ansible/awx-operator

Init container resource limits

Open

#971 aperta il 30 giu 2022

Vedi su GitHub
 (0 commenti) (6 reazioni) (0 assegnatari)Jinja (712 fork)auto 404
help wanted

Metriche repository

Star
 (1488 star)
Metriche merge PR
 (Metriche PR in attesa)

Descrizione

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

We are trying to install AWX on our Openshift platform but our OPA gatekeeper policy requires that every container on the platform has resource limits attached to it. The operator can do this for the awx, task, ee and redis containers, but not for the init container.

We need the init container to add the ca bundles to connect with our postgresql instance using the bundle_cacert_secret settings which is triggering the creation of the init container.

This is the error we are getting:

 TASK [Apply deployment resources] ******************************** 
fatal: [localhost]: FAILED! => {"changed": false, "error": 403, "msg": "Failed to apply object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"admission webhook \\\\\"validation.gatekeeper.sh\\\\\" denied the request: [restrainlimits] P0007: container \\\\u003cinit\\\\u003e has no resource limits\\\\n[restrainrequests] P0008: container \\\\u003cinit\\\\u003e has no resource requests\",\"reason\":\"Forbidden\",\"code\":403}\\n'", "reason": "Forbidden", "status": 403}

It would be nice to have an init_resource_requirements settings as well!

Guida contributor