Add env options (#247)

* Add GOMEMLIMIT by default * Add GOMEMLIMIT by default, allow user to configure additional env variables on the deployment Signed-off-by: Rafael da Fonseca <[email protected]> --------- Signed-off-by: Rafael da Fonseca <[email protected]> Co-authored-by: Vishal Choudhary <[email protected]>
kyverno · Feb 7, 2025 · 9feb2a3 · 9feb2a3
1 parent a1dda07
commit 9feb2a3
Show file tree

Hide file tree

Showing 5 changed files with 26 additions and 1 deletion.
diff --git a/charts/reports-server/README.md b/charts/reports-server/README.md
@@ -39,6 +39,7 @@ helm install reports-server --namespace reports-server --create-namespace report
 | serviceAccount.name | string | `""` | Service account name (required if `serviceAccount.create` is `false`) |
 | podAnnotations | object | `{}` | Pod annotations |
 | podSecurityContext | object | `{"fsGroup":2000}` | Pod security context |
+| podEnv | object | `{}` | Provide additional environment variables to the pods. Map with the same format as kubernetes deployment spec's env. |
 | securityContext | object | See [values.yaml](values.yaml) | Container security context |
 | livenessProbe | object | `{"failureThreshold":10,"httpGet":{"path":"/livez","port":"https","scheme":"HTTPS"},"initialDelaySeconds":20,"periodSeconds":10}` | Liveness probe |
 | readinessProbe | object | `{"failureThreshold":10,"httpGet":{"path":"/readyz","port":"https","scheme":"HTTPS"},"initialDelaySeconds":30,"periodSeconds":10}` | Readiness probe |

diff --git a/charts/reports-server/templates/deployment.yaml b/charts/reports-server/templates/deployment.yaml
@@ -1,3 +1,4 @@
+{{- $env := .Values.podEnv }}
 apiVersion: apps/v1
 kind: Deployment
 metadata:
@@ -59,8 +60,16 @@ spec:
             {{- if .Values.metrics.enabled }}
             - --authorization-always-allow-paths=/metrics
             {{- end }}
-          {{- if .Values.config.db.secretName }}
           env:
+            - name: GOMEMLIMIT
+              valueFrom:
+                resourceFieldRef:
+                  resource: limits.memory
+                  divisor: '1'
+          {{- with $env }}
+            {{- toYaml . | nindent 12 }}
+          {{- end }}
+          {{- if .Values.config.db.secretName }}
             - name: DB_HOST
               valueFrom:
                 secretKeyRef:

diff --git a/charts/reports-server/values.yaml b/charts/reports-server/values.yaml
@@ -56,6 +56,9 @@ podAnnotations: {}
 podSecurityContext:
   fsGroup: 2000
 
+# -- Provide additional environment variables to the pods. Map with the same format as kubernetes deployment spec's env.
+podEnv: {}
+
 # -- Container security context
 # @default -- See [values.yaml](values.yaml)
 securityContext:

diff --git a/config/install-etcd.yaml b/config/install-etcd.yaml
@@ -270,6 +270,12 @@ spec:
             - --cert-dir=/tmp
             - --secure-port=4443
             - --authorization-always-allow-paths=/metrics
+          env:
+            - name: GOMEMLIMIT
+              valueFrom:
+                resourceFieldRef:
+                  resource: limits.memory
+                  divisor: '1'
           securityContext:
             allowPrivilegeEscalation: false
             capabilities:

diff --git a/config/install.yaml b/config/install.yaml
@@ -338,6 +338,12 @@ spec:
             - --cert-dir=/tmp
             - --secure-port=4443
             - --authorization-always-allow-paths=/metrics
+          env:
+            - name: GOMEMLIMIT
+              valueFrom:
+                resourceFieldRef:
+                  resource: limits.memory
+                  divisor: '1'
           securityContext:
             allowPrivilegeEscalation: false
             capabilities: