Production

tests/render.yml

@@ -13,6 +13,8 @@
         wikideck_image: "{{ render_case.image | default('registry.example.com/wikideck:1.0.0') }}"
         wikideck_name: "{{ render_case.name | default('wikideck') }}"
         wikideck_namespace: "{{ render_case.namespace | default('wikideck') }}"
+        wikideck_image_pull_policy: "{{ render_case.pull_policy | default('IfNotPresent') }}"
+        wikideck_pod_annotations: "{{ render_case.pod_annotations | default({}) }}"
         wikideck_peers: "{{ render_case.peers | default([]) }}"
         wikideck_allow_private_peers: "{{ render_case.allow_private | default(false) }}"
         wikideck_mainnet_launch: "{{ render_case.mainnet_launch | default('') }}"
@@ -84,6 +86,52 @@
         - label: exact mainnet launch configuration
           mainnet_launch: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
           risk_ack: operator-accepts-unaudited-risk
+        - label: latest private mainnet candidate public node
+          image: ericomeehan/wikideck:latest
+          pull_policy: Always
+          pod_annotations:
+            wikideck.eom.dev/image-id: docker-pullable://ericomeehan/wikideck@sha256:aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+          peers: [http://wikideck-peer-a.wikideck.svc.cluster.local:80, http://wikideck-peer-b.wikideck.svc.cluster.local:80]
+          allow_private: true
+          ingress: true
+          mainnet_launch: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+          risk_ack: operator-accepts-unaudited-risk
+          # Public HTTPS is needed for Wikipedia mining templates and statistics.
+          https_to:
+            - ipBlock:
+                cidr: 0.0.0.0/0
+                except: [10.0.0.0/8, 100.64.0.0/10, 127.0.0.0/8, 169.254.0.0/16, 172.16.0.0/12, 192.168.0.0/16]
+            - ipBlock:
+                cidr: "::/0"
+                except: ["::1/128", "fc00::/7", "fe80::/10"]
+          ingress_from:
+            - podSelector:
+                matchLabels:
+                  app.kubernetes.io/name: wikideck
+            - namespaceSelector:
+                matchLabels:
+                  kubernetes.io/metadata.name: ingress-nginx
+          peer_egress:
+            - to:
+                - podSelector:
+                    matchLabels:
+                      app.kubernetes.io/name: wikideck
+              ports: [{protocol: TCP, port: 3001}]
+        - label: latest private mainnet candidate internal peer
+          image: ericomeehan/wikideck:latest
+          pull_policy: Always
+          name: wikideck-peer-a
+          peers: [http://wikideck.wikideck.svc.cluster.local:80, http://wikideck-peer-b.wikideck.svc.cluster.local:80]
+          allow_private: true
+          mainnet_launch: aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
+          risk_ack: operator-accepts-unaudited-risk
+          https_to: []
+          peer_egress:
+            - to:
+                - podSelector:
+                    matchLabels:
+                      app.kubernetes.io/name: wikideck
+              ports: [{protocol: TCP, port: 3001}]
       loop_control:
         loop_var: render_case
         label: "{{ render_case.label }}"