update keyring docs (#986)

* update docs about keyring

Signed-off-by: yxxhero <aiopsclub@163.com>
This commit is contained in:
yxxhero 2023-08-23 14:17:07 +08:00 committed by GitHub
parent 803ff8d0ab
commit e4184a48b4
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 6 additions and 2 deletions

View File

@ -137,7 +137,7 @@ jobs:
KUSTOMIZE_VERSION: ${{ matrix.kustomize-version }} KUSTOMIZE_VERSION: ${{ matrix.kustomize-version }}
run: make -C .github/workflows helm vault sops kustomize run: make -C .github/workflows helm vault sops kustomize
- name: Start minikube - name: Start minikube
uses: medyagh/setup-minikube@master uses: medyagh/setup-minikube@latest
- name: Execute integration tests - name: Execute integration tests
env: env:
HELM_SECRETS_VERSION: ${{ matrix.plugin-secrets-version }} HELM_SECRETS_VERSION: ${{ matrix.plugin-secrets-version }}

View File

@ -155,6 +155,8 @@ repositories:
password: optional_password password: optional_password
oci: true oci: true
passCredentials: true passCredentials: true
verify: true
keyring: path/to/keyring.gpg
# Advanced configuration: You can use a ca bundle to use an https repo # Advanced configuration: You can use a ca bundle to use an https repo
# with a self-signed certificate # with a self-signed certificate
- name: insecure - name: insecure
@ -185,6 +187,7 @@ helmDefaults:
- "--set k=v" - "--set k=v"
# verify the chart before upgrading (only works with packaged charts not directories) (default false) # verify the chart before upgrading (only works with packaged charts not directories) (default false)
verify: true verify: true
keyring: path/to/keyring.gpg
# wait for k8s resources via --wait. (default false) # wait for k8s resources via --wait. (default false)
wait: true wait: true
# if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout (default false, Implemented in Helm3.5) # if set and --wait enabled, will wait until all Jobs have been completed before marking the release as successful. It will wait for as long as --timeout (default false, Implemented in Helm3.5)
@ -277,6 +280,7 @@ releases:
- vault_secret.yaml - vault_secret.yaml
# Override helmDefaults options for verify, wait, waitForJobs, timeout, recreatePods and force. # Override helmDefaults options for verify, wait, waitForJobs, timeout, recreatePods and force.
verify: true verify: true
keyring: path/to/keyring.gpg
wait: true wait: true
waitForJobs: true waitForJobs: true
timeout: 60 timeout: 60

View File

@ -11,7 +11,7 @@ fi
if [ ! $(minikube status --format '{{.ClusterStatus}}') == "Running" ]; then if [ ! $(minikube status --format '{{.ClusterStatus}}') == "Running" ]; then
fail "Minikube Cluster is not running." fail "Minikube Cluster is not running."
fi fi
if ! kubectl version --short 1> /dev/null; then if ! kubectl version 1> /dev/null; then
fail "Could not connect to minikube apiserver" fail "Could not connect to minikube apiserver"
fi fi
if ! hash curl 1>/dev/null; then if ! hash curl 1>/dev/null; then