fixup! Improve helm chart allowing for lock of the worker image

This commit is contained in:
2025-01-13 14:19:24 +00:00
parent 5649c2863c
commit 7c634ba011
3 changed files with 21 additions and 25 deletions
+2 -2
View File
@@ -10,9 +10,9 @@ description: |
type: application type: application
version: 0.5.47 version: 0.5.48
appVersion: "0.5.47" appVersion: "0.5.48"
home: https://github.com/lukaszraczylo/kubernetes-images-sync-operator home: https://github.com/lukaszraczylo/kubernetes-images-sync-operator
+8 -8
View File
@@ -4,18 +4,18 @@ metadata:
name: {{ include "chart.fullname" . }}-sa name: {{ include "chart.fullname" . }}-sa
labels: labels:
control-plane: sa control-plane: sa
{{- include "chart.labels" . | nindent 4 }} {{- include "chart.labels" . | nindent 4 }}
spec: spec:
replicas: {{ .Values.sa.replicas }} replicas: {{ .Values.sa.replicas }}
selector: selector:
matchLabels: matchLabels:
control-plane: sa control-plane: sa
{{- include "chart.selectorLabels" . | nindent 6 }} {{- include "chart.selectorLabels" . | nindent 6 }}
template: template:
metadata: metadata:
labels: labels:
control-plane: sa control-plane: sa
{{- include "chart.selectorLabels" . | nindent 8 }} {{- include "chart.selectorLabels" . | nindent 8 }}
annotations: annotations:
kubectl.kubernetes.io/default-container: manager kubectl.kubernetes.io/default-container: manager
spec: spec:
@@ -30,9 +30,8 @@ spec:
fieldPath: spec.serviceAccountName fieldPath: spec.serviceAccountName
- name: KUBERNETES_CLUSTER_DOMAIN - name: KUBERNETES_CLUSTER_DOMAIN
value: {{ quote .Values.kubernetesClusterDomain }} value: {{ quote .Values.kubernetesClusterDomain }}
- name: WORKER_IMAGE image: {{ .Values.sa.manager.image.repository }}:{{ .Values.sa.manager.image.tag
value: {{ include "chart.workerImage" . }} | default .Chart.AppVersion }}
image: {{ .Values.images.operator.repository }}:{{ .Values.images.operator.tag | default .Chart.AppVersion }}
livenessProbe: livenessProbe:
httpGet: httpGet:
path: /healthz path: /healthz
@@ -47,7 +46,8 @@ spec:
initialDelaySeconds: 5 initialDelaySeconds: 5
periodSeconds: 10 periodSeconds: 10
resources: {{- toYaml .Values.sa.manager.resources | nindent 10 }} resources: {{- toYaml .Values.sa.manager.resources | nindent 10 }}
securityContext: {{- toYaml .Values.sa.manager.containerSecurityContext | nindent 10 }} securityContext: {{- toYaml .Values.sa.manager.containerSecurityContext | nindent
10 }}
securityContext: {{- toYaml .Values.sa.podSecurityContext | nindent 8 }} securityContext: {{- toYaml .Values.sa.podSecurityContext | nindent 8 }}
serviceAccountName: {{ include "chart.fullname" . }}-sa serviceAccountName: {{ include "chart.fullname" . }}-sa
terminationGracePeriodSeconds: 10 terminationGracePeriodSeconds: 10
+11 -15
View File
@@ -1,22 +1,18 @@
kubernetesClusterDomain: cluster.local kubernetesClusterDomain: cluster.local
images:
operator:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
tag: 0.5.47
worker:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-worker
tag: 0.5.47
sa: sa:
manager: manager:
args: args:
- --metrics-bind-address=:8443 - --metrics-bind-address=:8443
- --leader-elect - --leader-elect
- --health-probe-bind-address=:8081 - --health-probe-bind-address=:8081
containerSecurityContext: containerSecurityContext:
allowPrivilegeEscalation: false allowPrivilegeEscalation: false
capabilities: capabilities:
drop: drop:
- ALL - ALL
image:
repository: ghcr.io/lukaszraczylo/kubernetes-images-sync-operator
tag: 0.5.48
resources: resources:
limits: limits:
cpu: 500m cpu: 500m
@@ -31,8 +27,8 @@ sa:
annotations: {} annotations: {}
saMetricsService: saMetricsService:
ports: ports:
- name: https - name: https
port: 8443 port: 8443
protocol: TCP protocol: TCP
targetPort: 8443 targetPort: 8443
type: ClusterIP type: ClusterIP