Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add sysctlInit to OpenSearch Chart #278

Merged
merged 2 commits into from
Nov 11, 2022
Merged

Add sysctlInit to OpenSearch Chart #278

merged 2 commits into from
Nov 11, 2022

Conversation

amirgo1
Copy link
Contributor

@amirgo1 amirgo1 commented Jun 24, 2022

Signed-off-by: amirgo1 [email protected]

Description

Add option to enable the use of sysctlInitContainer to set sysctl vm.max_map_count through privileged initContainer.

Issues Resolved

#187

Check List

  • Commits are signed per the DCO using --signoff

For any changes to files within Helm chart directories:

  • Helm chart version bumped
  • Helm chart CHANGELOG.md updated to reflect change

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

@amirgo1 amirgo1 requested a review from a team as a code owner June 24, 2022 12:56
@peterzhuamazon
Copy link
Member

Hi @amirgo1 thanks for contribution,
please resolve the conflicts so we can try to start the workflow and review.
Thanks.

@DandyDeveloper
Copy link
Collaborator

@peterzhuamazon @amirgo1 Before we approve this as well, we really want to make sure there's a consensus from everyone that this is how we want to do this.

It's a little worrying that we need to do this via privileged containers that are changing the host OS sysctl settings.

@smlx @mprimeaux I'll just invite everyone to get a "Yes, lets do this". Maybe thumbs up / Thumbs down?

@peterzhuamazon
Copy link
Member

peterzhuamazon commented Jun 30, 2022

Adding @TheAlgo @prudhvigodithi to the discussion please see above msg.
Thanks.

Copy link
Contributor

@smlx smlx left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I'm ok with the concept for this since it's the only practical solution in many k8s environments.

charts/opensearch/templates/statefulset.yaml Outdated Show resolved Hide resolved
charts/opensearch/templates/statefulset.yaml Outdated Show resolved Hide resolved
charts/opensearch/README.md Outdated Show resolved Hide resolved
@@ -15,7 +15,7 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 2.1.0
version: 2.1.1
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Because the API (values file) is changing this is at least a minor version bump, rather than a bugfix.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes this should be a minor version bump. I agree with @smlx

@peterzhuamazon
Copy link
Member

Hi @amirgo1 please resolve the conflicts as well as checking out @smlx review so we can proceed.
Thanks.

Copy link
Member

@TheAlgo TheAlgo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I am also okay with this option since I see this as one of the viable options for configuring this property. We have seen some issues with this option when the charts were in the initial phase as well.

@@ -15,7 +15,7 @@ type: application
# This is the chart version. This version number should be incremented each time you make changes
# to the chart and its templates, including the app version.
# Versions are expected to follow Semantic Versioning (https://semver.org/)
version: 2.1.0
version: 2.1.1
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yes this should be a minor version bump. I agree with @smlx

@peterzhuamazon
Copy link
Member

@TheAlgo @smlx @prudhvigodithi please approve this if you are ok with the change, I will resolve the conflicts later.
Thanks.

@peterzhuamazon
Copy link
Member

@amirgo1 could you check @TheAlgo comments on this?
Thanks.

@amirgo1 amirgo1 changed the title Add sysctlInitContainer to OpenSearch Chart Add sysctlInit to OpenSearch Chart Aug 5, 2022
@amirgo1
Copy link
Contributor Author

amirgo1 commented Aug 5, 2022

@peterzhuamazon @TheAlgo my apologies for the delay. I updated the PR

@amirgo1
Copy link
Contributor Author

amirgo1 commented Aug 20, 2022

@TheAlgo, could you please review the changes I made?

charts/opensearch/ci/ci-values.yaml Show resolved Hide resolved
charts/opensearch/CHANGELOG.md Outdated Show resolved Hide resolved
charts/opensearch/CHANGELOG.md Show resolved Hide resolved
@amirgo1
Copy link
Contributor Author

amirgo1 commented Aug 31, 2022

@TheAlgo I've made the changes

- -c
- |
set -xe
DESIRED="{{ .Values.sysctl.VmMaxMapCount }}"
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we add sample placeholders in values.yaml for vmMaxMapCount

@TheAlgo
Copy link
Member

TheAlgo commented Aug 31, 2022

@smlx @prudhvigodithi Can you guys please review it when free? Thanks

@TheAlgo
Copy link
Member

TheAlgo commented Sep 11, 2022

@amirgo1 Any update on this PR?

@amirgo1 amirgo1 closed this Sep 12, 2022
@amirgo1 amirgo1 reopened this Sep 12, 2022
@amirgo1
Copy link
Contributor Author

amirgo1 commented Sep 12, 2022

@TheAlgo Fixed comment and bumped version

Copy link
Member

@TheAlgo TheAlgo left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Signed-off-by: amirgo1 <[email protected]>
@amirgo1
Copy link
Contributor Author

amirgo1 commented Sep 15, 2022

Resolved changelog conflict @prudhvigodithi @TheAlgo

@TheAlgo
Copy link
Member

TheAlgo commented Sep 15, 2022

@amirgo1 Can you check the lint errors?

@peterzhuamazon
Copy link
Member

We can take care of the lint error if there is still no responses from @amirgo1 next week.
Thanks.

@patsevanton
Copy link

Any update?

@peterzhuamazon
Copy link
Member

Seems like no update from @amirgo1 I will fix the link for him.

@peterzhuamazon
Copy link
Member

Thanks @amirgo1 for the contribution and patience, we will merge this PR now.

@peterzhuamazon peterzhuamazon merged commit ed23505 into opensearch-project:main Nov 11, 2022
@peterzhuamazon
Copy link
Member

Backport 1.x: #349

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Unable to deploy a pod using security context read only file system to true
7 participants