Skip to content

chart: more configurable values and rolling restart on config change - #20

Open
akukhar wants to merge 1 commit into
maxtacu:masterfrom
akukhar:chart/values-driven-config
Open

chart: more configurable values and rolling restart on config change#20
akukhar wants to merge 1 commit into
maxtacu:masterfrom
akukhar:chart/values-driven-config

Conversation

@akukhar

@akukhar akukhar commented May 8, 2026

Copy link
Copy Markdown

Four small chart fixes and features. Chart bumped 0.1.0 -> 0.2.0.

Probes driven from values.yaml

templates/deployment.yaml rendered both a values-driven probe block and a hardcoded second pair; the hardcoded one won, so --set livenessProbe.* was silently ignored. Hardcoded block removed; values.yaml now carries the full probe spec. The container port is named https so port: https resolves.

.Values.resources consumed

Previously declared in values.yaml but never referenced from deployment.yaml. Wiring it in also gives HPA's CPU/memory thresholds a real baseline.

Configurable webhook failurePolicy

New WebhookFailurePolicy, default Fail.

Rolling restart on registry config change

cmd/config.go reads /etc/ecr-pull-through/registries.yaml once at startup, so changes via helm upgrade never reached running pods. A new ecr-pull-through.registriesYaml named template feeds both configmap.yaml and a checksum/config annotation on the Deployment; the annotation flips when awsRegion, awsAccountId, or registries change.

awsRegion / awsAccountId are also rendered quoted, so a leading-zero AWS account ID doesn't get misread as a number.

Four small chart fixes and features. Chart bumped 0.1.0 -> 0.2.0.

* Probes driven from values.yaml. templates/deployment.yaml rendered
  both a values-driven probe block and a hardcoded second pair; the
  hardcoded one won, so `--set livenessProbe.*` was silently ignored.
  Hardcoded block removed; values.yaml now carries the full probe
  spec. The container port is named `https` so `port: https` resolves.

* .Values.resources consumed. Previously declared in values.yaml but
  never referenced from deployment.yaml. Wiring it in also gives
  HPA's CPU/memory thresholds a real baseline.

* Configurable webhook failurePolicy. New `WebhookFailurePolicy`,
  default `Fail`.

* Rolling restart on registry config change. cmd/config.go reads
  /etc/ecr-pull-through/registries.yaml once at startup, so changes
  via `helm upgrade` never reached running pods. A new
  `ecr-pull-through.registriesYaml` named template feeds both
  configmap.yaml and a `checksum/config` annotation on the Deployment;
  the annotation flips when `awsRegion`, `awsAccountId`, or
  `registries` change. Rendered `awsRegion` / `awsAccountId` are
  quoted, so a leading-zero AWS account ID doesn't get misread as a
  number.
@sonarqubecloud

sonarqubecloud Bot commented May 8, 2026

Copy link
Copy Markdown

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant