DevFW-CICD/ingress-nginx-helm
14
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

Merge pull request #2749 from aledbf/docker-build

Browse source 
Use docker to build go binaries
This commit is contained in:
k8s-ci-robot 2018-07-07 05:27:19 -07:00 committed by GitHub
commit c9ca9ffeaa
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
14 changed files with 411 additions and 107 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
.gitignore vendored
View file

@ -39,3 +39,5 @@ site
# temporal github pages # temporal github pages
gh-pages gh-pages
test/binaries

27
.travis.yml
View file

@ -5,23 +5,13 @@ sudo: required
services: services:
- docker - docker
language: go language: generic
addons:
apt:
packages:
- luarocks
notifications: notifications:
email: email:
on_failure: always on_failure: always
on_success: never on_success: never
go:
- 1.10.3
go_import_path: k8s.io/ingress-nginx
# New secure variables can be added using travis encrypt -r kubernetes/ingress-nginx --add K=V # New secure variables can be added using travis encrypt -r kubernetes/ingress-nginx --add K=V
env: env:
global: global:
@ -38,18 +28,8 @@ jobs:
include: include:
- stage: Static Check - stage: Static Check
script: script:
- sudo luarocks install luacheck - make static-check
- make luacheck
- |
go get -d golang.org/x/lint/golint
cd $GOPATH/src/golang.org/x/tools
git checkout release-branch.go1.10
go install golang.org/x/lint/golint
cd -
- make verify-all
- stage: Lua Unit Test - stage: Lua Unit Test
before_script:
- rootfs/etc/nginx/lua/test/up.sh
script: script:
- make lua-test - make lua-test
- stage: Coverage - stage: Coverage
@ -60,9 +40,8 @@ jobs:
- make cover - make cover
- stage: e2e - stage: e2e
before_script: before_script:
- go get github.com/onsi/ginkgo/ginkgo
- test/e2e/up.sh - test/e2e/up.sh
- make dev-env - SKIP_MINIKUBE_START=true make dev-env
script: script:
- make e2e-test - make e2e-test
# split builds to avoid job timeouts # split builds to avoid job timeouts

112
Makefile
View file

@ -15,22 +15,18 @@
.PHONY: all .PHONY: all
all: all-container all: all-container
BUILDTAGS=
# Use the 0.0 tag for testing, it shouldn't clobber any release builds # Use the 0.0 tag for testing, it shouldn't clobber any release builds
TAG?=0.16.2 TAG ?= 0.16.2
REGISTRY?=quay.io/kubernetes-ingress-controller REGISTRY ?= quay.io/kubernetes-ingress-controller
GOOS?=linux DOCKER ?= docker
DOCKER?=docker SED_I ?= sed -i
SED_I?=sed -i
GOHOSTOS ?= $(shell go env GOHOSTOS) GOHOSTOS ?= $(shell go env GOHOSTOS)
# e2e settings # e2e settings
# Allow limiting the scope of the e2e tests. By default run everything # Allow limiting the scope of the e2e tests. By default run everything
FOCUS?=.* FOCUS ?= .*
# number of parallel test # number of parallel test
E2E_NODES?=3 E2E_NODES ?= 3
ifeq ($(GOHOSTOS),darwin) ifeq ($(GOHOSTOS),darwin)
SED_I=sed -i '' SED_I=sed -i ''
@ -38,11 +34,11 @@ endif
REPO_INFO=$(shell git config --get remote.origin.url) REPO_INFO=$(shell git config --get remote.origin.url)
ifndef COMMIT ifndef GIT_COMMIT
COMMIT := git-$(shell git rev-parse --short HEAD) GIT_COMMIT := git-$(shell git rev-parse --short HEAD)
endif endif
PKG=k8s.io/ingress-nginx PKG = k8s.io/ingress-nginx
ARCH ?= $(shell go env GOARCH) ARCH ?= $(shell go env GOARCH)
GOARCH = ${ARCH} GOARCH = ${ARCH}
@ -50,9 +46,9 @@ DUMB_ARCH = ${ARCH}
ALL_ARCH = amd64 arm arm64 ppc64le s390x ALL_ARCH = amd64 arm arm64 ppc64le s390x
QEMUVERSION=v2.12.0 QEMUVERSION = v2.12.0
BUSTED_ARGS=-v --pattern=_test BUSTED_ARGS =-v --pattern=_test
IMGNAME = nginx-ingress-controller IMGNAME = nginx-ingress-controller
IMAGE = $(REGISTRY)/$(IMGNAME) IMAGE = $(REGISTRY)/$(IMGNAME)
@ -67,7 +63,7 @@ ifeq ($(ARCH),arm)
DUMB_ARCH=armhf DUMB_ARCH=armhf
endif endif
ifeq ($(ARCH),arm64) ifeq ($(ARCH),arm64)
QEMUARCH=aarch64 QEMUARCH=aarch64
endif endif
ifeq ($(ARCH),ppc64le) ifeq ($(ARCH),ppc64le)
QEMUARCH=ppc64le QEMUARCH=ppc64le
@ -75,11 +71,19 @@ ifeq ($(ARCH),ppc64le)
DUMB_ARCH=ppc64el DUMB_ARCH=ppc64el
endif endif
ifeq ($(ARCH),s390x) ifeq ($(ARCH),s390x)
QEMUARCH=s390x QEMUARCH=s390x
endif endif
TEMP_DIR := $(shell mktemp -d) TEMP_DIR := $(shell mktemp -d)
DEF_VARS:=ARCH=$(ARCH) \
TAG=$(TAG) \
PKG=$(PKG) \
GOARCH=$(GOARCH) \
GIT_COMMIT=$(GIT_COMMIT) \
REPO_INFO=$(REPO_INFO) \
PWD=$(PWD)
DOCKERFILE := $(TEMP_DIR)/rootfs/Dockerfile DOCKERFILE := $(TEMP_DIR)/rootfs/Dockerfile
.PHONY: image-info .PHONY: image-info
@ -119,7 +123,7 @@ else
$(SED_I) "s/CROSS_BUILD_//g" $(DOCKERFILE) $(SED_I) "s/CROSS_BUILD_//g" $(DOCKERFILE)
endif endif
$(DOCKER) build -t $(MULTI_ARCH_IMG):$(TAG) $(TEMP_DIR)/rootfs $(DOCKER) build --no-cache --pull -t $(MULTI_ARCH_IMG):$(TAG) $(TEMP_DIR)/rootfs
ifeq ($(ARCH), amd64) ifeq ($(ARCH), amd64)
# This is for maintaining backward compatibility # This is for maintaining backward compatibility
@ -147,72 +151,60 @@ clean:
.PHONY: build .PHONY: build
build: clean build: clean
CGO_ENABLED=0 GOOS=${GOOS} GOARCH=${GOARCH} go build -a -installsuffix cgo \ @$(DEF_VARS) \
-ldflags "-s -w -X ${PKG}/version.RELEASE=${TAG} -X ${PKG}/version.COMMIT=${COMMIT} -X ${PKG}/version.REPO=${REPO_INFO}" \ build/go-in-docker.sh build/build.sh
-o ${TEMP_DIR}/rootfs/nginx-ingress-controller ${PKG}/cmd/nginx
.PHONY: verify-all mkdir -p $(TEMP_DIR)/rootfs
verify-all: cp bin/$(ARCH)/nginx-ingress-controller $(TEMP_DIR)/rootfs/nginx-ingress-controller
@./hack/verify-all.sh
.PHONY: static-check
static-check:
@$(DEF_VARS) \
build/go-in-docker.sh build/static-check.sh
.PHONY: test .PHONY: test
test: test:
@go test -v -race -tags "$(BUILDTAGS) cgo" $(shell go list ${PKG}/... | grep -v vendor | grep -v '/test/e2e') @$(DEF_VARS) \
DOCKER_OPTS="--net=host" \
build/go-in-docker.sh build/test.sh
.PHONY: lua-test .PHONY: lua-test
lua-test: lua-test:
@busted $(BUSTED_ARGS) ./rootfs/etc/nginx/lua/test; @$(DEF_VARS) \
BUSTED_ARGS="$(BUSTED_ARGS)" \
build/go-in-docker.sh build/test-lua.sh
.PHONY: e2e-test .PHONY: e2e-test
e2e-test: e2e-test:
@ginkgo version || go get -u github.com/onsi/ginkgo/ginkgo @$(DEF_VARS) \
@ginkgo build ./test/e2e FOCUS=$(FOCUS) \
@KUBECONFIG=${HOME}/.kube/config ginkgo \ E2E_NODES=$(E2E_NODES) \
-randomizeSuites \ DOCKER_OPTS="--net=host" \
-randomizeAllSpecs \ build/go-in-docker.sh build/e2e-tests.sh
-flakeAttempts=2 \
--focus=$(FOCUS) \
-p \
-trace \
-nodes=$(E2E_NODES) \
./test/e2e/e2e.test
.PHONY: cover .PHONY: cover
cover: cover:
@rm -rf coverage.txt @$(DEF_VARS) \
@for d in `go list ./... | grep -v vendor | grep -v '/test/e2e' | grep -v 'images/grpc-fortune-teller'`; do \ DOCKER_OPTS="--net=host" \
t=$$(date +%s); \ build/go-in-docker.sh build/cover.sh
go test -coverprofile=cover.out -covermode=atomic $$d || exit 1; \
echo "Coverage test $$d took $$(($$(date +%s)-t)) seconds"; \ echo "Uploading coverage results..."
if [ -f cover.out ]; then \
cat cover.out >> coverage.txt; \
rm cover.out; \
fi; \
done
@echo "Uploading coverage results..."
@curl -s https://codecov.io/bash | bash @curl -s https://codecov.io/bash | bash
.PHONY: vet .PHONY: vet
vet: vet:
@go vet $(shell go list ${PKG}/... | grep -v vendor) @go vet $(shell go list ${PKG}/... | grep -v vendor)
.PHONY: luacheck
luacheck:
luacheck -q ./rootfs/etc/nginx/lua/
.PHONY: release .PHONY: release
release: all-container all-push release: all-container all-push
echo "done" echo "done"
.PHONY: docker-build
docker-build: all-container
.PHONY: docker-push
docker-push: all-push
.PHONY: check_dead_links .PHONY: check_dead_links
check_dead_links: check_dead_links:
docker run -t -v $$PWD:/tmp aledbf/awesome_bot:0.1 --allow-dupe --allow-redirect $(shell find $$PWD -mindepth 1 -name "*.md" -printf '%P\n' | grep -v vendor | grep -v Changelog.md) docker run -t \
-v $$PWD:/tmp aledbf/awesome_bot:0.1 \
--allow-dupe \
--allow-redirect $(shell find $$PWD -mindepth 1 -name "*.md" -printf '%P\n' | grep -v vendor | grep -v Changelog.md)
.PHONY: dep-ensure .PHONY: dep-ensure
dep-ensure: dep-ensure:
@ -223,7 +215,7 @@ dep-ensure:
.PHONY: dev-env .PHONY: dev-env
dev-env: dev-env:
@./hack/build-dev-env.sh @build/dev-env.sh
.PHONY: live-docs .PHONY: live-docs
live-docs: live-docs:

33
build/Dockerfile Normal file
View file

@ -0,0 +1,33 @@
# Copyright 2018 The Kubernetes Authors. All rights reserved.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
FROM golang:1.10.3-stretch
RUN apt update \
&& apt install -y --no-install-recommends \
luarocks \
&& apt-get clean -y \
&& rm -rf \
/var/cache/debconf/* \
/var/lib/apt/lists/* \
/var/log/* \
/tmp/* \
/var/tmp/*
RUN luarocks install luacheck \
&& luarocks install busted 2.0.rc12 \
&& luarocks install lua-cjson 2.1.0-1
RUN go get github.com/onsi/ginkgo/ginkgo \
&& go get golang.org/x/lint/golint

53
build/build.sh Executable file
View file

@ -0,0 +1,53 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
if [ -z "${PKG}" ]; then
echo "PKG must be set"
exit 1
fi
if [ -z "${ARCH}" ]; then
echo "ARCH must be set"
exit 1
fi
if [ -z "${GIT_COMMIT}" ]; then
echo "GIT_COMMIT must be set"
exit 1
fi
if [ -z "${REPO_INFO}" ]; then
echo "REPO_INFO must be set"
exit 1
fi
if [ -z "${TAG}" ]; then
echo "TAG must be set"
exit 1
fi
if [ -z "${TAG}" ]; then
echo "TAG must be set"
exit 1
fi
export CGO_ENABLED=0
go build -a -installsuffix cgo \
-ldflags "-s -w \
-X ${PKG}/version.RELEASE=${TAG} \
-X ${PKG}/version.COMMIT=${GIT_COMMIT} \
-X ${PKG}/version.REPO=${REPO_INFO}" \
-o bin/${ARCH}/nginx-ingress-controller ${PKG}/cmd/nginx

35
build/cover.sh Executable file
View file

@ -0,0 +1,35 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
if [ -z "${PKG}" ]; then
echo "PKG must be set"
exit 1
fi
rm -rf coverage.txt
for d in `go list ${PKG}/... | grep -v vendor | grep -v '/test/e2e' | grep -v images`; do
t=$(date +%s);
go test -coverprofile=cover.out -covermode=atomic $d || exit 1;
echo "Coverage test $d took $(($(date +%s)-$t)) seconds";
if [ -f cover.out ]; then
cat cover.out >> coverage.txt;
rm cover.out;
fi;
done

27
hack/build-dev-env.sh → build/dev-env.sh
View file

@ -14,17 +14,30 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
: "${NAMESPACE:=ingress-nginx}" set -o errexit
set -o nounset
set -o pipefail
SKIP_MINIKUBE_START=${SKIP_MINIKUBE_START:-}
NAMESPACE="${NAMESPACE:-ingress-nginx}"
echo "NAMESPACE is set to ${NAMESPACE}" echo "NAMESPACE is set to ${NAMESPACE}"
test $(minikube status | grep Running | wc -l) -eq 2 && $(minikube status | grep -q 'Correctly Configured') || minikube start
eval $(minikube docker-env)
export TAG=dev export TAG=dev
export REGISTRY=ingress-controller export ARCH=amd64
export REGISTRY=${REGISTRY:-ingress-controller}
DEV_IMAGE=${REGISTRY}/nginx-ingress-controller:${TAG}
echo "[dev-env] building container" echo "[dev-env] building container"
ARCH=amd64 make build container make build container
if [ -z "${SKIP_MINIKUBE_START}" ]; then
test $(minikube status | grep Running | wc -l) -eq 2 && $(minikube status | grep -q 'Correctly Configured') || minikube start \
--extra-config=kubelet.sync-frequency=1s \
--extra-config=apiserver.authorization-mode=RBAC
fi
docker save "${DEV_IMAGE}" | (eval $(minikube docker-env) && docker load) || true
echo "[dev-env] installing kubectl" echo "[dev-env] installing kubectl"
kubectl version || brew install kubectl kubectl version || brew install kubectl
@ -38,4 +51,4 @@ kubectl set image \
deployments \ deployments \
--namespace ingress-nginx \ --namespace ingress-nginx \
--selector app=ingress-nginx \ --selector app=ingress-nginx \
nginx-ingress-controller=${REGISTRY}/nginx-ingress-controller:${TAG} nginx-ingress-controller=${DEV_IMAGE}

66
build/e2e-tests.sh Executable file
View file

@ -0,0 +1,66 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
if [ -z "${PKG}" ]; then
echo "PKG must be set"
exit 1
fi
if [ -z "${FOCUS}" ]; then
echo "FOCUS must be set"
exit 1
fi
if [ -z "${E2E_NODES}" ]; then
echo "E2E_NODES must be set"
exit 1
fi
SCRIPT_ROOT=$(dirname ${BASH_SOURCE})/..
mkdir -p ${SCRIPT_ROOT}/test/binaries
TEST_BINARIES=$( cd "${SCRIPT_ROOT}/test/binaries" ; pwd -P )
export PATH=${TEST_BINARIES}:$PATH
if ! [ -x "$(command -v kubectl)" ]; then
echo "downloading kubectl..."
curl -sSLo ${TEST_BINARIES}/kubectl \
https://storage.googleapis.com/kubernetes-release/release/v1.11.0/bin/linux/amd64/kubectl
chmod +x ${TEST_BINARIES}/kubectl
fi
if ! [ -x "$(command -v minikube)" ]; then
echo "downloading minikube..."
curl -sSLo ${TEST_BINARIES}/minikube \
https://storage.googleapis.com/minikube/releases/latest/minikube-linux-amd64
chmod +x ${TEST_BINARIES}/minikube
fi
ginkgo build ./test/e2e
ginkgo \
-randomizeSuites \
-randomizeAllSpecs \
-flakeAttempts=2 \
--focus=${FOCUS} \
-p \
-trace \
-nodes=${E2E_NODES} \
test/e2e/e2e.test

79
build/go-in-docker.sh Executable file
View file

@ -0,0 +1,79 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
if [ -z "${PKG}" ]; then
echo "PKG must be set"
exit 1
fi
if [ -z "${ARCH}" ]; then
echo "ARCH must be set"
exit 1
fi
if [ -z "${GIT_COMMIT}" ]; then
echo "GIT_COMMIT must be set"
exit 1
fi
if [ -z "${REPO_INFO}" ]; then
echo "REPO_INFO must be set"
exit 1
fi
if [ -z "${TAG}" ]; then
echo "TAG must be set"
exit 1
fi
if [ -z "${HOME}" ]; then
echo "HOME must be set"
exit 1
fi
DOCKER_OPTS=${DOCKER_OPTS:-""}
docker build -t ingress-nginx:build build
FLAGS=$@
tee .env << EOF
PKG=${PKG:-""}
ARCH=${ARCH:-""}
GIT_COMMIT=${GIT_COMMIT:-""}
E2E_NODES=${E2E_NODES:-3}
FOCUS=${FOCUS:-.*}
TAG=${TAG:-"0.0"}
HOME=${HOME:-/root}
KUBECONFIG=${HOME}/.kube/config
GOARCH=${GOARCH}
PWD=${PWD}
BUSTED_ARGS=${BUSTED_ARGS:-""}
REPO_INFO=${REPO_INFO:-local}
EOF
docker run \
--tty \
--rm \
${DOCKER_OPTS} \
-v ${HOME}/.kube:/${HOME}/.kube \
-v ${HOME}/.minikube:${HOME}/.minikube \
-v ${PWD}:/go/src/${PKG} \
-v ${PWD}/bin/${ARCH}:/go/bin/linux_${ARCH} \
-w /go/src/${PKG} \
--env-file .env \
ingress-nginx:build ${FLAGS}
rm .env

