admin/cozystack
1
0 Fork 0
mirror of https://github.com/cozystack/cozystack.git synced 2026-11-09 14:02:56 +09:00
Code Issues Packages Projects Releases Wiki Activity

feat(kubernetes): require an ingress-nginx pool when the ingress addon is enabled

Browse Source 
With pools moved out of the chart the ingress-nginx addon can no longer
rely on an auto-provisioned md0; fail the render with a clear message
when addons.ingressNginx.enabled and no pool carries roles: [ingress-nginx].

Signed-off-by: Ivan Okhotnikov <xorokhotnikov@gmail.com>
This commit is contained in:
Ivan Okhotnikov authored and IvanHunters committed 2026-07-21 22:54:25 +03:00
1 parent 31336f0e18
commit 4bd79942f3
1 file changed
+26
Download Patch File Download Diff File Expand all files Collapse all files
packages/apps/kubernetes/templates/helmreleases/ingress-nginx.yaml
+26
View File
@@ -21,6 +21,32 @@ ingress-nginx:
{{- end }}
{{- if and .Values.addons.ingressNginx.enabled .Values._namespace.etcd }}
{{- /* The ingress-nginx controller DaemonSet pins itself to nodes labelled
node-role.kubernetes.io/ingress-nginx (see cozystack.defaultIngressValues
nodeSelector). Since Phase 2 moved worker pools into the separate
kubernetes-nodes chart, that label is produced only by a KubernetesNodes
pool with roles: [ingress-nginx]. Fail fast when this cluster already has
worker pools but none carries the ingress role — otherwise the DaemonSet
silently schedules nothing. The lookup is empty during `helm template`,
lint and unit tests, and on a cluster with no pools yet, so the guard only
fires on the positive misconfiguration (pools exist, none is ingress). */}}
{{- $clusterMds := list }}
{{- range $md := (lookup "cluster.x-k8s.io/v1beta1" "MachineDeployment" .Release.Namespace "").items }}
{{- if eq (dig "spec" "clusterName" "" $md) $.Release.Name }}
{{- $clusterMds = append $clusterMds $md }}
{{- end }}
{{- end }}
{{- if $clusterMds }}
{{- $hasIngressPool := false }}
{{- range $md := $clusterMds }}
{{- if hasKey (dig "spec" "template" "metadata" "labels" dict $md) "node-role.kubernetes.io/ingress-nginx" }}
{{- $hasIngressPool = true }}
{{- end }}
{{- end }}
{{- if not $hasIngressPool }}
{{- fail "addons.ingressNginx.enabled is set but no KubernetesNodes pool for this cluster has roles: [ingress-nginx]. Create a KubernetesNodes pool named <cluster>-<pool> with roles: [ingress-nginx] so the ingress-nginx DaemonSet has nodes to schedule on." }}
{{- end }}
{{- end }}
apiVersion: helm.toolkit.fluxcd.io/v2
kind: HelmRelease
metadata: