New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
initContainer Resource Block: Fix #295 for merging #316
Conversation
…s Tanner <niklas.tanner@hotmail.com> Signed-off-by: ner <Niklas.Tanner@ti8m.ch>
Signed-off-by: Ashley Davis <ashley.davis@venafi.com>
/lgtm |
/approve |
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: SgtCoDFish The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
I tested it locally and it seems to work:
$ kubectl describe pod trust-manager-54c7cdf496-qlnjl
Name: trust-manager-54c7cdf496-qlnjl
Namespace: default
Priority: 0
Service Account: trust-manager
Node: kind-control-plane/172.18.0.2
Start Time: Wed, 06 Mar 2024 15:25:29 +0000
Labels: app=trust-manager
app.kubernetes.io/instance=tm
app.kubernetes.io/managed-by=Helm
app.kubernetes.io/name=trust-manager
app.kubernetes.io/version=v0.8.0
helm.sh/chart=trust-manager-v0.8.0
pod-template-hash=54c7cdf496
Annotations: <none>
Status: Pending
IP:
IPs: <none>
Controlled By: ReplicaSet/trust-manager-54c7cdf496
Init Containers:
cert-manager-package-debian:
Container ID:
Image: quay.io/jetstack/cert-manager-package-debian:20210119.0
Image ID:
Port: <none>
Host Port: <none>
SeccompProfile: RuntimeDefault
Args:
/copyandmaybepause
/debian-package
/packages
State: Waiting
Reason: PodInitializing
Ready: False
Restart Count: 0
Limits:
cpu: 100m
memory: 128Mi
Requests:
cpu: 100m
memory: 128Mi
Environment: <none>
Mounts:
/packages from packages (rw)
/var/run/secrets/kubernetes.io/serviceaccount from kube-api-access-nw5h7 (ro)
/lgtm
/approve
@@ -53,6 +53,17 @@ image: | |||
defaultPackage: | |||
# Whether to load the default trust package during pod initialization, and include it in main container args. This container enables the 'useDefaultCAs' source on Bundles. | |||
enabled: true | |||
# Kubernetes pod resource limits for default package init container. |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
# Kubernetes pod resource limits for default package init container. | |
# Kubernetes Pod resource requests and limits for the default trust package init container. |
The original text matches the documentation for the existing resources value, so happy if you prefer to keep it as-is for consistency
trust-manager/deploy/charts/trust-manager/values.yaml
Lines 106 to 116 in f728840
# Kubernetes pod resource limits for trust. | |
# | |
# For example: | |
# resources: | |
# limits: | |
# cpu: 100m | |
# memory: 128Mi | |
# requests: | |
# cpu: 100m | |
# memory: 128Mi | |
resources: {} |
Ah, too late! |
This PR fixes #295 so we can merge it ahead of a release. I cherry-picked the commit from #295 so that @niklastanner would still get credit for their contribution.
Since I want to release soon, I'm cherry-picking and fixing in my own PR so that we can move quickly!