Commit Graph

5 Commits

Author SHA1 Message Date
Somtochi Onyekwere 8c246a5450 Set digests in image override
Signed-off-by: Somtochi Onyekwere <somtochionyekwere@gmail.com>
2022-05-19 13:15:11 +01:00
Stefan Prodan cafbe253a1
Disallow remote bases usage in Kustomize overlays
Add an optional flag for disabling remote bases. While the `--no-remote-bases` is set to `false` by default, Flux users are encouraged to enable it on production system for security and performance reasons. Using Kustomize remote bases means that kustomize-controller must clone the remote repositories on every reconciliation instead of using the source-controller artifacts cache. Allowing remote bases on multi-tenant clusters, means platform admins have no control over which repositories make up the desired state.

Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-27 14:54:43 +03:00
Hidde Beydals 6854ff519c generator: recover from kustomize build panics
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-04-27 12:11:40 +02:00
Stefan Prodan d1a686235c
Add test for build panic
Signed-off-by: Stefan Prodan <stefan.prodan@gmail.com>
2022-04-27 12:58:56 +03:00
Hidde Beydals 880587f20d generator: ensure remote build dirs can be reached
Signed-off-by: Hidde Beydals <hello@hidde.co>
2022-04-20 17:12:33 +02:00