From e097ca8945ae019a49a40f5ba4a8284f70452836 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E2=80=9CNaeel=E2=80=9D?= <tazet@narod.ru>
Date: Sun, 8 Mar 2026 11:15:48 +0400
Subject: [PATCH] fix: imagePullSecrets, SLESS_ENTRYPOINT, registry secret
 propagation
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- function_controller: добавить RegistrySecret + OperatorNamespace, копировать
  sless-registry-auth в sless-fn-<ns>, выставлять imagePullSecrets в Deployment,
  также обновлять imagePullSecrets при reconcile
- functionjob_controller: fnEnvVars включает SLESS_ENTRYPOINT, runner читает его
- server.js + server.py: читать SLESS_ENTRYPOINT вместо hardcoded handler.js/py
- rbac.yaml: добавить права на secrets
- operator.yaml: v0.1.8
- main.go: передать RegistrySecret + OperatorNamespace в FunctionReconciler
---
 hello-node/handler-http.zip                   | Bin 0 -> 409 bytes
 hello-node/handler-job.zip                    | Bin 0 -> 489 bytes
 hello-node/job.tf                             |   2 +-
 .../terraform.tfstate.1772954131.backup       | 168 ++++++++++++++++++
 4 files changed, 169 insertions(+), 1 deletion(-)
 create mode 100644 hello-node/handler-http.zip
 create mode 100644 hello-node/handler-job.zip
 create mode 100644 hello-node/terraform.tfstate.1772954131.backup

diff --git a/hello-node/handler-http.zip b/hello-node/handler-http.zip
new file mode 100644
index 0000000000000000000000000000000000000000..c0c865e7dbee49c0aeca3ff2606cb8508dd64841
GIT binary patch
literal 409
zcmWIWW@Zs#-~d7f2E{HQ0SEj*Rz_l8N=|B#ZbnH-fnHXz&bjkmOo0-tAO6}L<zy0_
zC280Zkn?s^>jfkBy%~n*PVC*T5%R&GCGg=g*M3FkM<G4?4*iT<sNOj<N^akM%bI=t
zQCrI%h4tTkwes<A36?<pkXy15)}Pk#)}`fVY`y(_oz00!lKY=bT)E~|!Xer1J}Jkx
z+7zDc)j6>D%nYNG&1X^%wrHBi*_|n$S$tl0|I^m!$bXYXQ}~3nlJ(Z^d-Z*)n`OFd
zwYqlNnI|*nPY6%@qahZQwrNF0-!AE+x1`>`Pd5>q@q0!0rd^>E*Dk1R+sMpt*TP6F
z(BO=3;g>FhnF~q;UvCJ{67kcnUaZ_>7;=oIHq?Fj(nAJzhaOt!`|w-MFq@Nk_$My|
z!~g#Q-s~JH<x@g985tPNfjGdMkx7IZ5st`mpm2nNC5<2!TBrtiv$BDN8G+CiNV@?I
HWMBXQ%Qlwx

literal 0
HcmV?d00001

diff --git a/hello-node/handler-job.zip b/hello-node/handler-job.zip
new file mode 100644
index 0000000000000000000000000000000000000000..283b2cfcc0836f0d39d05d0e193684e9c55150e5
GIT binary patch
literal 489
zcmWIWW@Zs#-~d7f2E{HQ0SA0QRz_l8N=|B#ZdQJhURH6;1joF~4ic^3?T$vPB|T~p
z5y%qJ3kp3kvyUUtYMqT4)7GgrEC-pE<V6(ltTyS&6nf6}em|4C<F-`6QtPVszwiAy
ztaxnk$JGa4q!?7m^0d!z|CW?F>7dfQR_^xwKmE@v3OUdI$u;cG=fHiNrtA*xm@Zm=
zXXBKZu$a^7C(Nfk+L_8Y?M?&xI@Ra1_;q$XpC?+snW<doNO$_lYO%!Jr}`glHarTe
zE4cjV$Z6Rlhjn|4^Tj{%*oM`tFr2jcL7V9Nr`G=)q{VDbc-hGR<~?6yV8)wUW@+sC
zyE8e{yyWa!rtiL%=_g}t#naD=9^+Ey(ie%F$Nubb=$s{bIr`0-O5aareUWmPzihsP
zkHO*iwWTlSTvnIP%PT0ev*g<KM(DDhoZ2&`%ge5JZwcGLYkEoQe1fRk-)+-pn0V`~
z`*<%d^=0PuP*X3*<1_#Mm(c62oqn#+nln%R;C^5*|NkH0&Cc<GW#y!3Mh1pwKpf!B
n$Rxsyh!|u!P{hE%l12~<HJSpvS=m6Mj6i4uq^ASTV_*OP(C)hG

literal 0
HcmV?d00001

diff --git a/hello-node/job.tf b/hello-node/job.tf
index 8687f77..5692465 100644
--- a/hello-node/job.tf
+++ b/hello-node/job.tf
@@ -34,7 +34,7 @@ resource "sless_job" "hello_run" {
   name             = "hello-run"
   function         = sless_function.hello_job.name
   event_json       = jsonencode({ numbers = [1, 2, 3, 4, 5] })
-  wait_timeout_sec = 120
+  wait_timeout_sec = 600
   run_id           = 1
 }
 
diff --git a/hello-node/terraform.tfstate.1772954131.backup b/hello-node/terraform.tfstate.1772954131.backup
new file mode 100644
index 0000000..f804125
--- /dev/null
+++ b/hello-node/terraform.tfstate.1772954131.backup
@@ -0,0 +1,168 @@
+{
+  "version": 4,
+  "terraform_version": "1.12.2",
+  "serial": 22,
+  "lineage": "d12fc078-7aee-39d1-629d-358c3c135820",
+  "outputs": {
+    "trigger_url": {
+      "value": "https://sless-api.kube5s.ru/fn/default/hello-http",
+      "type": "string"
+    }
+  },
+  "resources": [
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "handler_http",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "16650367fe534ed2feb81be322fd4a9d80f77388",
+            "output_base64sha256": "/fY9RigPle6Yx9R9B9yEYmi5+jgL6PV3fmPlVK5ia3g=",
+            "output_base64sha512": "yKvMpTCZBynqV3LlE3wTZGMIS0EG0tY8LE+1iIETCuWGoc+bv4+Hlnve14bBWGOnvQHdqE84y4UDi8Pmnz1A2A==",
+            "output_file_mode": null,
+            "output_md5": "a74ae4ccb7337659439eacaf1831194d",
+            "output_path": "./handler-http.zip",
+            "output_sha": "16650367fe534ed2feb81be322fd4a9d80f77388",
+            "output_sha256": "fdf63d46280f95ee98c7d47d07dc846268b9fa380be8f5777e63e554ae626b78",
+            "output_sha512": "c8abcca530990729ea5772e5137c136463084b4106d2d63c2c4fb58881130ae586a1cf9bbf8f87967bded786c15863a7bd01dda84f38cb85038bc3e69f3d40d8",
+            "output_size": 409,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": null,
+            "source_file": "./code/handler-http.js",
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "data",
+      "type": "archive_file",
+      "name": "handler_job",
+      "provider": "provider[\"registry.terraform.io/hashicorp/archive\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "exclude_symlink_directories": null,
+            "excludes": null,
+            "id": "27327ec4d4ab6d5d6fdc3f82a5ab768c68146a66",
+            "output_base64sha256": "cI+JbO5lWW+3qo4DSDg5HXLQS7EXHze2W6vGCNk0iOI=",
+            "output_base64sha512": "4D841Y2OT5EVlRbi/NwGh7SHnRzKgZ6AF1Rx+AIspPKthrbsZi8oGY6qLYe/NJ4t46j1Y8WkZ4tJ6iBpL5g7uw==",
+            "output_file_mode": null,
+            "output_md5": "2c5c498c77ec002df7cbeac94f626af8",
+            "output_path": "./handler-job.zip",
+            "output_sha": "27327ec4d4ab6d5d6fdc3f82a5ab768c68146a66",
+            "output_sha256": "708f896cee65596fb7aa8e034838391d72d04bb1171f37b65babc608d93488e2",
+            "output_sha512": "e03f38d58d8e4f91159516e2fcdc0687b4879d1cca819e80175471f8022ca4f2ad86b6ec662f28198eaa2d87bf349e2de3a8f563c5a4678b49ea20692f983bbb",
+            "output_size": 489,
+            "source": [],
+            "source_content": null,
+            "source_content_filename": null,
+            "source_dir": null,
+            "source_file": "./code/handler-job.js",
+            "type": "zip"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "hello_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "a74ae4ccb7337659439eacaf1831194d",
+            "code_path": "./handler-http.zip",
+            "entrypoint": "handler-http.handle",
+            "env_vars": null,
+            "image_ref": "pearlharbor.registryk8s.services.ngcloud.ru/sless/sless-default-hello-http:latest",
+            "memory_mb": 128,
+            "name": "hello-http",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "nodejs20",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.handler_http"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_function",
+      "name": "hello_job",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "build_timeout_sec": 300,
+            "code_hash": "2c5c498c77ec002df7cbeac94f626af8",
+            "code_path": "./handler-job.zip",
+            "entrypoint": "handler-job.handle",
+            "env_vars": null,
+            "image_ref": "pearlharbor.registryk8s.services.ngcloud.ru/sless/sless-default-hello-job:latest",
+            "memory_mb": 128,
+            "name": "hello-job",
+            "namespace": "default",
+            "phase": "Ready",
+            "runtime": "nodejs20",
+            "timeout_sec": 30
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.handler_job"
+          ]
+        }
+      ]
+    },
+    {
+      "mode": "managed",
+      "type": "sless_trigger",
+      "name": "hello_http",
+      "provider": "provider[\"terra.k8c.ru/naeel/sless\"]",
+      "instances": [
+        {
+          "schema_version": 0,
+          "attributes": {
+            "active": true,
+            "enabled": true,
+            "function": "hello-http",
+            "name": "hello-http-trigger",
+            "namespace": "default",
+            "schedule": null,
+            "type": "http",
+            "url": "https://sless-api.kube5s.ru/fn/default/hello-http"
+          },
+          "sensitive_attributes": [],
+          "identity_schema_version": 0,
+          "dependencies": [
+            "data.archive_file.handler_http",
+            "sless_function.hello_http"
+          ]
+        }
+      ]
+    }
+  ],
+  "check_results": null
+}