-
Notifications
You must be signed in to change notification settings - Fork 31
Clarify that local registry template functions can also return Embedded Cluster/kURL registries #2753
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Conversation
✅ Deploy Preview for replicated-docs ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
✅ Deploy Preview for replicated-docs-upgrade ready!
To edit notification comments on pull requests, go to your Netlify site configuration. |
| This topic describes how to configure the Replicated HelmChart custom resource version `kots.io/v1beta2` to support Helm chart installations with Replicated KOTS. | ||
|
|
||
| ## Overview | ||
| ## Workflow |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Just updated this workflow section to turn it into a numbered list, which tends to do a better job at conveying required action than unordered lists
| ``` | ||
|
|
||
| #### Example: Rewrite public image names {#local-public-example} | ||
| ### Task 1b: Rewrite Public Image Names |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Updated this section to use gchr in the example instead of docker, which we had done in this unmerged PR: https://github.com/replicatedhq/replicated-docs/pull/2628/files
|
|
||
| :::note | ||
| The Replicated [snapshots](snapshots-overview) feature for backup and restsore is supported only for existing cluster installations with KOTS. Snapshots are not support for installations with Embedded Cluster. For more information about disaster recovery for installations with Embedded Cluster, see [Disaster Recovery for Embedded Cluster](/vendor/embedded-disaster-recovery.mdx). | ||
| ::: |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
^ Added in this note which we added in the not-yet-merged-onboarding PR
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Also moved this Task to last (after builder key)
| ``` | ||
| ### Support Local Image Registries for Online Installations {#local-registries} | ||
| ## Additional Information |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
^ Moved the overview, v1/v2 differences and the info about migrating existing v1 installations down under Additional Information. Felt less noisy. This also aligns with a change you had requested in the onboarding PR
| To support Helm chart installations with the KOTS `kots.io/v1beta2` HelmChart custom resource, do the following: | ||
| 1. Rewrite image names to use the Replicated proxy registry. See [Rewrite Image Names](#rewrite-image-names). | ||
| 1. Inject a KOTS-generated image pull secret that grants proxy access to private images. See [Inject Image Pull Secrets](#inject-image-pull-secrets). | ||
| 1. Add a pull secret for any Docker Hub images that could be rate limited. See [Add Pull Secret for Rate-Limited Docker Hub Images](#docker-secret). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I think we should be advising people to pull these through the proxy. The overhead of the Docker Hub secret is the same overhead as allowing access to the private registry without us. By telling them to manage a secret for Docker Hub we blow a giant hole in our value prop.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I agree, and Paige had a PR ready to do that, but Dmitriy wanted it tested in a KOTS app first. So we need to do that and get his/VP team sign off. https://replicated.slack.com/archives/CEEFDQURM/p1726020572386039?thread_ts=1726010537.693589&cid=CEEFDQURM
| # If the user configured a registry, use the registry namespace they provided | ||
| # If air gap Embedded Cluster/kURL install, use the buit-in registry's hostname | ||
| # Else use the image's namespace at proxy.replicated.com | ||
| repository: '{{repl HasLocalRegistry | ternary LocalRegistryNamespace "proxy/my-app/quay.io/my-org" }}/nginx' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
This example should use a function to get the app slug.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is that a license field value, or what is the template function way to get that?
docs/reference/cron-expressions.md
Outdated
| ``` | ||
| @every 1h45m | ||
| ``` | ||
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
^ ignore me
| To support Helm chart installations with the KOTS `kots.io/v1beta2` HelmChart custom resource, do the following: | ||
| 1. Rewrite image names to use the Replicated proxy registry. See [Rewrite Image Names](#rewrite-image-names). | ||
| 1. Inject a KOTS-generated image pull secret that grants proxy access to private images. See [Inject Image Pull Secrets](#inject-image-pull-secrets). | ||
| 1. Add a pull secret for any Docker Hub images that could be rate limited. See [Add Pull Secret for Rate-Limited Docker Hub Images](#docker-secret). |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I agree, and Paige had a PR ready to do that, but Dmitriy wanted it tested in a KOTS app first. So we need to do that and get his/VP team sign off. https://replicated.slack.com/archives/CEEFDQURM/p1726020572386039?thread_ts=1726010537.693589&cid=CEEFDQURM
| # If the user configured a registry, use the registry namespace they provided | ||
| # If air gap Embedded Cluster/kURL install, use the buit-in registry's hostname | ||
| # Else use the image's namespace at proxy.replicated.com | ||
| repository: '{{repl HasLocalRegistry | ternary LocalRegistryNamespace "proxy/my-app/quay.io/my-org" }}/nginx' |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Is that a license field value, or what is the template function way to get that?
Co-authored-by: Alex Parker <[email protected]>
https://deploy-preview-2753--replicated-docs.netlify.app/vendor/helm-native-v2-using
Also updated the local registry template func descriptions:
https://deploy-preview-2753--replicated-docs.netlify.app/reference/template-functions-config-context#localregistryhost