awx-operator
awx-operator copied to clipboard
Init container resource limits
Please confirm the following
- [X] I agree to follow this project's code of conduct.
- [X] I have checked the current issues for duplicates.
- [X] I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.
Feature Summary
We are trying to install AWX on our Openshift platform but our OPA gatekeeper policy requires that every container on the platform has resource limits attached to it. The operator can do this for the awx, task, ee and redis containers, but not for the init container.
We need the init container to add the ca bundles to connect with our postgresql instance using the bundle_cacert_secret
settings which is triggering the creation of the init container.
This is the error we are getting:
TASK [Apply deployment resources] ********************************
fatal: [localhost]: FAILED! => {"changed": false, "error": 403, "msg": "Failed to apply object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"admission webhook \\\\\"validation.gatekeeper.sh\\\\\" denied the request: [restrainlimits] P0007: container \\\\u003cinit\\\\u003e has no resource limits\\\\n[restrainrequests] P0008: container \\\\u003cinit\\\\u003e has no resource requests\",\"reason\":\"Forbidden\",\"code\":403}\\n'", "reason": "Forbidden", "status": 403}
It would be nice to have an init_resource_requirements
settings as well!