fix: convert walkers to cron jobs

trustification · Sep 29, 2023 · b756c71 · b756c71
1 parent 516c53f
commit b756c71
Show file tree

Hide file tree

Showing 5 changed files with 74 additions and 57 deletions.
diff --git a/...ates/bombastic/walker/030-Deployment.yaml → ...mplates/bombastic/walker/030-CronJob.yaml b/...ates/bombastic/walker/030-Deployment.yaml → ...mplates/bombastic/walker/030-CronJob.yaml
@@ -1,19 +1,14 @@
 {{ if .Values.bombastic.walker.enable }}
-apiVersion: apps/v1
-kind: Deployment
+apiVersion: batch/v1
+kind: CronJob
 metadata:
   name: bombastic-walker
   labels:
     app.kubernetes.io/name: bombastic-walker
     app.kubernetes.io/component: walker
     app.kubernetes.io/part-of: trustification
 spec:
-  replicas: 1
-  selector:
-    matchLabels:
-      app.kubernetes.io/name: bombastic-walker
-      app.kubernetes.io/component: walker
-      app.kubernetes.io/part-of: trustification
+  schedule: "0 1 * * *"
   template:
     metadata:
       labels:
@@ -36,8 +31,6 @@ spec:
             - "-3"
             - "--signing-key"
             - "{{ .Values.bombastic.walker.signingKey }}"
-            - "--scan-interval"
-            - "{{ .Values.bombastic.walker.interval }}"
             - "--fix-licenses"
             - "true"
           env:

diff --git a/deploy/k8s/chart/templates/vexination/walker/030-CronJob.yaml b/deploy/k8s/chart/templates/vexination/walker/030-CronJob.yaml
@@ -0,0 +1,57 @@
+{{ if .Values.vexination.walker.enable }}
+apiVersion: batch/v1
+kind: CronJob
+metadata:
+  name: vexination-walker
+  labels:
+    app.kubernetes.io/name: vexination-walker
+    app.kubernetes.io/component: walker
+    app.kubernetes.io/part-of: trustification
+spec:
+  schedule: "0 1 * * *"
+  template:
+    metadata:
+      labels:
+        app.kubernetes.io/name: vexination-walker
+        app.kubernetes.io/component: walker
+        app.kubernetes.io/part-of: trustification
+    spec:
+      restartPolicy: Never
+      containers:
+        - image: {{ .Values.trustImage }}:{{ .Values.release }}
+          imagePullPolicy: {{ .Values.imagePullPolicy }}
+          name: walker
+          command: ["/trust"]
+          args:
+            - "vexination"
+            - "walker"
+            - "--sink"
+            - "https://vex.{{ .Values.domain }}"
+            - "--source"
+            - "{{ .Values.vexination.walker.source }}"
+            - "-3"
+          env:
+            - name: RUST_LOG
+              value: info
+            - name: INFRASTRUCTURE_ENABLED
+              value: "true"
+            - name: INFRASTRUCTURE_BIND
+              value: "[::]:9010"
+            {{ include "trustification.authentication-client" ( dict "root" . "clientId" "walker" ) | nindent 12 }}
+          resources:
+            {{- toYaml .Values.vexination.walker.resources | nindent 12 }}
+          livenessProbe:
+            httpGet:
+              path: /health/live
+              port: 9010
+            initialDelaySeconds: 2
+          readinessProbe:
+            httpGet:
+              path: /health/ready
+              port: 9010
+            initialDelaySeconds: 2
+          startupProbe:
+            httpGet:
+              path: /health/startup
+              port: 9010
+{{ end }}
diff --git a/deploy/k8s/chart/templates/vexination/walker/030-Job.yaml b/deploy/k8s/chart/templates/vexination/walker/030-Job.yaml
diff --git a/deploy/trustification.dev/prod.yaml b/deploy/trustification.dev/prod.yaml
@@ -8,7 +8,6 @@ domain: trustification.dev
 replicas: 2
 imagePullPolicy: IfNotPresent
 region: eu-west-1
-enableWalkers: false
 enableTests: true
 createRoutes: true
 enableMonitoring: true
@@ -94,7 +93,14 @@ vexination:
       limits:
         memory: "1Gi"
   walker:
+    enable: true
     source: https://www.redhat.com/.well-known/csaf/provider-metadata.json
+    resources:
+      requests:
+        cpu: "100m"
+        memory: "2Gi"
+      limits:
+        memory: "2Gi"
 collectorist:
   enabled: true
   api:

diff --git a/deploy/trustification.dev/staging.yaml b/deploy/trustification.dev/staging.yaml
@@ -12,7 +12,6 @@ enableTests: true
 createRoutes: true
 enableMonitoring: true
 enableDocs: true
-enableWalkers: false
 config:
   enable: true
   name: trustification-config
@@ -105,7 +104,14 @@ vexination:
       limits:
         memory: "1Gi"
   walker:
+    enable: true
     source: https://www.redhat.com/.well-known/csaf/provider-metadata.json
+    resources:
+      requests:
+        cpu: "100m"
+        memory: "2Gi"
+      limits:
+        memory: "2Gi"
 collectorist:
   enabled: true
   api: