3586986416
This is the 2nd attempt. The previous was reverted while we figured out the regional mirrors (oops). New plan: k8s.gcr.io is a read-only facade that auto-detects your source region (us, eu, or asia for now) and pulls from the closest. To publish an image, push k8s-staging.gcr.io and it will be synced to the regionals automatically (similar to today). For now the staging is an alias to gcr.io/google_containers (the legacy URL). When we move off of google-owned projects (working on it), then we just do a one-time sync, and change the google-internal config, and nobody outside should notice. We can, in parallel, change the auto-sync into a manual sync - send a PR to "promote" something from staging, and a bot activates it. Nice and visible, easy to keep track of.
26 lines
588 B
YAML
26 lines
588 B
YAML
apiVersion: v1
|
|
kind: Pod
|
|
metadata:
|
|
name: env-test-pod
|
|
spec:
|
|
containers:
|
|
- name: test-container
|
|
image: k8s.gcr.io/busybox
|
|
command: [ "/bin/sh", "-c", "env" ]
|
|
env:
|
|
- name: TEST_CMD_1
|
|
valueFrom:
|
|
secretKeyRef:
|
|
name: test-secret
|
|
key: key-1
|
|
- name: TEST_CMD_2
|
|
valueFrom:
|
|
configMapKeyRef:
|
|
name: test-configmap
|
|
key: key-2
|
|
- name: TEST_CMD_3
|
|
valueFrom:
|
|
fieldRef:
|
|
fieldPath: metadata.name
|
|
restartPolicy: Never
|