From 6ea893843b1887c59f3cd0c476a04b0490543c70 Mon Sep 17 00:00:00 2001 From: Alexey Novakov Date: Tue, 21 Jul 2020 10:27:22 +0200 Subject: [PATCH 1/3] add statetfulset pod annotation Signed-off-by: Alexey Novakov --- templates/statefulset.yaml | 5 +++++ values.yaml | 4 ++++ 2 files changed, 9 insertions(+) diff --git a/templates/statefulset.yaml b/templates/statefulset.yaml index 32c97067..e4cccbf3 100644 --- a/templates/statefulset.yaml +++ b/templates/statefulset.yaml @@ -18,8 +18,13 @@ spec: release: {{ .Release.Name }} template: metadata: +{{- if .Values.sts.pod.annotations }} + annotations: +{{ toYaml .Values.sts.pod.annotations | indent 8 }} +{{- else }} annotations: security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000 +{{- end }} labels: app: {{ include "apache-nifi.name" . | quote }} chart: "{{ .Chart.Name }}-{{ .Chart.Version | replace "+" "_" }}" diff --git a/values.yaml b/values.yaml index 4dda5e7a..61290da1 100644 --- a/values.yaml +++ b/values.yaml @@ -25,6 +25,10 @@ sts: podManagementPolicy: Parallel AntiAffinity: soft hostPort: null + pod: + annotations: + security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000 + #prometheus.io/scrape: "true" ## Useful if using any custom secrets ## Pass in some secrets to use (if required) From fcdfb28410a114d4530f6aa4305b0e0cc28e5b41 Mon Sep 17 00:00:00 2001 From: Alexey Novakov Date: Tue, 21 Jul 2020 10:28:03 +0200 Subject: [PATCH 2/3] bump charts version Signed-off-by: Alexey Novakov --- Chart.yaml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/Chart.yaml b/Chart.yaml index 0de3ba3f..5a72dba3 100644 --- a/Chart.yaml +++ b/Chart.yaml @@ -1,7 +1,7 @@ --- apiVersion: v2 name: nifi -version: 0.4.3 +version: 0.4.4 appVersion: 1.11.4 description: Apache NiFi is a software project from the Apache Software Foundation designed to automate the flow of data between software systems. keywords: From 3d46f22b7b10622cbc8b1bfb1edca6b89f3c8a49 Mon Sep 17 00:00:00 2001 From: Alexey Novakov Date: Tue, 21 Jul 2020 10:31:14 +0200 Subject: [PATCH 3/3] update readme Signed-off-by: Alexey Novakov --- README.md | 1 + 1 file changed, 1 insertion(+) diff --git a/README.md b/README.md index a5db264d..f8098d20 100644 --- a/README.md +++ b/README.md @@ -83,6 +83,7 @@ The following table lists the configurable parameters of the nifi chart and the | **sts** | | `sts.podManagementPolicy` | Parallel podManagementPolicy | `Parallel` | | `sts.AntiAffinity` | Affinity for pod assignment | `soft` | +| `sts.pod.annotations` | Pod template annotations | `security.alpha.kubernetes.io/sysctls: net.ipv4.ip_local_port_range=10000 65000` | | **secrets** | `secrets` | Pass any secrets to the nifi pods. The secret can also be mounted to a specific path if required. | `nil` | | **configmaps**