You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: keps/sig-release/3000-artifact-distribution/README.md
+3-2Lines changed: 3 additions & 2 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -1,6 +1,7 @@
1
1
# KEP/MST-3000: Image Promotion and Distribution Policy
2
2
3
3
<!-- toc -->
4
+
4
5
-[Summary](#summary)
5
6
-[Background (from wiki)](#background-from-wiki)
6
7
-[Motivation](#motivation)
@@ -94,13 +95,13 @@ Additionally we require a registry and artifact url-redirection solution to the
94
95
95
96
- We are setting up an AWS account with an IAM role and s3 buckets in AWS regions where we see a large percentage of source image pull traffic
96
97
- We will iterate on a sandbox url (registry.sandbox.k8s.io) for our experiments and ONLY promote things to (registry.k8s.io) when we have complete confidence
97
-
- both registry and registry.sandbox are serving traffic using oci-proxy on google cloud run
98
+
- both registry and registry-sandbox are serving traffic using oci-proxy on google cloud run
98
99
- oci-proxy will be updated to identify incoming traffic from AWS regions based on IP ranges so we can route traffic to s3 buckets in that region. If a specific AWS region do not currently host s3 buckets, we will redirect to the nearest region which does have s3 buckets (tradeoff between storage and network costs)
99
100
- We will bulk sync existing image layers to these s3 layers as a starting point (from GCS/GCR)
100
101
- We will update image-promoter to push to these s3 buckets as well in addition to the current setup
101
102
- We will set up monitoring/reporting to check on new costs we incur on the AWS infrastructure and update what we do in GCP infrastructure as well to include the new components
102
103
- We will have a plan in place on how we could add additional AWS regions in the future
103
-
- We will have CI jobs that will run against registry.sandbox as well to monitor stability before we promote code to registry
104
+
- We will have CI jobs that will run against registry-sandbox.k8s.io as well to monitor stability before we promote code to registry
104
105
- We will automate the deployment/monitoring and testing of code landing in the oci-proxy repository
0 commit comments