mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-09 14:02:56 +09:00
Distroless images (cert-manager and friends) ship no shell or /bin/sleep, so the previous `command: ["sleep", "infinity"]` failed with exec ENOENT. Stage busybox:musl (statically linked) into a shared emptyDir from an initContainer; every prepull container then execs /shared/sleep regardless of what the image itself ships. The glibc busybox tag is unusable here — it needs /lib64/ld-linux-x86-64.so.2 which distroless images lack. Re-adds cert-manager to the prepull set in the install bats so its 4 images are cached on every node before the HelmRelease installs. Verified locally in a single-node kind v1.32: all 4 cert-manager-* images plus busybox pulled and held Ready under this DaemonSet. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com> Signed-off-by: Myasnikov Daniil <myasnikovdaniil2001@gmail.com>