24
rootfs/etc/nginx/lua/test/up.sh → build/static-check.sh
View file

@ -1,4 +1,4 @@
#!/usr/bin/env bash #!/bin/bash
# Copyright 2018 The Kubernetes Authors. # Copyright 2018 The Kubernetes Authors.
# #
@ -14,17 +14,15 @@
# See the License for the specific language governing permissions and # See the License for the specific language governing permissions and
# limitations under the License. # limitations under the License.
install() set -o errexit
{ set -o nounset
package="$1" set -o pipefail
version="$2"
if luarocks list --porcelain $package $version | grep -q "installed"; then if [ -z "${PKG}" ]; then
echo $package already installed, skipping ; echo "PKG must be set"
else exit 1
sudo luarocks install $package $version; fi
fi
}
install busted 2.0.rc12 hack/verify-all.sh
install lua-cjson 2.1.0-1
luacheck -q rootfs/etc/nginx/lua/

21
build/test-lua.sh Executable file
View file

@ -0,0 +1,21 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
busted ${BUSTED_ARGS} ./rootfs/etc/nginx/lua/test;

27
build/test.sh Executable file
View file

@ -0,0 +1,27 @@
#!/bin/bash
# Copyright 2018 The Kubernetes Authors.
#
# Licensed under the Apache License, Version 2.0 (the "License");
# you may not use this file except in compliance with the License.
# You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
set -o errexit
set -o nounset
set -o pipefail
if [ -z "${PKG}" ]; then
echo "PKG must be set"
exit 1
fi
go test -v -race -tags "cgo" \
$(go list ${PKG}/... | grep -v vendor | grep -v '/test/e2e' | grep -v images | grep -v "docs/examples")

6
rootfs/Dockerfile
View file

@ -25,8 +25,6 @@ RUN clean-install \
COPY . / COPY . /
RUN setcap cap_net_bind_service=+ep /nginx-ingress-controller
# Create symlinks to redirect nginx logs to stdout and stderr docker log collector # Create symlinks to redirect nginx logs to stdout and stderr docker log collector
# This only works if nginx is started with CMD or ENTRYPOINT # This only works if nginx is started with CMD or ENTRYPOINT
# Required because clean-install removes /var/log content # Required because clean-install removes /var/log content
@ -50,8 +48,12 @@ RUN mkdir -p /var/log/nginx \
&& chown www-data.www-data /etc/nginx/nginx.conf \ && chown www-data.www-data /etc/nginx/nginx.conf \
&& chown www-data.www-data /etc/nginx/opentracing.json && chown www-data.www-data /etc/nginx/opentracing.json
RUN setcap cap_net_bind_service=+ep /nginx-ingress-controller \
&& setcap -v cap_net_bind_service=+ep /nginx-ingress-controller
USER www-data USER www-data
ENTRYPOINT ["/usr/bin/dumb-init"] ENTRYPOINT ["/usr/bin/dumb-init"]
CMD ["/nginx-ingress-controller"] CMD ["/nginx-ingress-controller"]

6
test/e2e/up.sh
View file

@ -36,11 +36,15 @@ touch $HOME/.kube/config
export KUBECONFIG=$HOME/.kube/config export KUBECONFIG=$HOME/.kube/config
# workaround to avoid breaking the execution
set +o errexit
set +o pipefail
# --vm-driver=none, use host docker (avoid docker-in-docker) # --vm-driver=none, use host docker (avoid docker-in-docker)
# --bootstrapper=localkube, works around https://github.com/kubernetes/minikube/issues/2704 # --bootstrapper=localkube, works around https://github.com/kubernetes/minikube/issues/2704
sudo -E minikube start \ sudo -E minikube start \
--bootstrapper=localkube \
--vm-driver=none \ --vm-driver=none \
--bootstrapper=localkube \
--kubernetes-version=$KUBERNETES_VERSION \ --kubernetes-version=$KUBERNETES_VERSION \
--extra-config=kubelet.sync-frequency=1s \ --extra-config=kubelet.sync-frequency=1s \
--extra-config=apiserver.authorization-mode=RBAC --extra-config=apiserver.authorization-mode=RBAC