skaffold.yaml

apiVersion: skaffold/v2alpha1
kind: Config
build:
  artifacts:
  - image: rode
  local:
    useBuildkit: true
deploy:
  helm:
    releases:
      - name: rode
        chartPath: helm-chart/rode
        skipBuildDependencies: true
        wait: true
        values:
          image: rode
        imageStrategy:
          helm: {}
portForward:
- resourceType: service
  resourceName: rode
  namespace: rode
  port: 443
  localPort: 9443
profiles:
- name: local
  activation:
    - kubeContext: docker-for-desktop
    - kubeContext: docker-desktop
  patches:
    - op: add
      path: /deploy/helm/releases/0/namespace
      value: rode
    - op: add
      path: /deploy/helm/releases/0/overrides
      value:
        service:
          type: NodePort
          nodePort: 31443
        grafeas:
          storageType: "memstore"
          service:
            type: NodePort
            nodePort: 30443
        localstack:
          enabled: true
          debug: true
          persistence:
            enabled: false
        extraEnv:
        - name: AWS_REGION
          value: us-east-1
        - name: AWS_ACCESS_KEY_ID
          value: fake
        - name: AWS_SECRET_ACCESS_KEY
          value: fake
        - name: AWS_SQS_ENDPOINT
          value: rode-localstack:4576
        - name: AWS_EVENTS_ENDPOINT
          value: rode-localstack:4587
        - name: OPA_TRACE
          value: "0"
# Deploy Rode without enforcer `skaffold run -p local,policy`
- name: policy
  patches:
  - op: replace
    path: /deploy/helm/releases/0/name
    value: rode-policy
  - op: replace
    path: /deploy/helm/releases/0/namespace
    value: rode-policy
  - op: add
    path: /deploy/helm/releases/0/overrides/attesters
    value:
      enabled: true
  - op: add
    path: /deploy/helm/releases/0/overrides/jetstream
    value:
      enabled: true
  - op: add
    path: /deploy/helm/releases/0/overrides/enforcer
    value:
      enabled: false
  - op: add
    path: /deploy/helm/releases/0/overrides/localstack
    value:
      enabled: false
# Deploy Rode with only enforcer `skaffold run -p local,enforcer`
- name: enforcer
  patches:
  - op: replace
    path: /deploy/helm/releases/0/name
    value: rode-enforcer
  - op: replace
    path: /deploy/helm/releases/0/namespace
    value: rode-enforcer
  - op: add
    path: /deploy/helm/releases/0/overrides/attesters
    value:
      enabled: false
  - op: add
    path: /deploy/helm/releases/0/overrides/enforcer
    value:
      enabled: true
  - op: replace
    path: /deploy/helm/releases/0/overrides/service/nodePort
    value: 31444
  - op: replace
    path: /deploy/helm/releases/0/overrides/grafeas/service/nodePort
    value: 31445
  - op: add
    path: /deploy/helm/releases/0/overrides/localstack
    value:
      enabled: false
  - op: add
    path: /deploy/helm/releases/0/overrides/eventStreamer
    value:
      type: jetstream
      endpoint: rode-policy-jetstream.rode-policy.svc.cluster.local
- name: production
  patches:
    - op: add
      path: /deploy/helm/flags
      value: 
        global:
          - '--tiller-namespace'
          - 'rode'
    - op: add
      path: /deploy/helm/releases/0/namespace
      value: rode
    - op: add
      path: /deploy/helm/releases/0/overrides
      value:
        image:
          pullPolicy: Always
        rbac:
          serviceAccountAnnotations:
              eks.amazonaws.com/role-arn: arn:aws:iam::489130170427:role/RodeServiceAccount