changeset 36:6f8a6ccb2407 default tip

debugging
author drewp@bigasterisk.com
date Wed, 21 Jun 2023 23:03:05 -0700
parents 296f4a4698c6
children
files upstream/kustomization.yaml upstream/patch.yaml
diffstat 2 files changed, 74 insertions(+), 9 deletions(-) [+]
line wrap: on
line diff
--- a/upstream/kustomization.yaml	Wed Jun 21 23:02:14 2023 -0700
+++ b/upstream/kustomization.yaml	Wed Jun 21 23:03:05 2023 -0700
@@ -4,15 +4,15 @@
 patchesStrategicMerge:
   - "patch.yaml"
 
-# patches:
-#   - target:
-#       kind: Deployment
-#       name: pomerium
-#       namespace: pomerium
-#     patch: |-
-#       - op: add
-#         path: /spec/template/spec/containers/0/args/-
-#         value: "--debug"
+patches:
+  - target:
+      kind: Deployment
+      name: pomerium
+      namespace: pomerium
+    patch: |-
+      - op: add
+        path: /spec/template/spec/containers/0/args/-
+        value: "--debug"
 
   # fix for a digitalocean/dns issue https://github.com/cert-manager/cert-manager/issues/2485#issuecomment-1167314615
   - target:
--- a/upstream/patch.yaml	Wed Jun 21 23:02:14 2023 -0700
+++ b/upstream/patch.yaml	Wed Jun 21 23:03:05 2023 -0700
@@ -20,6 +20,14 @@
               cpu: 5000m
               # getting OOM at the default 1Gi
               memory: 5Gi
+
+      # only for debugging
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - { key: "kubernetes.io/hostname", operator: In, values: ["ditto"] }
 ---
 apiVersion: v1
 kind: Service
@@ -46,3 +54,60 @@
       containers:
       - name: gen-secrets
         image: bang5:5000/pomerium_ingress_controller:510
+
+      # only for debugging
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - { key: "kubernetes.io/hostname", operator: In, values: ["ditto"] }
+---
+
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager-cainjector
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      # only for debugging
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - { key: "kubernetes.io/hostname", operator: In, values: ["ditto"] }
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      # only for debugging
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - { key: "kubernetes.io/hostname", operator: In, values: ["ditto"] }
+---
+apiVersion: apps/v1
+kind: Deployment
+metadata:
+  name: cert-manager-webhook
+  namespace: cert-manager
+spec:
+  template:
+    spec:
+      # only for debugging
+      affinity:
+        nodeAffinity:
+          requiredDuringSchedulingIgnoredDuringExecution:
+            nodeSelectorTerms:
+            - matchExpressions:
+              - { key: "kubernetes.io/hostname", operator: In, values: ["ditto"] }
\ No newline at end of file