Merge pull request #913 from equinor/buildah-image-builder

Buildah image builder
equinor · Aug 31, 2023 · 1b69c89 · 1b69c89
2 parents b565437 + b040ece
commit 1b69c89
Show file tree

Hide file tree

Showing 25 changed files with 1,125 additions and 53 deletions.
diff --git a/.vscode/launch.json b/.vscode/launch.json
@@ -90,6 +90,7 @@
         "KUBE_CLIENT_RATE_LIMIT_QPS": "500",
         "KUBE_CLIENT_RATE_LIMIT_BURST": "5",
         "RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_LEVEL": "baseline",
+        "RADIXOPERATOR_PODSECURITYSTANDARD_APP_NAMESPACE_ENFORCE_LEVEL": "privileged",
         "RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_VERSION": "v1.23",
         "RADIXOPERATOR_PODSECURITYSTANDARD_AUDIT_LEVEL": "restricted",
         "RADIXOPERATOR_PODSECURITYSTANDARD_AUDIT_VERSION": "v1.23",

diff --git a/charts/radix-operator/Chart.yaml b/charts/radix-operator/Chart.yaml
@@ -1,7 +1,7 @@
 apiVersion: v2
 name: radix-operator
-version: 1.20.8
-appVersion: 1.40.8
+version: 1.21.4
+appVersion: 1.41.4
 kubeVersion: ">=1.24.0"
 description: Radix Operator
 keywords:

diff --git a/charts/radix-operator/templates/deployment.yaml b/charts/radix-operator/templates/deployment.yaml
@@ -125,6 +125,10 @@ spec:
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_LEVEL
               value: {{ .Values.podSecurityStandard.enforce.level }}
             {{- end }}
+            {{- if .Values.podSecurityStandard.enforce.level }}
+            - name: RADIXOPERATOR_PODSECURITYSTANDARD_APP_NAMESPACE_ENFORCE_LEVEL
+              value: {{ .Values.podSecurityStandard.appNamespace.enforce.level }}
+            {{- end }}
             {{- if .Values.podSecurityStandard.enforce.version }}
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_ENFORCE_VERSION
               value: {{ .Values.podSecurityStandard.enforce.version }}
@@ -145,6 +149,10 @@ spec:
             - name: RADIXOPERATOR_PODSECURITYSTANDARD_WARN_VERSION
               value: {{ .Values.podSecurityStandard.warn.version }}
             {{- end }}
+            - name: SECCOMP_PROFILE_FILENAME
+              value: {{ .Values.seccompProfile.fileNameOnNode }}
+            - name: RADIX_BUILDAH_IMAGE_BUILDER
+              value: {{ .Values.buildahImageBuilder }}
           livenessProbe:
             httpGet:
               path: /healthz