Files
cozystack/packages/system/harbor/templates/redis.yaml
T
Andrei Kvapil fde96dd7da fix(redis): pin the Redis engine at 6.2.6 in both RedisFailover charts
The freshworks-oss operator's compiled-in default image moved from
redis:6.2.6-alpine to 7.2.4; Harbor pinned no image at all and apps/redis left
its sentinels unpinned, so an upgrade would move them silently. 7.2.4 rewrites
dump.rdb into a format 6.2.6 refuses to load, so a platform rollback would leave
Harbor's Redis crash-looping on its own data. Pin redis+sentinel (Harbor) and
the sentinel (apps/redis) at the version they run today; bump deliberately and
separately.

Assisted-By: Claude <noreply@anthropic.com>
Signed-off-by: Andrei Kvapil <andrei.kvapil@aenix.io>
2026-08-19 10:15:58 +02:00

76 lines
2.4 KiB
YAML

---
apiVersion: v1
kind: Secret
metadata:
name: {{ .Values.harbor.fullnameOverride }}-redis-auth
stringData:
password: {{ .Values.redis.password | quote }}
---
apiVersion: databases.spotahome.com/v1
kind: RedisFailover
metadata:
name: {{ .Values.harbor.fullnameOverride }}-redis
labels:
app.kubernetes.io/instance: {{ .Values.harbor.fullnameOverride }}-redis
app.kubernetes.io/managed-by: {{ .Release.Service }}
# The freshworks-oss operator reconciles only RedisFailovers whose
# operator-group label matches its OPERATOR_GROUP_ID (see
# packages/system/redis-operator/values.yaml); without it Harbor's Redis is
# never provisioned and harbor-core CrashLoops. Keep both sides in sync.
redis-failover.freshworks.com/operator-group: cozystack
spec:
sentinel:
# Pin the engine. The freshworks-oss operator's compiled-in default moved
# 6.2.6→7.2.4 between forks, and an unpinned image would silently jump on
# upgrade — with no rollback path, since 7.x rewrites the on-disk format
# 6.2.6 refuses to load. Keep Harbor's Redis on the version it runs today;
# bump it as a deliberate, separate change.
image: redis:6.2.6-alpine
replicas: 3
resources:
limits:
cpu: 250m
memory: 128Mi
requests:
cpu: 250m
memory: 128Mi
redis:
# Pin the engine (see the sentinel note above): an upgrade must not rewrite
# Harbor's dump.rdb into a 7.x format a platform rollback can no longer load.
image: redis:6.2.6-alpine
replicas: {{ .Values.redis.replicas }}
resources:
limits:
cpu: "1"
memory: 1024Mi
requests:
cpu: 100m
memory: 256Mi
storage:
persistentVolumeClaim:
metadata:
name: redisfailover-persistent-data
spec:
accessModes:
- ReadWriteOnce
resources:
requests:
storage: {{ .Values.redis.size }}
{{- with .Values.redis.storageClass }}
storageClassName: {{ . }}
{{- end }}
exporter:
enabled: true
image: oliver006/redis_exporter:v1.55.0-alpine
args:
- --web.telemetry-path
- /metrics
env:
- name: REDIS_EXPORTER_LOG_FORMAT
value: txt
customConfig:
- tcp-keepalive 0
- loglevel notice
auth:
secretPath: {{ .Values.harbor.fullnameOverride }}-redis-auth