Ephemeral volume for worker /tmp

deepfence · Oct 15, 2024 · d3a59da · d3a59da
1 parent c286b89
commit d3a59da
Show file tree

Hide file tree

Showing 4 changed files with 40 additions and 3 deletions.
diff --git a/deployment-scripts/helm-charts/deepfence-console/Chart.yaml b/deployment-scripts/helm-charts/deepfence-console/Chart.yaml
@@ -2,5 +2,5 @@ apiVersion: v2
 name: deepfence-console
 description: A Helm chart for Kubernetes
 type: application
-version: 2.4.0
+version: 2.4.1
 appVersion: 2.4.0
diff --git a/deployment-scripts/helm-charts/deepfence-console/templates/deepfence-worker.yaml b/deployment-scripts/helm-charts/deepfence-console/templates/deepfence-worker.yaml
@@ -87,6 +87,11 @@ spec:
           #     port: http
           resources:
             {{- toYaml .Values.worker.resources | nindent 12 }}
+          {{- if .Values.worker.ephemeralVolume.create }}
+          volumeMounts:
+          - mountPath: /tmp
+            name: worker-tmp-volume
+          {{- end }}
       {{- with .Values.worker.nodeSelector }}
       nodeSelector:
         {{- toYaml . | nindent 8 }}
@@ -99,6 +104,21 @@ spec:
       tolerations:
         {{- toYaml . | nindent 8 }}
       {{- end }}
+      {{- if .Values.worker.ephemeralVolume.create }}
+      volumes:
+      - name: worker-tmp-volume
+        ephemeral:
+          volumeClaimTemplate:
+            metadata:
+              labels:
+                {{- include "deepfence-console.labels" . | nindent 16 }}
+            spec:
+              accessModes: [ "ReadWriteOnce" ]
+              storageClassName: {{ default .Values.global.storageClass .Values.worker.ephemeralVolume.storageClass }}
+              resources:
+                requests:
+                  storage: {{ .Values.worker.ephemeralVolume.volumeSize }}
+      {{- end }}
 ---
 apiVersion: v1
 kind: Service

diff --git a/deployment-scripts/helm-charts/deepfence-console/values.yaml b/deployment-scripts/helm-charts/deepfence-console/values.yaml
@@ -14,7 +14,7 @@ global:
   # this image tag is used everywhere for console services
   # to override set tag at service level
   imageTag: 2.4.0
-  storageClass: "standard"
+  storageClass: ""
   # used in service name generation
   # <service>.<namespace>.svc.<cluster_domain>
   cluster_domain: "cluster.local"
@@ -408,6 +408,13 @@ worker:
   tolerations: []
   affinity: {}
   podLabels: {}
+  ephemeralVolume:
+    # Create ephemeral volume and mount it at /tmp
+    create: false
+    # Storage class
+    # AWS: gp3, GCP: standard
+    storageClass: ""
+    volumeSize: 200G
 
 ingester:
   replicaCount: 1

diff --git a/deployment-scripts/helm-charts/index.yaml b/deployment-scripts/helm-charts/index.yaml
@@ -312,6 +312,16 @@ entries:
     - deepfence-agent-1.0.0.tgz
     version: 1.0.0
   deepfence-console:
+  - apiVersion: v2
+    appVersion: 2.4.0
+    created: "2024-10-15T22:15:18.185303+05:30"
+    description: A Helm chart for Kubernetes
+    digest: e9428315f126ffbd961dbe59ebef4f5b4d389e86142ce532903ceb21e9c31112
+    name: deepfence-console
+    type: application
+    urls:
+    - deepfence-console-2.4.1.tgz
+    version: 2.4.1
   - apiVersion: v2
     appVersion: 2.4.0
     created: "2024-10-07T20:53:51.55053+05:30"
@@ -823,4 +833,4 @@ entries:
     urls:
     - deepfence-router-1.0.0.tgz
     version: 1.0.0
-generated: "2024-10-10T14:42:06.186533+05:30"
+generated: "2024-10-15T22:15:18.183859+05:30"