airship
/
promenade
Code Issues Proposed changes

Add configmap-hash annotations for etcd 

Adds configmap-hash annotations to the etcd anchor daemonset for
configmap-bin and configmap-etc.

Does not add hash annotations for configmap-certs or secret-keys, with
the thought that if certs or keys are changed, some manual intervention
might be warranted, and restarting the anchors automatically might not
be desirable.

Change-Id: I22ff8fafa5d37c10138ddaa4095174b25fc087d8
This commit is contained in:
Phil Sphicas 2020-05-21 18:54:14 +00:00
parent a75a54569c
commit 4aab698486
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
charts/etcd/templates/daemonset-anchor.yaml
View File

@ -42,6 +42,12 @@ spec:
{{ dict "envAll" $envAll "podName" "etcd-anchor" "containerNames" (list "etcdctl") | include "helm-toolkit.snippets.kubernetes_mandatory_access_control_annotation" | indent 8 }}
{{ tuple $envAll | include "helm-toolkit.snippets.release_uuid" | indent 8 }}
scheduler.alpha.kubernetes.io/critical-pod: ''
{{- if .Values.manifests.configmap_bin }}
configmap-bin-hash: {{ tuple "configmap-bin.yaml" . | include "helm-toolkit.utils.hash" }}
{{- end }}
{{- if .Values.manifests.configmap_etc }}
configmap-etc-hash: {{ tuple "configmap-etc.yaml" . | include "helm-toolkit.utils.hash" }}
{{- end }}
labels:
{{ $labels | indent 8 }}
spec: