mirror of
https://github.com/hanzoai/cd.git
synced 2026-10-30 14:56:45 +00:00
zeekay
0d4229f4af
The release Dockerfile's shipped binaries and symlinks were already hanzocd-*, but the build stages feeding them weren't: stage names (argocd-base/-ui/-build), the in-container build user/group/home (argocd, uid 999 — renamed in place, same uid so no ownership fallout), and the GOPATH-style build WORKDIR (.../argoproj/argo-cd) all still carried the pre-fork name. Same in Dockerfile.dev, hack/Dockerfile.dev-tools, and ui/scripts/build_docker.sh. The Makefile and both Procfiles (root + test/container) had the matching half of this: CD_BINARY_NAME values that don't match any case in cmd/main.go's dispatch switch (all hanzocd-*), a --argocd-repo-server flag no command registers (the real one is --cd-repo-server), a `kubectl get secret argocd-redis` that can never succeed (the Secret the redis manifest actually mounts is hanzocd-redis), `kubectl create ns argocd`/argocd-e2e(-external(-2)) that don't match the namespaces test/e2e/fixture actually uses (cd/cd-e2e/cd-e2e-external(-2)), a TEST_MODULE filter matching the pre-fork gitops-engine import path only, and IMAGE_REGISTRY/IMAGE_NAMESPACE/IMAGE_REPOSITORY defaults that silently point an override-less `make image` at quay.io/argoproj/argocd instead of ghcr.io/hanzoai/cd. Also folded three different stale /tmp scratch-dir spellings (argocd-local, argocd-e2e-env, argo-e2e) into the one each already-correct sibling file used, so Procfile/Makefile/reaper.sh/ start-git.sh/fixture.go/nginx.conf all agree again — see LLM.md for the full map, it's not worth re-deriving twice. Deleted hack/bump-major-version.sh: it bumps a github.com/.../vN import-path suffix, a scheme this module has never used (no /v2, /v3 — we don't bump Go majors) and nothing else in the repo references it.
134 lines
3.7 KiB
Nginx Configuration File
134 lines
3.7 KiB
Nginx Configuration File
error_log /dev/stdout info;
|
|
worker_processes 1;
|
|
|
|
events { worker_connections 1024; }
|
|
|
|
http {
|
|
|
|
server {
|
|
listen 0.0.0.0:9081;
|
|
|
|
root /tmp/cd-e2e;
|
|
|
|
location ~ ^/helm-repo/(.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
alias /app/config/testdata/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e/testdata.git/helm-repo/(.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
alias /tmp/cd-e2e/testdata.git/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e(/.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend;
|
|
include /etc/nginx/fastcgi_params;
|
|
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
|
fastcgi_param GIT_PROJECT_ROOT /tmp/cd-e2e;
|
|
fastcgi_param PATH_INFO $1;
|
|
|
|
# Hard-coded credentials for Git in this case
|
|
fastcgi_param REMOTE_USER "admin";
|
|
fastcgi_pass unix:/var/run/fcgiwrap.socket;
|
|
}
|
|
}
|
|
|
|
server {
|
|
listen 9080;
|
|
listen 0.0.0.0:9443 ssl http2;
|
|
|
|
auth_basic "Restricted";
|
|
auth_basic_user_file .htpasswd;
|
|
root /tmp/cd-e2e;
|
|
|
|
ssl_certificate ../certs/cd-test-server.crt;
|
|
ssl_certificate_key ../certs/cd-test-server.key;
|
|
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
|
|
|
|
location ~ /cd-e2e/testdata.git/helm-repo(/.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
root /tmp/;
|
|
}
|
|
|
|
location ~ /helm-repo/(.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
alias /app/config/testdata/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e/testdata.git/helm-repo/(.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
alias /tmp/cd-e2e/testdata.git/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e(/.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend;
|
|
include /etc/nginx/fastcgi_params;
|
|
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
|
fastcgi_param GIT_PROJECT_ROOT /tmp/cd-e2e;
|
|
fastcgi_param PATH_INFO $1;
|
|
|
|
# Forward REMOTE_USER as we want to know when we are authenticated
|
|
fastcgi_param REMOTE_USER $remote_user;
|
|
fastcgi_pass unix:/var/run/fcgiwrap.socket;
|
|
}
|
|
}
|
|
|
|
# server block for strict verification of client certs
|
|
server {
|
|
listen 0.0.0.0:9444 ssl http2;
|
|
|
|
auth_basic "Restricted";
|
|
auth_basic_user_file .htpasswd;
|
|
root /tmp/cd-e2e;
|
|
|
|
ssl_certificate ../certs/cd-test-server.crt;
|
|
ssl_certificate_key ../certs/cd-test-server.key;
|
|
ssl_client_certificate ../certs/cd-test-ca.crt;
|
|
ssl_verify_client on;
|
|
ssl_protocols TLSv1.2 TLSv1.1 TLSv1;
|
|
|
|
# /helm-repo is used by cluster-e2e tests only
|
|
location ~ ^/helm-repo/(.*) {
|
|
client_max_body_size 0;
|
|
alias /app/config/testdata/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e/testdata.git/helm-repo/(.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
alias /tmp/cd-e2e/testdata.git/helm-repo/$1;
|
|
}
|
|
|
|
location ~ /cd-e2e(/.*) {
|
|
# Set chunks to unlimited, as the body's can be huge
|
|
client_max_body_size 0;
|
|
|
|
fastcgi_param SCRIPT_FILENAME /usr/lib/git-core/git-http-backend;
|
|
include /etc/nginx/fastcgi_params;
|
|
fastcgi_param GIT_HTTP_EXPORT_ALL "";
|
|
fastcgi_param GIT_PROJECT_ROOT /tmp/cd-e2e;
|
|
fastcgi_param PATH_INFO $1;
|
|
|
|
# Forward REMOTE_USER as we want to know when we are authenticated
|
|
fastcgi_param REMOTE_USER $remote_user;
|
|
fastcgi_pass unix:/var/run/fcgiwrap.socket;
|
|
}
|
|
|
|
}
|
|
}
|