admin/stonks-oracle
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

ci: add woodpecker Kyverno proxy CA policy with NO_PROXY for gRPC
ci/woodpecker/push/woodpecker Pipeline failed
Details
Build and Push / lint-and-test (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.adapters.broker_adapter name:broker-adapter]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.aggregation.worker name:aggregation]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.extractor.worker name:extractor]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.ingestion.worker name:ingestion]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.lake_publisher.worker name:lake-publisher]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.parser.worker name:parser]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.recommendation.worker name:recommendation]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:python -m services.scheduler.app name:scheduler]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:uvicorn services.api.app:app --host 0.0.0.0 --port 8000 name:query-api]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:uvicorn services.risk.app:app --host 0.0.0.0 --port 8000 name:risk]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:uvicorn services.symbol_registry.app:app --host 0.0.0.0 --port 8000 name:symbol-registry]) (push) Has been cancelled
Details
Build and Push / build-services (map[cmd:uvicorn services.trading.app:app --host 0.0.0.0 --port 8000 name:trading-engine]) (push) Has been cancelled
Details
Build and Push / build-dashboard (push) Has been cancelled
Details
Build and Push / build-superset (push) Has been cancelled
Details
Build and Push / integration-test (push) Has been cancelled
Details

Browse Source
This commit is contained in:
Celes Renata
2026-04-19 03:00:06 +00:00
parent 76dd58c1dc
commit 9e39d59afa
3 changed files with 47 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pipelines/woodpecker/kyverno-proxy-ca.yaml
+43
View File
@@ -0,0 +1,43 @@
apiVersion: kyverno.io/v1
kind: ClusterPolicy
metadata:
name: woodpecker-proxy-ca
annotations:
policies.kyverno.io/title: "Woodpecker Proxy CA Injection"
policies.kyverno.io/category: "Networking"
policies.kyverno.io/subject: "Pod"
spec:
rules:
- name: inject-ca-cert
match:
any:
- resources:
kinds:
- Pod
namespaces:
- woodpecker
mutate:
patchStrategicMerge:
spec:
containers:
- (name): "*"
env:
- name: HTTP_PROXY
value: "http://192.168.42.1:3128"
- name: HTTPS_PROXY
value: "http://192.168.42.1:3128"
- name: NO_PROXY
value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.svc,.cluster.local,woodpecker-server"
- name: no_proxy
value: "10.0.0.0/8,192.168.0.0/16,127.0.0.1,localhost,.svc,.cluster.local,woodpecker-server"
- name: SSL_CERT_FILE
value: "/etc/ssl/certs/proxy-ca.crt"
volumeMounts:
- name: proxy-ca
mountPath: /etc/ssl/certs/proxy-ca.crt
subPath: ca.crt
readOnly: true
volumes:
- name: proxy-ca
configMap:
name: proxy-ca-cert