mirror of
https://github.com/NVIDIA/OpenShell.git
synced 2026-10-26 06:52:57 +08:00
Drew Newberry
f97270f988
* refactor(docker): rename server image to gateway Rename Dockerfile.server to Dockerfile.gateway and update all image references from openshell/server to openshell/gateway across Helm charts, Kubernetes manifests, mise tasks, build/deploy scripts, CI workflows, and documentation. The underlying Rust binary (navigator-server) is unchanged -- this rename only affects the Docker image name and Dockerfile. * fix: catch remaining server->gateway references in docs and comments
43 lines
1.6 KiB
YAML
43 lines
1.6 KiB
YAML
# SPDX-FileCopyrightText: Copyright (c) 2025-2026 NVIDIA CORPORATION & AFFILIATES. All rights reserved.
|
|
# SPDX-License-Identifier: Apache-2.0
|
|
|
|
# HelmChart CR for auto-deploying OpenShell via k3s Helm controller
|
|
# This manifest is placed in /var/lib/rancher/k3s/server/manifests/ and
|
|
# automatically installed when the k3s cluster starts.
|
|
#
|
|
# The chart tarball is served from the k3s static file server at:
|
|
# https://<k8s-api>/static/charts/openshell-0.1.0.tgz
|
|
#
|
|
# Component images are pulled at runtime from ghcr.io.
|
|
# Authentication is configured via /etc/rancher/k3s/registries.yaml
|
|
# (containerd-level) and a Kubernetes imagePullSecret (pod-level),
|
|
# both generated by the bootstrap process.
|
|
|
|
apiVersion: helm.cattle.io/v1
|
|
kind: HelmChart
|
|
metadata:
|
|
name: openshell
|
|
namespace: kube-system
|
|
spec:
|
|
chart: https://%{KUBERNETES_API}%/static/charts/openshell-0.1.0.tgz
|
|
targetNamespace: openshell
|
|
createNamespace: true
|
|
valuesContent: |-
|
|
chartChecksum: __CHART_CHECKSUM__
|
|
image:
|
|
repository: ghcr.io/nvidia/openshell/gateway
|
|
tag: latest
|
|
pullPolicy: Always
|
|
server:
|
|
sandboxImage: ghcr.io/nvidia/openshell/sandbox:latest
|
|
sshGatewayHost: __SSH_GATEWAY_HOST__
|
|
sshGatewayPort: __SSH_GATEWAY_PORT__
|
|
sshHandshakeSecret: __SSH_HANDSHAKE_SECRET__
|
|
grpcEndpoint: "https://openshell.openshell.svc.cluster.local:8080"
|
|
disableGatewayAuth: __DISABLE_GATEWAY_AUTH__
|
|
disableTls: __DISABLE_TLS__
|
|
tls:
|
|
certSecretName: openshell-server-tls
|
|
clientCaSecretName: openshell-server-client-ca
|
|
clientTlsSecretName: openshell-client-tls
|