vhaudiquet/homeprod
1
0
Fork 1
mirror of https://github.com/vhaudiquet/homeprod.git synced 2026-10-15 19:56:15 +00:00
Code Issues Packages Projects Releases Wiki Activity

kyverno-policies(kube): exclude longhorn instance-manager pods from cpu stripping

Browse Source 
The longhorn instance-manager and engine-image pods carry
longhorn.io/component labels, not app, so the exclusions never matched.
Kyverno stripped their cpu requests at admission, longhorn-manager saw a
spec mismatch and deleted the pod in a loop, and after any node reboot
all longhorn volumes stayed detached with every workload stuck in
ContainerCreating. Match the real labels instead.
This commit is contained in:
vhaudiquet
2026-10-14 17:43:14 +02:00
parent 7ac3b46b3c
commit bb443f3311
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
kubernetes/system/kyverno-policies/policy-strip-cpu-requests.yaml
+2 -2
View File
@@ -80,13 +80,13 @@ spec:
- longhorn-system - longhorn-system
selector: selector:
matchLabels: matchLabels:
app: instance-manager longhorn.io/component: instance-manager
- resources: - resources:
namespaces: namespaces:
- longhorn-system - longhorn-system
selector: selector:
matchLabels: matchLabels:
app: engine-image longhorn.io/component: engine-image
mutate: mutate:
# `request.object` is available in BOTH admission and background modes: # `request.object` is available in BOTH admission and background modes:
# the backgroundController synthesizes an admission-like request for # the backgroundController synthesizes an admission-like request for