Yuvipanda has uploaded a new change for review.

  https://gerrit.wikimedia.org/r/274011

Change subject: k8s: Add auth for docker client to authenticate to registry
......................................................................

k8s: Add auth for docker client to authenticate to registry

Change-Id: I2c78b5174d53620ed0189f4a8ebe05f3f306ee34
---
M modules/k8s/manifests/docker.pp
1 file changed, 20 insertions(+), 0 deletions(-)


  git pull ssh://gerrit.wikimedia.org:29418/operations/puppet 
refs/changes/11/274011/1

diff --git a/modules/k8s/manifests/docker.pp b/modules/k8s/manifests/docker.pp
index 430b28a..1e093a4 100644
--- a/modules/k8s/manifests/docker.pp
+++ b/modules/k8s/manifests/docker.pp
@@ -20,6 +20,26 @@
         require => Package['docker.io'],
     }
 
+    $docker_username = hiera('docker::username')
+    $docker_password = hiera('docker::password')
+    $docker_registry = hiera('docker::registry_url')
+
+    $docker_auth = inline_template("<%= require 'base64'; 
Base64.encode64('${docker_username}:${docker_password}') %>")
+
+    $docker_config = {
+        $docker_registry => {
+            'auth' => $docker_auth,
+        }
+    }
+
+    file { '/root/.dockercfg':
+        content => ordered_json($docker_config),
+        user    => 'docker',
+        group   => 'docker',
+        mode    => '0440',
+        notify  => Base::Service_unit['docker'],
+    }
+
     base::service_unit { 'docker':
         systemd   => true,
         subscribe => Package['docker-engine'],

-- 
To view, visit https://gerrit.wikimedia.org/r/274011
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: newchange
Gerrit-Change-Id: I2c78b5174d53620ed0189f4a8ebe05f3f306ee34
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Yuvipanda <yuvipa...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to