mirror of
https://github.com/wahyd4/cert-manager.git
synced 2026-08-09 21:26:04 +10:00
Ashley Davis
0955aa4531
this works around a limit on file descriptors which we encounter in kind in CI. newer kind images impose a limit of 1024 file descriptors which isn't trivial to change; haproxy seems to try to request just over 2*n file descriptors where n is the max number of connections; as such, if we limit max-connections to 250 we should be comfortably within the limit Signed-off-by: Ashley Davis <ashley.davis@jetstack.io>
90 lines
2.1 KiB
Bash
Executable File
90 lines
2.1 KiB
Bash
Executable File
#!/usr/bin/env bash
|
|
|
|
# Copyright 2021 The cert-manager Authors.
|
|
#
|
|
# Licensed under the Apache License, Version 2.0 (the "License");
|
|
# you may not use this file except in compliance with the License.
|
|
# You may obtain a copy of the License at
|
|
#
|
|
# http://www.apache.org/licenses/LICENSE-2.0
|
|
#
|
|
# Unless required by applicable law or agreed to in writing, software
|
|
# distributed under the License is distributed on an "AS IS" BASIS,
|
|
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
# See the License for the specific language governing permissions and
|
|
# limitations under the License.
|
|
|
|
# Install HAProxy as a gateway-API e2e test.
|
|
|
|
set -o nounset
|
|
set -o errexit
|
|
set -o pipefail
|
|
|
|
SCRIPT_ROOT=$(dirname "${BASH_SOURCE}")
|
|
source "${SCRIPT_ROOT}/../../lib/lib.sh"
|
|
|
|
check_tool helm
|
|
check_tool kubectl
|
|
|
|
helm repo add haproxy-ingress https://haproxy-ingress.github.io/charts
|
|
helm repo update
|
|
|
|
export NAMESPACE="haproxy-ingress"
|
|
export CONFIG_MAP="haproxy-ingress-config"
|
|
export VERSION="0.13.4"
|
|
|
|
cat <<EOYAML | kubectl apply -f -
|
|
apiVersion: v1
|
|
kind: Namespace
|
|
metadata:
|
|
name: ${NAMESPACE}
|
|
---
|
|
apiVersion: v1
|
|
kind: ConfigMap
|
|
metadata:
|
|
name: ${CONFIG_MAP}
|
|
namespace: ${NAMESPACE}
|
|
data:
|
|
max-connections: "250"
|
|
EOYAML
|
|
|
|
helm upgrade \
|
|
--install \
|
|
--wait \
|
|
--namespace "${NAMESPACE}" \
|
|
--version "${VERSION}" \
|
|
--set "controller.extraArgs.watch-gateway=true" \
|
|
--set "controller.extraArgs.configmap=${NAMESPACE}/${CONFIG_MAP}" \
|
|
--set "controller.service.type=ClusterIP" \
|
|
--set "controller.service.clusterIP=10.0.0.14" \
|
|
haproxy-ingress haproxy-ingress/haproxy-ingress
|
|
|
|
cat <<EOYAML | kubectl apply -f -
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
kind: GatewayClass
|
|
metadata:
|
|
name: haproxy-acmesolver
|
|
spec:
|
|
controller: haproxy-ingress.github.io/controller
|
|
EOYAML
|
|
|
|
cat <<EOYAML | kubectl apply -f -
|
|
apiVersion: networking.x-k8s.io/v1alpha1
|
|
kind: Gateway
|
|
metadata:
|
|
name: acmesolver
|
|
namespace: haproxy-ingress
|
|
spec:
|
|
gatewayClassName: haproxy-acmesolver
|
|
listeners:
|
|
- protocol: HTTP
|
|
port: 80
|
|
routes:
|
|
kind: HTTPRoute
|
|
selector:
|
|
matchLabels:
|
|
acme: solver
|
|
namespaces:
|
|
from: All
|
|
EOYAML
|