Skip to content

[Merged by Bors] - Helm chart#27

Closed
nightkr wants to merge 9 commits into
mainfrom
feature/helm
Closed

[Merged by Bors] - Helm chart#27
nightkr wants to merge 9 commits into
mainfrom
feature/helm

Conversation

@nightkr
Copy link
Copy Markdown
Contributor

@nightkr nightkr commented Jan 26, 2022

Fixes #25

For now I applied the templating manually (from stackabletech/operator-templating#55, commit stackabletech/operator-templating@4fd238d) and adapted it for secret-operator by hand.

These changes are contained in 878c4a6, and basically mean:

  • Deploying as a DaemonSet rather than a Deployment
  • Adding CSI sidecar containers
  • Running as root (at some point we might be able to get away with "just" adding a bunch of capabilities, but secret-operator will probably always require relatively elevated privileges)
  • Disabling product-config
  • Extracting the CRD by running cargo run crd rather than reading the file that build.rs creates (Nix doesn't allow access to files outside of the source tree)
  • Adapting to the ClusterRole rules that secret-operator requires

Currently this branch contains both the Dockerfile- and Nix-based workflows for building the operator, but we should probably pick one at some point.

@nightkr nightkr requested review from a team and soenkeliebau January 26, 2022 15:41
@nightkr nightkr self-assigned this Jan 26, 2022
@nightkr nightkr closed this Jan 27, 2022
@nightkr nightkr reopened this Jan 27, 2022
Copy link
Copy Markdown
Member

@maltesander maltesander left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Just a question and minor labeling (at least for readme, not in the generated stuff).
LGTM otherwise.

Comment thread .github/workflows/daily_security.yml
Comment thread deploy/helm/secret-operator/README.md Outdated
@@ -0,0 +1,33 @@
# Helm Chart for Stackable Operator for Stackable Secret Operator

This Helm Chart can be used to install Custom Resource Definitions and the Operator for Stackable Secret Operator provided by Stackable.
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Ok i dont think that naming makes sense, but its consistent :D
This Helm Chart can be used to install Custom Resource Definitions and the Secret Operator provided by Stackable.

Comment thread deny.toml
@nightkr
Copy link
Copy Markdown
Contributor Author

nightkr commented Jan 27, 2022

bors r+

bors Bot pushed a commit that referenced this pull request Jan 27, 2022
Fixes #25 

For now I applied the templating manually (from stackabletech/operator-templating#55, commit stackabletech/operator-templating@4fd238d) and adapted it for secret-operator by hand.

These changes are contained in 878c4a6, and basically mean:
- Deploying as a `DaemonSet` rather than a `Deployment`
- Adding CSI sidecar containers
- Running as root (at some point we might be able to get away with "just" adding a bunch of capabilities, but secret-operator will probably always require relatively elevated privileges)
- Disabling product-config
- Extracting the CRD by running `cargo run crd` rather than reading the file that `build.rs` creates (Nix doesn't allow access to files outside of the source tree)
- Adapting to the `ClusterRole` rules that secret-operator requires

Currently this branch contains both the `Dockerfile`- and Nix-based workflows for building the operator, but we should probably pick one at some point.

Co-authored-by: Stacky McStackface <stackable-bot@users.noreply.github.com>
@bors
Copy link
Copy Markdown
Contributor

bors Bot commented Jan 27, 2022

Pull request successfully merged into main.

Build succeeded:

@bors bors Bot changed the title Helm chart [Merged by Bors] - Helm chart Jan 27, 2022
@bors bors Bot closed this Jan 27, 2022
@bors bors Bot deleted the feature/helm branch January 27, 2022 15:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Helm packaging

3 participants