Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[installer] Registry facade should not use a port from node ports range #8580

Merged
merged 4 commits into from
Mar 4, 2022
Merged

[installer] Registry facade should not use a port from node ports range #8580

Show file tree
Hide file tree
Changes from 1 commit
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
e61ff35
[installer] Registry facade should not use a port from node ports range
aledbf Mar 3, 2022
48f72c1
Add egress rule to allow access to kube-dns
aledbf Mar 3, 2022
50f0ce2
Add ws-manager egress rule
aledbf Mar 3, 2022
feb6d5f
Enable access to kube-dns
aledbf Mar 3, 2022
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion install/installer/pkg/common/constants.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -35,7 +35,7 @@ const (
RegistryAuthSecret = "builtin-registry-auth"
RegistryTLSCertSecret = "builtin-registry-certs"
RegistryFacadeComponent = "registry-facade"
RegistryFacadeServicePort = 30000
RegistryFacadeServicePort = 20000
RegistryFacadeTLSCertSecret = "builtin-registry-facade-cert"
ServerComponent = "server"
ServerInstallationAdminPort = 9000
Expand Down
1 change: 1 addition & 0 deletions install/installer/pkg/components/cluster/podsecuritypolicies.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,6 +6,7 @@ package cluster

import (
"fmt"

"github.com/gitpod-io/gitpod/installer/pkg/common"
corev1 "k8s.io/api/core/v1"
"k8s.io/api/policy/v1beta1"
Expand Down
4 changes: 2 additions & 2 deletions install/installer/pkg/components/registry-facade/podsecuritypolicy.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -38,8 +38,8 @@ func podsecuritypolicy(ctx *common.RenderContext) ([]runtime.Object, error) {
HostIPC: false,
HostPID: false,
HostPorts: []v1beta1.HostPortRange{{
Min: 30000,
Max: 33000,
Min: 20000,
Max: 20000,
mrsimonemms marked this conversation as resolved.
Show resolved Hide resolved
}},
RunAsUser: v1beta1.RunAsUserStrategyOptions{
Rule: v1beta1.RunAsUserStrategyRunAsAny,
Expand Down