Dustin C. Hatch
5f85a5a4fe
In order to automate certificate issuance and renewal for Raspberry Pi devices, we need aarch64 builds of the `sshca` tool. Using the `matrix` feature of Jenkins pipelines lets us reuse the same stage definition for building the client on both platforms. Unfortunately, the `matrix` block has to encompass the server stage as well, as `matrix` cannot be nested below `parallel`, and we don't want to build the server and clients sequentially. This makes the code a bit less clear, as the server and client stages are now conditional based on the matrix intersection, but it is cleaner than duplicating the entire client stage.
21 lines
421 B
YAML
21 lines
421 B
YAML
spec:
|
|
containers:
|
|
- name: fedora
|
|
image: registry.fedoraproject.org/fedora:38
|
|
command:
|
|
- cat
|
|
stdin: true
|
|
tty: true
|
|
volumeMounts:
|
|
- mountPath: /etc/ssh/ssh_known_hosts
|
|
name: ssh-known-hosts
|
|
subPath: ssh_known_hosts
|
|
hostUsers: false
|
|
tolerations:
|
|
- key: du5t1n.me/machine
|
|
value: raspberrypi
|
|
volumes:
|
|
- name: ssh-known-hosts
|
|
configMap:
|
|
name: ssh-known-hosts
|