Aisuko

test-parsing:
  image: tianon/true
  labels:
    io.rancher.os.scope: system
    io.rancher.os.createonly: "true"
    bool: true
    number: 10
  environment:
    bool: true
    number: 10

Aisuko

#cloud-config
rancher:
  log: true

Aisuko

apiVersion: v1
kind: Namespace
metadata:
  name: tekton-pipelines

---
apiVersion: policy/v1beta1
kind: PodSecurityPolicy
metadata:
  name: tekton-pipelines

Aisuko

apiVersion: v1
kind: ServiceAccount
metadata:
  name: tiller
  namespace: kube-system
---
apiVersion: rbac.authorization.k8s.io/v1
kind: ClusterRoleBinding
metadata:
  name: tiller

Aisuko

# /bin/bash

set -ex

# docker

yum -y install docker

service docker start

Aisuko

# !/usr/bin/env bash
#
# Auto build image use kaniko in container.
# Copyright (C) 2019 Bowen.Li urakiny@gmail.com
#
red='\033[0;31m'
green='\033[0;32m'
yellow='\033[0;33m'
plain='\033[0m'

Aisuko

DOCKER_REGISTRY_SERVER=https://index.docker.io/v1/
DOCKER_USER=Type your dockerhub username, same as when you `docker login`
DOCKER_EMAIL=Type your dockerhub email, same as when you `docker login`
DOCKER_PASSWORD=Type your dockerhub pw, same as when you `docker login`

kubectl create secret docker-registry myregistrykey \
  --docker-server=$DOCKER_REGISTRY_SERVER \
  --docker-username=$DOCKER_USER \
  --docker-password=$DOCKER_PASSWORD \
  --docker-email=$DOCKER_EMAIL

Aisuko

helm reset --force

#  helm version --server

kubectl -n kube-system create serviceaccount tiller

kubectl create clusterrolebinding tiller --clusterrole=cluster-admin --serviceaccount=kube-system:tiller

helm init --service-account tiller

Aisuko

# Fixed https://github.com/jetstack/cert-manager/issues/870
helm install --name cert-manager --namespace yournamespace stable/cert-manager --set createCustomResource=false
helm upgrade --install --namespace yournamespace cert-manager stable/cert-manager --set createCustomResource=true

Aisuko

worker_processes 4;
worker_rlimit_nofile 40000;

events {
    worker_connections 8192;
}

stream {
    upstream rancher_servers_http {
        least_conn;