ClusterIP
              #@overlay/remove
              externalTrafficPolicy:
  # ...

spec.deploy

Deploys resources.

  • kapp: uses kapp to deploy resources
spec:
  # ...
  deploy:
  - kapp: {}

Next: App CRD spec