FAQ
Last updated
Was this helpful?
Last updated
Was this helpful?
You will have to use the module-level directive to specify which files belong to each module. You will also have to provide the path to the Dockerfile with the directive.
If the module only has a Dockerfile but no other files, say because it's a 3rd party image, you should set include: []
.
See of our docs for more.
.gitignore
the .garden
dir?Yes.
You can use the disabled
field to disable , , , and .
image
field in container
modules? Is it for pulling or publishing images?Both, actually.
When building: If the image
field is specified and Garden can't find a Dockerfile for the module, Garden will use that image when deploying the module. If there is a Dockerfile, Garden will build the image from it, regardless of whether or not the image
field is specified.
When publishing: If the image
field is specified and the module has a Dockerfile, Garden will build the image from the Dockerfile and publish it to the URL specified in the image
field. If there's no Dockerfile, the publish
command will fail.
We aim to change to this behavior and make it more user-friendly with our next major release.
include
/exclude
fields? How are they different from the project-level module.include/module.exclude
fields? What about ignore files?We recommend using the Terraform module for cloud services that are shared by your team.
You can also deploy kubernetes
and helm
modules to their own namespaces.
Alternatively you can hoist your garden.yml
file so that it is at the same level or parent to all relevant build context and use the include
field.
v-<something>
versions mean, and why are they sometimes different between building and deploying?You may notice that a build version (e.g. an image tag for a container
module) is generally different from the version of a service defined in the same module. This is because the service version also factors in the runtime configuration for that service, which often differs between environments, but we don't want those changes to require a rebuild of the container image.
No, only modules can be build dependencies and runtime outputs come from tasks, tests, and services.
Set the log-level to verbose
or higher. For example:
Dockerfiles need to be at the same level as the garden.yml
file for the respective module, or in a child directory.
You can always hoist the garden.yml
file to the same level as the Dockerfile and use the include
directive to tell Garden what other files belong to the module. For example, if you have the following directory structure:
You can set your garden.yml
file at the root and define your modules likes so:
Note that you can put multiple Garden configuration files in the same directory, e.g. project.garden.yml
, api.garden.yml
and frontend.garden.yml
.
You can use the dockerfile
field. For example:
docker-daemon
instances for more build concurrency?Not currently. Besides, multiple Docker daemons would not be able to share image layer caches.
garden-system
namespace?Please do not delete the garden-system
namespace directly, because Kubernetes may fail to remove persistent volumes. Instead, use this command:
It removes all cluster-wide Garden services.
Use this command:
It's on our roadmap to automate this.
We've been pondering this, but there are a lot of variants to consider. The key issue is really that the notion of "first time" is kind of undefined as things stand.
So what we generally do is to make sure tasks are idempotent and exit early if they shouldn't run again. But that means the process still needs to be started, which is of course slower than not doing it at all.
It is, which is why we recommend that tasks are written to be idempotent. Tasks by nature don’t really have a status check, unlike services.
This is intentional, we don't re-run tasks on file watch events. We debated this behavior quite a bit and ultimately opted not to run task dependencies on every watch event.
garden deploy
or garden dev
?The task result is likely cached. Garden won't run tasks with cached results unless cacheResult: false
is set on the task definition.
You can also run it manually with:
This will run the task even if the result is cached.
Garden stores the task results as a ConfigMap under the <project-name>--metadata
namespace. You can delete them manually with this command:
You can also run it manually with:
This will run the task even if the result is cached.
garden test
and garden run test
The garden run test
command runs a single test in interactive mode regardless of whether or not it's cached. Interactive mode means that the output is streamed to the screen immediately and you can interact with it if applicable.
We plan on making --interactive=false
the default with our next major release.
buildArgs
?Also note that secrets as buildArgs
are considered a bad practice and a security risk.
Garden interfaces with your cluster via kubectl
and by using the Kubernetes APIs directly and should therefore work with all Kubernetes clusters that implement these. Garden is committed to supporting the latest six stable versions of Kubernetes.
container
modules (e.g. annotations and labels)?helm
module type over container
in terms of features?To Garden, a single Helm chart is a single "unit of deployment", which echoes the Garden notion of "service".
Therefore, a Helm chart with multiple deployments will only show up as a single service in Garden. You can, of course, deploy it with Garden, but it doesn't map as naturally to Garden services. This means that service-level functionality such as hot-reloading and getting service logs won't work as expected.
That said, a single Helm module can have multiple container modules as build dependencies and refer to the resulting images. So it should work just fine, but you'll have a coarser granularity when it comes to deploying them.
Unfortunately it's currently not feasible to support hot reloading for OpenFaaS, since it would require quite a lot of upstream work in OpenFaaS itself.
We're exploring how we can release it incrementally. Please let us know if this is something you're interested in.
Garden also optionally installs Nginx. The local-kubernetes
provider defaults to installing Nginx, but the (remote) kubernetes
provider does not install it by default.
Furthermore, the openfaas
provider installs some components necessary for OpenFaas to work.
*.local.demo.garden
domain?The *.local.demo.garden
domain resolves to 127.0.0.1 via our DNS provider for convenience. If you want to use a different hostname for local development, you’ll have to add the corresponding entry to your hosts file.
Garden is currently in use by many teams. We don’t have a set date or plan to label it as 1.0, but we don't expect to do it anytime soon. For comparison, very widely used tools like Terraform are still not at 1.0.
Garden is not currently designed to work in air-gapped environments This would require a fair amount of workarounds, unfortunately.
Read all about it in of our docs.
You can use the of the build.dependencies[]
field for that. See e.g. .
See this for more discussion on the two approaches.
These are the Garden versions that are computed for each node in the Stack Graph at runtime, based on source files and configuration for each module, service, task and test. See for more information about how these work and how they're used.
Use the .
See .
If you need the Dockerfile outside of the module root because you want to share it with other modules, you should consider having a single base image instead and then let each module have its own Dockerfile that's built on the base image. See the for an example of this.
See .
Use the module-level .
See also the for an example of this.
You can, however, run multiple in parallel. In some scenarios, that may scale better.
See of our docs.
See of our docs.
The garden test
command can run all your tests, or a subset of your tests, and has a --watch
flag. It won't re-run tests that are cached unless the --force
flag is set and it won't print the output unless the test fails. for the synopsis and examples.
Note that due to a , Garden can't copy artifacts for tests in interactive mode. You can disable it by setting --interactive false
. for the full synopsis.
See of our docs.
You'll need to use the or module types for that. Here's the official for mounting secrets as files.
No, Kubernetes secrets can only be used at runtime, by referencing them in the environment
field of tasks
, services
and tests
. See of our docs for more.
No, secrets have to be in the same namespace as the project. This is how Kubernetes secrets are designed, see .
See of our docs.
You can generate the files via a task, store them as artifacts, and copy them from the local artifacts directory. of this.
You can also use the module type to store data and share it across modules. See of our docs for more.
You can set annotations on ingresses under the .
No, you have to use the module type for that.
The components installed when using the remote building functionality are discussed in the .
Of course, we use Garden to install these components, and you’ll find the Garden modules for them in under kubernetes/system
and openfaas/system
.
No, it doesn't. See above for accessing files that are generated at runtime.
We have a team of people working on it full-time, and we make it a priority to address all non-trivial bugs. We’re also happy to help out and answer questions via .