mirror of
https://github.com/kemko/nomad.git
synced 2026-01-01 16:05:42 +03:00
f9cbaaf6c7
In #23966 we introduced an official Docker client and did not notice that in contrast to our previous 3rd party client, the official SDK PullOptions object expects a base64 encoded JSON with username and password, instead of username/ password pair.
56 lines
1.2 KiB
HCL
56 lines
1.2 KiB
HCL
# Copyright (c) HashiCorp, Inc.
|
|
# SPDX-License-Identifier: BUSL-1.1
|
|
|
|
# This job runs a docker task using a container stored in a private registry
|
|
# configured with credentials helper authentication. The registry.hcl job should
|
|
# be running and healthy before running this job.
|
|
|
|
variable "registry_address" {
|
|
type = string
|
|
description = "The HTTP address of the local registry"
|
|
default = "localhost"
|
|
}
|
|
|
|
variable "registry_port" {
|
|
type = number
|
|
description = "The HTTP port of the local registry"
|
|
default = "7511"
|
|
}
|
|
|
|
job "auth_static" {
|
|
type = "batch"
|
|
|
|
constraint {
|
|
attribute = "${attr.kernel.name}"
|
|
value = "linux"
|
|
}
|
|
|
|
group "helper" {
|
|
reschedule {
|
|
attempts = 0
|
|
unlimited = false
|
|
}
|
|
|
|
network {
|
|
mode = "host"
|
|
}
|
|
|
|
task "echo" {
|
|
driver = "docker"
|
|
|
|
config {
|
|
image = "${var.registry_address}:${var.registry_port}/docker.io/library/bash_auth_helper:private"
|
|
args = ["echo", "The credentials helper auth test is OK!"]
|
|
|
|
# usename and password come from [docker-credential-]test.sh found on
|
|
# $PATH as specified by "helper=test.sh" in plugin config
|
|
}
|
|
|
|
resources {
|
|
cpu = 100
|
|
memory = 64
|
|
}
|
|
}
|
|
}
|
|
}
|