fixup! Improve helm chart allowing for lock of the worker image

This commit is contained in:
2025-01-13 14:19:24 +00:00
parent 5649c2863c
commit 7c634ba011
3 changed files with 21 additions and 25 deletions
+2 -2
View File
@@ -10,9 +10,9 @@ description: |
type: application
version: 0.5.47
version: 0.5.48
appVersion: "0.5.47"
appVersion: "0.5.48"
home: https://github.com/lukaszraczylo/kubernetes-images-sync-operator
+8 -8
View File
@@ -4,18 +4,18 @@ metadata:
name: {{ include "chart.fullname" . }}-sa
labels:
control-plane: sa
{{- include "chart.labels" . | nindent 4 }}
{{- include "chart.labels" . | nindent 4 }}
spec:
replicas: {{ .Values.sa.replicas }}
selector:
matchLabels:
control-plane: sa
{{- include "chart.selectorLabels" . | nindent 6 }}
{{- include "chart.selectorLabels" . | nindent 6 }}
template:
metadata:
labels:
control-plane: sa
{{- include "chart.selectorLabels" . | nindent 8 }}
{{- include "chart.selectorLabels" . | nindent 8 }}
annotations:
kubectl.kubernetes.io/default-container: manager
spec:
@@ -30,9 +30,8 @@ spec:
fieldPath: spec.serviceAccountName
- name: KUBERNETES_CLUSTER_DOMAIN
value: {{ quote .Values.kubernetesClusterDomain }}
- name: WORKER_IMAGE
value: {{ include "chart.workerImage" . }}
image: {{ .Values.images.operator.repository }}:{{ .Values.images.operator.tag | default .Chart.AppVersion }}
image: {{ .Values.sa.manager.image.repository }}:{{ .Values.sa.manager.image.tag
| default .Chart.AppVersion }}
livenessProbe:
httpGet:
path: /healthz
@@ -47,7 +46,8 @@ spec:
initialDelaySeconds: 5
periodSeconds: 10
resources: {{- toYaml .Values.sa.manager.resources | nindent 10 }}
securityContext: {{- toYaml .Values.sa.manager.containerSecurityContext | nindent 10 }}
securityContext: {{- toYaml .Values.sa.manager.containerSecurityContext | nindent
10 }}
securityContext: {{- toYaml .Values.sa.podSecurityContext | nindent 8 }}
serviceAccountName: {{ include "chart.fullname" . }}-sa
terminationGracePeriodSeconds: 10
terminationGracePeriodSeconds: 10
+11 -15
View File
@@ -1,22 +1,18 @@
kubernetesClusterDomain: cluster.local
images:
operator:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
tag: 0.5.47
worker:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-worker
tag: 0.5.47
sa:
manager:
args:
- --metrics-bind-address=:8443
- --leader-elect
- --health-probe-bind-address=:8081
- --metrics-bind-address=:8443
- --leader-elect
- --health-probe-bind-address=:8081
containerSecurityContext:
allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
- ALL
image:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
tag: 0.5.48
resources:
limits:
cpu: 500m
@@ -31,8 +27,8 @@ sa:
annotations: {}
saMetricsService:
ports:
- name: https
port: 8443
protocol: TCP
targetPort: 8443
- name: https
port: 8443
protocol: TCP
targetPort: 8443
type: ClusterIP