Add option for audit to writeToRAMDisk to chart (#1660)

Signed-off-by: Rita Zhang <[email protected]>
open-policy-agent · Nov 11, 2021 · f43223e · f43223e
1 parent c2119e8
commit f43223e
Show file tree

Hide file tree

Showing 4 changed files with 11 additions and 0 deletions.
diff --git a/cmd/build/helmify/main.go b/cmd/build/helmify/main.go
@@ -125,6 +125,10 @@ func (ks *kindSet) Write() error {
 				obj = strings.Replace(obj, "      priorityClassName: system-cluster-critical", "      {{- if .Values.audit.priorityClassName }} \n      priorityClassName:  {{ .Values.audit.priorityClassName }}\n      {{- end }}", 1)
 			}
 
+			if name == "gatekeeper-audit" && kind == DeploymentKind {
+				obj = strings.Replace(obj, "      - emptyDir: {}", "      {{- if .Values.audit.writeToRAMDisk }} \n      - emptyDir:\n          medium: Memory\n      {{ else }} \n      - emptyDir: {}\n      {{- end }}", 1)
+			}
+
 			if kind == DeploymentKind {
 				obj = strings.Replace(obj, "      labels:", "      labels:\n{{- include \"gatekeeper.podLabels\" . }}", 1)
 			}

diff --git a/cmd/build/helmify/static/values.yaml b/cmd/build/helmify/static/values.yaml
@@ -76,6 +76,7 @@ audit:
   affinity: {}
   tolerations: []
   nodeSelector: { kubernetes.io/os: linux }
+  writeToRAMDisk: false
   resources:
     limits:
       cpu: 1000m

diff --git a/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml b/manifest_staging/charts/gatekeeper/templates/gatekeeper-audit-deployment.yaml
@@ -113,5 +113,10 @@ spec:
       tolerations:
         {{- toYaml .Values.audit.tolerations | nindent 8 }}
       volumes:
+      {{- if .Values.audit.writeToRAMDisk }} 
+      - emptyDir:
+          medium: Memory
+      {{ else }} 
       - emptyDir: {}
+      {{- end }}
         name: tmp-volume
diff --git a/manifest_staging/charts/gatekeeper/values.yaml b/manifest_staging/charts/gatekeeper/values.yaml
@@ -76,6 +76,7 @@ audit:
   affinity: {}
   tolerations: []
   nodeSelector: { kubernetes.io/os: linux }
+  writeToRAMDisk: false
   resources:
     limits:
       cpu: 1000m