awx-operator icon indicating copy to clipboard operation
awx-operator copied to clipboard

Init container resource limits

Open haijeploeg opened this issue 2 years ago • 0 comments

Please confirm the following

  • [X] I agree to follow this project's code of conduct.
  • [X] I have checked the current issues for duplicates.
  • [X] I understand that AWX Operator is open source software provided for free and that I might not receive a timely response.

Feature Summary

We are trying to install AWX on our Openshift platform but our OPA gatekeeper policy requires that every container on the platform has resource limits attached to it. The operator can do this for the awx, task, ee and redis containers, but not for the init container.

We need the init container to add the ca bundles to connect with our postgresql instance using the bundle_cacert_secret settings which is triggering the creation of the init container.

This is the error we are getting:

 TASK [Apply deployment resources] ******************************** 
fatal: [localhost]: FAILED! => {"changed": false, "error": 403, "msg": "Failed to apply object: b'{\"kind\":\"Status\",\"apiVersion\":\"v1\",\"metadata\":{},\"status\":\"Failure\",\"message\":\"admission webhook \\\\\"validation.gatekeeper.sh\\\\\" denied the request: [restrainlimits] P0007: container \\\\u003cinit\\\\u003e has no resource limits\\\\n[restrainrequests] P0008: container \\\\u003cinit\\\\u003e has no resource requests\",\"reason\":\"Forbidden\",\"code\":403}\\n'", "reason": "Forbidden", "status": 403}

It would be nice to have an init_resource_requirements settings as well!

haijeploeg avatar Jun 30 '22 09:06 haijeploeg