mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
Myasnikov Daniil
5a4ac9c202
The prepull DaemonSet starts containers with `command: ["sleep", "infinity"]`, which assumes the image ships /bin/sleep. cert-manager images (cainjector, controller, webhook, startupapicheck) are distroless and have only the cert-manager binary — the container fails to exec with "sleep: executable file not found". Verified locally on a kind v1.33.1 cluster: the sidecar-init pattern (initContainer with restartPolicy: Always) doesn't help either, because crashing distroless containers never reach a persistent `started=true` state, so kubelet never progresses past the first sidecar and the pod stays Initialized=False. Revert to the original two-chart kubeovn + linstor prepull (both non-distroless, both have sleep). The PackageSource dependsOn chain added in 9dae97e is what actually prevents the cert-manager cascade — prepull was only meant as a speed-up. Cert-manager bootstraps in a couple extra minutes on cold install, but consumers wait correctly. Assisted-By: Claude <noreply@anthropic.com> Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>