From 2af1148df389b9eb041629443b9d86d92bcaafaa Mon Sep 17 00:00:00 2001 From: Anna Kapuscinska Date: Tue, 3 Oct 2023 09:01:17 +0100 Subject: [PATCH] helm: Make operator imagePullPolicy configurable imagePullPolicy for the operator deployment can be now set in tetragonOperator.image.pullPolicy value, and defaults to IfNotPresent. Previously it defaulted to Always and couldn't be changed, what was problematic for example in local development. Signed-off-by: Anna Kapuscinska --- docs/content/en/docs/reference/helm-chart.md | 2 +- install/kubernetes/README.md | 2 +- install/kubernetes/templates/operator_deployment.yaml | 1 + install/kubernetes/values.yaml | 1 + 4 files changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/content/en/docs/reference/helm-chart.md b/docs/content/en/docs/reference/helm-chart.md index 60bde448131..da10b49e7ee 100644 --- a/docs/content/en/docs/reference/helm-chart.md +++ b/docs/content/en/docs/reference/helm-chart.md @@ -99,7 +99,7 @@ To use [the values available](#values), with `helm install` or `helm upgrade`, u | tetragon.prometheus.serviceMonitor.labelsOverride | object | `{}` | The set of labels to place on the 'ServiceMonitor' resource. | | tetragon.resources | object | `{}` | | | tetragon.securityContext.privileged | bool | `true` | | -| tetragonOperator.image | object | `{"override":null,"repository":"quay.io/cilium/tetragon-operator","suffix":"","tag":"v0.11.0"}` | tetragon-operator image. | +| tetragonOperator.image | object | `{"override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/tetragon-operator","suffix":"","tag":"v0.11.0"}` | tetragon-operator image. | | tetragonOperator.podInfo.enabled | bool | `false` | Enables the PodInfo CRD and the controller that reconciles PodInfo custom resources. | | tetragonOperator.skipCRDCreation | bool | `false` | | | tolerations[0].operator | string | `"Exists"` | | diff --git a/install/kubernetes/README.md b/install/kubernetes/README.md index a85d4935d3a..e955e1d1478 100644 --- a/install/kubernetes/README.md +++ b/install/kubernetes/README.md @@ -82,7 +82,7 @@ Helm chart for Tetragon | tetragon.prometheus.serviceMonitor.labelsOverride | object | `{}` | The set of labels to place on the 'ServiceMonitor' resource. | | tetragon.resources | object | `{}` | | | tetragon.securityContext.privileged | bool | `true` | | -| tetragonOperator.image | object | `{"override":null,"repository":"quay.io/cilium/tetragon-operator","suffix":"","tag":"v0.11.0"}` | tetragon-operator image. | +| tetragonOperator.image | object | `{"override":null,"pullPolicy":"IfNotPresent","repository":"quay.io/cilium/tetragon-operator","suffix":"","tag":"v0.11.0"}` | tetragon-operator image. | | tetragonOperator.podInfo.enabled | bool | `false` | Enables the PodInfo CRD and the controller that reconciles PodInfo custom resources. | | tetragonOperator.skipCRDCreation | bool | `false` | | | tolerations[0].operator | string | `"Exists"` | | diff --git a/install/kubernetes/templates/operator_deployment.yaml b/install/kubernetes/templates/operator_deployment.yaml index a72c5629c62..bfa3b0db995 100644 --- a/install/kubernetes/templates/operator_deployment.yaml +++ b/install/kubernetes/templates/operator_deployment.yaml @@ -23,6 +23,7 @@ spec: - serve - --config-dir=/etc/tetragon/operator.conf.d/ image: "{{ if .Values.tetragonOperator.image.override }}{{ .Values.tetragonOperator.image.override }}{{ else }}{{ .Values.tetragonOperator.image.repository }}{{ .Values.tetragonOperator.image.suffix }}:{{ .Values.tetragonOperator.image.tag }}{{ end }}" + imagePullPolicy: {{ .Values.tetragonOperator.image.pullPolicy }} volumeMounts: - mountPath: /etc/tetragon/operator.conf.d/ name: tetragon-operator-config diff --git a/install/kubernetes/values.yaml b/install/kubernetes/values.yaml index 3da34f12913..65935c50846 100644 --- a/install/kubernetes/values.yaml +++ b/install/kubernetes/values.yaml @@ -163,6 +163,7 @@ tetragonOperator: tag: v0.11.0 # tetragon-operator image-digest suffix: "" + pullPolicy: IfNotPresent # Skip CRD creation. skipCRDCreation: false podInfo: