Commit graph

7 commits

Author SHA1 Message Date
cc8f24e8e1 twitterchiver: add relatedfetcher, to fetch referenced media and tweets 2020-10-18 20:44:50 +01:00
38b2bb3516 docker-images: simplify a bit by decompressing at push time
This avoids Nix finding store paths in the output (because they're hidden), and
thus adding weird extraneous dependencies to the closure.
2020-10-18 13:59:31 +00:00
0fed7d1245 docker-images: add twitterchiver/viewer 2020-10-18 01:03:09 +01:00
6b84fe71f7 ci-root: add docker images to ci-root 2020-10-10 21:02:23 +00:00
7f99b80dbe maint/update_nixpkgs: init 2020-10-10 17:10:33 +00:00
04c3a8431b go/openshiftauth: init
This is a small "library" for wrapping binaries with magic OAuth authentication based on the automatically-injected k8s service account tokens and OpenShift's OAuth service.

There's an example of this deployed at https://example-lukegb-openshiftauth-test.apps.k8s.lukegb.tech/.

The main pieces of setup that need to happen is:

* Set "serviceAccount" in pod definition
* Add Route for pod
* Edit serviceaccount and add metadata.annotations, e.g.:
    serviceaccounts.openshift.io/oauth-redirectreference.first: >-
      {"kind":"OAuthRedirectReference","apiVersion":"v1","reference":{"kind":"Route","name":"example"}}
2020-10-04 14:38:56 +01:00
cb4100412a gitlab-ci: add docker-images push 2020-10-04 02:34:09 +01:00