larstobi

trigger:
- main

pool:
  vmImage: 'ubuntu-latest'

stages:
- stage: Build
  displayName: "Build Stage"
  jobs:

larstobi

- task: Bash@3
  inputs:
    targetType: 'inline'
    script: |
      # Variables
      ORGANIZATION="your_organization"
      PROJECT="your_project"
      FEED_ID="your_feed_id"
      PACKAGE_NAME="your_package_name"
      API_VERSION="7.1-preview.1"

larstobi

trigger: none

pool:
  vmImage: 'ubuntu-latest'

steps:
- script: |
    set -e
    # Variables
    FEED_NAME="MyFeed"

larstobi

config:
  webhooks:
    # Exclude namespaces
    - namespaceSelector:
        matchExpressions:
        - key: kubernetes.io/metadata.name
          operator: NotIn
          values:
            # System namespaces
            - kyverno

larstobi

if echo | openssl s_client -servername example.com -connect example.com:443 2>/dev/null | \
   openssl x509 -noout -checkend $((30*24*60*60)) >/dev/null; then
    echo "Certificate is valid for more than 30 days."
else
    echo "Certificate expires in less than 30 days!"
fi

larstobi

stages:
  - ${{ each environment in parameters.environments }}:
    - stage: ${{ environment.name }}
      jobs:
        - ${{ each app in parameters.apps }}:
          - job: deploy-${{ environment.name }}-${{ app.name }}
            variables:
              registry: ${{ environment.registry }}
              helmParams: ${{ replace(app.helmParamsTemplate, '{registry}', environment.registry) }}
            steps:

larstobi

# values.yaml

# Override the registry for the main Kyverno image (Admission Controller)
image:
  registry: myprivateregistry
  repository: kyverno/kyverno
  tag: v1.10.0  # Replace with your desired version

# Override the registry for the Init Container image
initContainerImage:

larstobi

# build-go-app-template.yml

# Template Parameters
parameters:
  - name: repoUrl
    type: string
    default: 'https://github.com/your/default/repo.git'
    displayName: 'Repository URL'

  - name: goVersion

larstobi

kind: Cluster
apiVersion: kind.x-k8s.io/v1alpha4
containerdConfigPatches:
  - |-
    [plugins."io.containerd.grpc.v1.cri".registry]
      [plugins."io.containerd.grpc.v1.cri".registry.tls]
        ca_file = "/etc/ssl/certs/ca-certificates.crt"
nodes:
  - role: control-plane
    extraMounts:

larstobi

trigger:
- main

pool:
  vmImage: 'ubuntu-latest'

variables:
  # Azure service principal credentials
  clientId: '<Your-Client-ID>'
  clientSecret: '<Your-Client-Secret>' # Mark this as secret