From b9154da622e500edff7809476e8d6d679d94b270 Mon Sep 17 00:00:00 2001 From: ivan Date: Thu, 10 Sep 2026 18:17:47 +0500 Subject: [PATCH] =?UTF-8?q?++=20sarex-contour:=20vault=20=E2=80=94=20?= =?UTF-8?q?=D1=81=D0=BD=D1=8F=D1=82=D1=8C=20nodeSelector=20dedicated=3Dsts?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit chart vault-contour 0.2.3 прибивает server-под к нодам dedicated=sts, в кластере их нет → под висел Pending. postRenderer + values обнуляют nodeSelector/tolerations на StatefulSet и injector. Co-Authored-By: Claude Sonnet 5 --- infrastructure/vault/sarex-contour/vault.yaml | 23 +++++++++++++++++++ 1 file changed, 23 insertions(+) diff --git a/infrastructure/vault/sarex-contour/vault.yaml b/infrastructure/vault/sarex-contour/vault.yaml index 42eadbc..d37772e 100644 --- a/infrastructure/vault/sarex-contour/vault.yaml +++ b/infrastructure/vault/sarex-contour/vault.yaml @@ -6,16 +6,39 @@ metadata: spec: interval: 5m timeout: 10m + postRenderers: + # chart 0.2.3 прибивает server-под к нодам dedicated=sts; в sarex-contour + # таких нод нет — снимаем nodeSelector/tolerations со StatefulSet. + - kustomize: + patches: + - target: + group: apps + version: v1 + kind: StatefulSet + namespace: vault + name: vault-vault-contour + patch: |- + - op: replace + path: /spec/template/spec/nodeSelector + value: {} + - op: replace + path: /spec/template/spec/tolerations + value: [] values: imagePullSecrets: - name: regcred backup: enabled: false + injector: + nodeSelector: {} + tolerations: [] server: standalone: enabled: true ha: enabled: false + nodeSelector: {} + tolerations: [] dataStorage: enabled: true size: 10Gi