ba9f9e9f2c
- Dockerfile: chown html root to 101:101 (match runAsGroup, not 101:0)
- Makefile: declare .PHONY targets (image, image-linstor-gui, test)
- deployment: drop priorityClassName system-cluster-critical (GUI is
not control-plane critical; chart does not need to reserve the slot)
- configmap-nginx:
- fail the render if linstor.endpoint is not https:// so a misconfig
cannot silently downgrade the mTLS-protected controller path
- hoist proxy_set_header and proxy_ssl_* directives to the server
block instead of duplicating across /v1 and /metrics locations
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>
34 lines
1.1 KiB
Makefile
34 lines
1.1 KiB
Makefile
export NAME=linstor-gui
|
|
export NAMESPACE=cozy-linstor
|
|
|
|
include ../../../hack/common-envs.mk
|
|
include ../../../hack/package.mk
|
|
|
|
LINSTOR_GUI_VERSION ?= 2.3.0
|
|
|
|
.PHONY: image image-linstor-gui test
|
|
|
|
image: image-linstor-gui
|
|
|
|
image-linstor-gui:
|
|
docker buildx build images/linstor-gui \
|
|
--provenance false \
|
|
--builder=$(BUILDER) \
|
|
--platform=linux/amd64,linux/arm64 \
|
|
--build-arg LINSTOR_GUI_VERSION=$(LINSTOR_GUI_VERSION) \
|
|
--tag $(REGISTRY)/linstor-gui:$(call settag,$(LINSTOR_GUI_VERSION)) \
|
|
--tag $(REGISTRY)/linstor-gui:$(call settag,$(LINSTOR_GUI_VERSION)-$(TAG)) \
|
|
--cache-from type=registry,ref=$(REGISTRY)/linstor-gui:latest \
|
|
--cache-to type=inline \
|
|
--metadata-file images/linstor-gui.json \
|
|
--push=$(PUSH) \
|
|
--label "org.opencontainers.image.source=https://github.com/cozystack/cozystack" \
|
|
--load=$(LOAD)
|
|
REPOSITORY="$(REGISTRY)/linstor-gui" \
|
|
yq -i '.image.repository = strenv(REPOSITORY)' values.yaml
|
|
TAG="$(call settag,$(LINSTOR_GUI_VERSION))@$$(yq e '."containerimage.digest"' images/linstor-gui.json -o json -r)" \
|
|
yq -i '.image.tag = strenv(TAG)' values.yaml
|
|
rm -f images/linstor-gui.json
|
|
|
|
test:
|
|
helm unittest .
|