Develop the workspace API and controller #619
Assignees
Comments
|
Added to epic #586 |
5 tasks
|
The workspace controller is functionally complete, what's remaining is some test code and a good readme. |
EronWright
added a commit
that referenced
this issue
Sep 6, 2024
<!--Thanks for your contribution. See [CONTRIBUTING](CONTRIBUTING.md)
for Pulumi's contribution guidelines.
Help us merge your changes more quickly by adding more details such
as labels, milestones, and reviewers.-->
### Proposed changes
<!--Give us a brief description of what you've done and what it solves.
-->
This PR implements the `auto.pulumi.com` API Group, including the
`Workspace` and `Update` types.
Integration tests for the workspace controller are included.
### Example
```yaml
apiVersion: auto.pulumi.com/v1alpha1
kind: Workspace
metadata:
name: random-yaml-1e2fc47
spec:
image: pulumi/pulumi:3.128.0-nonroot
securityProfile: restricted
serviceAccountName: default
git:
url: https://github.com/pulumi/examples.git
revision: 1e2fc471709448f3c9f7a250f28f1eafcde7017b
dir: random-yaml
env:
- name: PULUMI_ACCESS_TOKEN
valueFrom:
secretKeyRef:
name: pulumi-api-secret
key: accessToken
resources:
requests:
cpu: 1
memory: 512Mi
limits:
cpu: 1
memory: 512Mi
# various extension points shown here.
# - custom pod labels
# - pod tolerations
# - extra init container(s)
# - extra volume(s) and volume mounts onto the 'pulumi' container
podTemplate:
metadata:
labels:
example.com/mylabel: bar
spec:
terminationGracePeriodSeconds: 3600
tolerations:
- key: "example.com/foo"
operator: "Exists"
effect: "NoSchedule"
initContainers:
- name: extra
image: busybox
command: ["sh", "-c", "echo 'Hello, extra init container!'"]
securityContext:
allowPrivilegeEscalation: false
capabilities:
add:
- NET_BIND_SERVICE
drop:
- ALL
volumeMounts:
- name: share
mountPath: /share
containers:
- name: pulumi
volumeMounts:
- name: secret-volume
mountPath: /etc/secret-volume
readOnly: true
volumes:
- name: secret-volume
secret:
secretName: test-secret
```
### Specific Changes
- (agent) git source support
- (operator) scaffolding
- (operator) workspace api and controller and tests
- (operator) update api and controller
- (experimental) configuration block in `Environment` spec
- (experimental) dockerfile for non-root pu/pu
### Related issues (optional)
<!--Refer to related PRs or issues: #1234, or 'Fixes #1234' or 'Closes
#1234'.
Or link to full URLs to issues or pull requests in other GitHub
repositories. -->
Closes #619
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Implementation task for the
WorkspaceAPI, per design doc.The text was updated successfully, but these errors were encountered: