feat: set network pullpolicy to Never, fix for cert-manager on AWS, doc updates

This commit is contained in:
Stefan Reimer 2024-08-29 12:49:31 +00:00
parent 48e58c00ce
commit 0fddeed052
5 changed files with 10 additions and 6 deletions

View File

@ -1,6 +1,6 @@
# kubezero-ci # kubezero-ci
![Version: 0.8.15](https://img.shields.io/badge/Version-0.8.15-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square) ![Version: 0.8.16](https://img.shields.io/badge/Version-0.8.16-informational?style=flat-square) ![Type: application](https://img.shields.io/badge/Type-application-informational?style=flat-square)
KubeZero umbrella chart for all things CI KubeZero umbrella chart for all things CI
@ -22,7 +22,7 @@ Kubernetes: `>= 1.25.0`
| https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 | | https://cdn.zero-downtime.net/charts/ | kubezero-lib | >= 0.1.6 |
| https://charts.jenkins.io | jenkins | 5.5.8 | | https://charts.jenkins.io | jenkins | 5.5.8 |
| https://dl.gitea.io/charts/ | gitea | 10.4.0 | | https://dl.gitea.io/charts/ | gitea | 10.4.0 |
| https://docs.renovatebot.com/helm-charts | renovate | 37.440.7 | | https://docs.renovatebot.com/helm-charts | renovate | 38.57.0 |
# Jenkins # Jenkins
- default build retention 10 builds, 32days - default build retention 10 builds, 32days

View File

@ -19,6 +19,5 @@ Installs Istio Ingress Gateways, requires kubezero-istio to be installed !
## Resources ## Resources
- https://istio.io/latest/docs/reference/config/istio.operator.v1alpha1/#IstioOperatorSpec - https://github.com/cilium/cilium/blob/main/operator/pkg/model/translation/envoy_listener.go#L134
- https://github.com/istio/istio/blob/master/manifests/profiles/default.yaml
- https://istio.io/latest/docs/setup/install/standalone-operator/

View File

@ -28,6 +28,8 @@ spec:
containers: containers:
- name: kube-multus - name: kube-multus
image: {{ .Values.multus.image.repository }}:{{ .Values.multus.image.tag }} image: {{ .Values.multus.image.repository }}:{{ .Values.multus.image.tag }}
# Always used cached images
imagePullPolicy: Never
command: ["/entrypoint.sh"] command: ["/entrypoint.sh"]
args: args:
- "--multus-conf-file=/tmp/multus-conf/00-multus.conf" - "--multus-conf-file=/tmp/multus-conf/00-multus.conf"
@ -45,6 +47,7 @@ spec:
privileged: true privileged: true
capabilities: capabilities:
add: ["SYS_ADMIN"] add: ["SYS_ADMIN"]
terminationMessagePolicy: FallbackToLogsOnError
volumeMounts: volumeMounts:
- name: run - name: run
mountPath: /run mountPath: /run

View File

@ -27,9 +27,10 @@ multus:
cilium: cilium:
enabled: false enabled: false
# breaks preloaded images otherwise # Always use cached images
image: image:
useDigest: false useDigest: false
pullPolicy: Never
resources: resources:
requests: requests:

View File

@ -181,6 +181,7 @@ aws-eks-asg-rolling-update-handler:
- name: AWS_WEB_IDENTITY_TOKEN_FILE - name: AWS_WEB_IDENTITY_TOKEN_FILE
value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token" value: "/var/run/secrets/sts.amazonaws.com/serviceaccount/token"
- name: AWS_STS_REGIONAL_ENDPOINTS - name: AWS_STS_REGIONAL_ENDPOINTS
value: "regional"
{{- end }} {{- end }}
{{- end }} {{- end }}