ansible/awx-operator

Init container resource limits

Open

#971 创建于 2022年6月30日

在 GitHub 查看
 (0 评论) (6 反应) (0 负责人)Jinja (712 fork)auto 404
help wanted

仓库指标

Star
 (1,488 star)
PR 合并指标
 (PR 指标待抓取)

描述

Please confirm the following

  • I agree to follow this project's code of conduct.
  • I have checked the current issues for duplicates.
  • I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

We are trying to install AWX on our Openshift platform but our OPA gatekeeper policy requires that every container on the platform has resource limits attached to it. The operator can do this for the awx, task, ee and redis containers, but not for the init container.

We need the init container to add the ca bundles to connect with our postgresql instance using the bundle_cacert_secret settings which is triggering the creation of the init container.

This is the error we are getting:

 TASK [Apply deployment resources] ******************************** 
fatal: [localhost]: FAILED! => {"changed": false, "error": 403, "msg": "Failed to apply object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"admission webhook \\\\\"validation.gatekeeper.sh\\\\\" denied the request: [restrainlimits] P0007: container \\\\u003cinit\\\\u003e has no resource limits\\\\n[restrainrequests] P0008: container \\\\u003cinit\\\\u003e has no resource requests\",\"reason\":\"Forbidden\",\"code\":403}\\n'", "reason": "Forbidden", "status": 403}

It would be nice to have an init_resource_requirements settings as well!

贡献者指南