57d7764114
This change adds a variable that can be used to disable kolla docker registry login attempts, even when the registry username and password are set. This is required for deployments using a non-standard containerised registry deployed on the seed during the deploy-container step, since it takes place after the registry login attempt. Change-Id: Ie17ef9ce1147cbaec2e42db932c7d59293b49b1b
2.1 KiB
Seed custom containers
This section covers configuration of the user-defined containers deployment functionality that runs on the seed host.
Configuration
For example, to deploy a squid container image:
seed_containers:
squid:
image: "stackhpc/squid:3.5.20-1"
pre: "{{ kayobe_env_config_path }}/containers/squid/pre.yml"
post: "{{ kayobe_env_config_path }}/containers/squid/post.yml"Please notice the optional pre and post Ansible task files -
those need to be created in kayobe-config path and will be
run before and after particular container deployment.
Possible options for container deployment:
seed_containers:
containerA:
capabilities:
command:
comparisons:
detach:
env:
network_mode:
image:
init:
ipc_mode:
pid_mode:
ports:
privileged:
restart_policy:
shm_size:
sysctls:
tag:
ulimits:
user:
volumes:For a detailed explanation of each option - please see Ansible docker_container module page.
List of Kayobe applied defaults to required docker_container variables:
../../../../ansible/roles/deploy-containers/defaults/main.yml
Docker registry
Seed containers can be pulled from a docker registry deployed on the seed, since the docker registry deployment step precedes the custom container deployment step.
It is also possible to deploy a custom containerised docker registry as a custom seed container. In this case, basic authentication login attempts can be disabled by setting
deploy_containers_registry_attempt_login: falseWithout this setting, the login will fail because the registry has not yet been deployed.
More information on deploying a docker registry can be found here
<configuration-docker-registry>.