linode / apl-core

Application Platform for Linode Kubernetes Engine (and any other conformant K8s)
https://otomi.io
Apache License 2.0
2.2k stars 165 forks source link

Run Otomi-tasks as part of otomi operator #1321

Open j-zimnowoda opened 10 months ago

j-zimnowoda commented 10 months ago

WHY

Because single job run does not guarantee that the task is performed successfully.

Problem Cause Solution
Core apps reconfiguration (otomi-tasks) do not reconcile Imperative jobs to configure core applications that cannot be rerun. Jobs are blocking and do not rerun of failure Controller that is trying to achieve the declared state
Frequency Effort Risk
Every pipeline run medium low

Acceptance criteria

GIVEN gitea, keycloak, harbor core apps 
WHEN oidc settings OR domainSuffix is changed THEN otomi operator reconfigures Harbor AND Keycloak AND Gitea

GIVEN gitea, keycloak, harbor core apps 
WHEN it configuration attempt fails THEN otomi operator re-tires with some delay until it succeeds

GIVEN gitea, keycloak, harbor core apps 
WHEN teams namespace is added or deleted THEN otomi operator reconfigures Harbor AND Keycloak AND Gitea accordingly

Definition of done

j-zimnowoda commented 10 months ago

Hey team! Please add your planning poker estimate with Zenhub @Ani1357 @dennisvankekem @ElderMatt @ferruhcihan @srodenhuis @staticvoid255