Ivan Okhotnikov 711f09f8d1 fix(cert-manager): raise cainjector memory limit to unblock caBundle injection ...

cainjector loads all ValidatingWebhookConfigurations, APIServices and CRDs
into its informer caches at startup. On a full cozystack install that working
set exceeds the 128Mi limit, so the single leader-elected cainjector Pod is
OOMKilled during cache population and CrashLoops before it injects any
caBundle. Webhook ValidatingWebhookConfigurations then keep an empty caBundle
and every admission call fails with "x509: certificate signed by unknown
authority" (failurePolicy: Fail), intermittently blocking Ingress creation
and stalling tenant installs.

Raise the cainjector memory limit to 512Mi (matching the controller) and the
request to 128Mi, and add a helm-unittest that pins the sizing so a blanket
resource change or a `make update` cannot silently lower it again.

Signed-off-by: Ivan Okhotnikov <xorokhotnikov@gmail.com>
(cherry picked from commit c3afc63cb3a84c8085e991223ebd3f18a70d5183)
(cherry picked from commit 9f312d7a216c34724848142415d2de7c086a711e)

2026-07-31 10:18:03 +05:00

..

apps

fix(ci, kubernetes): build container disks concurrently to unblock Build

2026-07-27 20:46:38 +05:00

core

Prepare release v1.5.2

2026-07-03 10:12:24 +00:00

extra

Prepare release v1.5.2

2026-07-03 10:12:24 +00:00

library

feat(cozy-lib): instance-type preset names with five series and legacy aliases

2026-05-11 21:08:13 +03:00

system

fix(cert-manager): raise cainjector memory limit to unblock caBundle injection

2026-07-31 10:18:03 +05:00

tests/cozy-lib-tests

refactor: replace Helm lookup with valuesFrom mechanism

2026-01-05 16:10:55 +01:00