pingu_98/cara
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

release: v4.17.0a1

Browse source
This commit is contained in:
Nicola Tarocco 2024-09-13 17:19:52 +02:00
parent fcb419cc8e
commit 2998df06e3
No known key found for this signature in database
GPG key ID: A08DEF00BA54E806
1 changed files with 8 additions and 13 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

21
README.md
View file

@ -312,14 +312,20 @@ Then, switch to the project that you want to update:
$ oc project caimira-test
```
Create a new service account in OpenShift to use GitLab container registry:
Create a new service account in OpenShift to access GitLab container registry:
```console
$ oc create serviceaccount gitlabci-deployer
serviceaccount "gitlabci-deployer" created
```
$ oc policy add-role-to-user registry-editor -z gitlabci-deployer
Grant `edit` permission to the service account to run `oc set image` from CI an update the tag to deploy:
```
$ oc policy add-role-to-user edit -z gitlabci-deployer
```
Get the service account token for GitLab:
```
# We will refer to the output of this command as `test-token`
$ oc serviceaccounts get-token gitlabci-deployer
<...test-token...>
@ -327,17 +333,6 @@ $ oc serviceaccounts get-token gitlabci-deployer
Add the token to GitLab to allow GitLab to access OpenShift and define/change image stream tags. Go to `Settings` -> `CI / CD` -> `Variables` -> click on `Expand` button and create the variable `OPENSHIFT_CAIMIRA_TEST_DEPLOY_TOKEN`: insert the token `<...test-token...>`.
Then, create the webhook secret to be able to trigger automatic builds from GitLab.
Create and store the secret. Copy the secret above and add it to the GitLab project under `CI /CD` -> `Variables` with the name `OPENSHIFT_CAIMIRA_TEST_WEBHOOK_SECRET`.
```console
$ WEBHOOKSECRET=$(openssl rand -hex 50)
$ oc create secret generic \
--from-literal="WebHookSecretKey=$WEBHOOKSECRET" \
gitlab-caimira-webhook-secret
```
For CI usage, we also suggest creating a service account:
```console