opf / helm-charts

OPF helm chart repository
https://charts.openproject.org
GNU General Public License v3.0
11 stars 23 forks source link

web deployment stuck in CrashLoopBackOff with new secret layout #78

Closed DaDummy closed 10 months ago

DaDummy commented 10 months ago

The current chart releases appear to be unable to deploy any OpenProject release I have tried so far, since there appears to be no release that actually supports omitting the password in the DATABASE_URL environment variable.

When the postgres password is not included in DATABASE_URL as is the case with current chart versions, the web container fails to start because the supervisord script used for running the web container only uses DATABASE_URL and ignores any values that might be set in OPENPROJECT_DB_PASSWORD.

I'd suggest rolling back to the old behavior until the OpenProject image officially supports this alternate approach.

DaDummy commented 10 months ago

Looks like additionally OpenProject web container does not support running as a different user than root, so

containerSecurityContext:
  enabled: false

should be the default for this chart until that changes.

oliverguenther commented 10 months ago

Hi @DaDummy , the supervisord command only exists for the all-in-one/fat docker images. The helm-chart should be used with the -slim variants. It's not properly documented I see, but it uses 13-slim as a default.

The slim container can also be run as non-root.