mirror of
https://github.com/cozystack/cozystack.git
synced 2026-11-13 08:05:19 +09:00
Aleksei Sviridkin
506dc7a4a7
Small installs such as arm64 labs had to take the whole isp-full set: KubeVirt, backups, monitoring, etcd, SeaweedFS and every paas/naas operator. The slim variants keep only the engine, tenants, ingress, gateway, LINSTOR storage and networking, and turn everything else into opt-in packages listed in bundles.enabledPackages. Full variants render the same Packages as before. Networking on isp-slim and isp-slim-generic is Cilium alone: without VMs nothing needs KubeOVN, and Cilium L2 announcements take the place of MetalLB, which stays available as an opt-in package. KubeOVN IPsec is what networking.encryption drives, so the slim variants refuse it rather than ignore it. isp-hosted-slim keeps the noop datapath. tenant-application gains a slim variant whose dependsOn drops the monitoring, etcd and seaweedfs applications; the default variant waits on them, which would leave cozystack-basics and tenant-root never Ready. The iaas bundle stays limited to the isp-full variants. objectstorage-controller stays on everywhere: cozystack-controller watches BucketClaim unconditionally, so without that CRD its manager never syncs its caches and crash-loops. Assisted-by: LLM Signed-off-by: Aleksei Sviridkin <f@lex.la>
34 lines
1.5 KiB
YAML
34 lines
1.5 KiB
YAML
migrations:
|
|
enabled: true
|
|
# Slim variants emit the base platform only; everything else is opt-in through
|
|
# bundles.enabledPackages, including every paas/naas package. iaas is refused.
|
|
# An opt-in package does not pull in its dependsOn: list the whole chain, or the
|
|
# Package stays DependenciesNotReady. The chain is the dependsOn of the
|
|
# package in sources/, followed recursively; for example harbor-application
|
|
# needs postgres-operator and redis-operator. The
|
|
# Tenant etcd, monitoring and seaweedfs switches need their application and
|
|
# its chain opted in as well.
|
|
# victoria-metrics-operator and prometheus-operator-crds stay on even without
|
|
# monitoring: linstor, the tenant ingress release and most paas operators
|
|
# depend on them.
|
|
# Networking is Cilium alone (no KubeOVN), and Cilium L2 announcements replace
|
|
# MetalLB: a LoadBalancer Service gets its address from a CiliumLoadBalancerIPPool
|
|
# announced by a CiliumL2AnnouncementPolicy, both created by the admin.
|
|
# Cilium takes pod ranges from node.spec.podCIDR, so kube-controller-manager
|
|
# must allocate node CIDRs (Talos and k3s do by default; kubeadm needs
|
|
# --pod-network-cidr). The networking.*CIDR values here are KubeOVN-only.
|
|
bundles:
|
|
system:
|
|
enabled: true
|
|
variant: "isp-slim"
|
|
iaas:
|
|
enabled: false
|
|
paas:
|
|
enabled: true
|
|
naas:
|
|
enabled: true
|
|
# Tenant/root does not run monitoring here, so the cozy-monitoring redirects
|
|
# into it would dead-end; see monitoring.rootEnabled in values.yaml.
|
|
monitoring:
|
|
rootEnabled: false
|