Closed aiyengar2 closed 1 year ago
CI failures have been addressed. The issue caught by CI was that when global.cattle.psp.enabled
was set to false, we were also excluding the default NetworkPolicy deployed onto the namespace, which prevented Grafana (or any component that needed to query the API server) from being able to start up.
Ran
helm template rancher-project-monitoring -n cattle-project-monitoring-system charts/rancher-project-monitoring/0.2.1 | yq e 'select(.kind == "PodSecurityPolicy")'
after fixing this and no PSP resources were produced.Root cause was because the
hardened.yaml
was being tracked attemplates/hardened.yaml
as an overlay rather than being tracked intemplates/rancher-monitoring/hardened.yaml
as a patch on where the upstream rancher-monitoring chart places this logic.Related Issue: https://github.com/rancher/rancher/issues/40350
Checklist
Please fill out this table to identify which fields need to be modified in your PR.
Under
Status
, either indicateDoes Not Apply
orAdded to this PR
.version
in rancher-project-monitoringpackage.yaml
rancher-project-monitoring
chart to make changeshelmProjectOperator.image.tag
in prometheus-federatorvalues.yaml
main.go
fileappVersion
in prometheus-federatorChart.yaml
helmProjectOperator.image.tag
in the above boxversion
in prometheus-federatorChart.yaml
appVersion
in the above box or you modified the contents of theprometheus-federator
chart to make changes