Update openmetadata helm chart to address issue #209 and #210

charts/openmetadata/Chart.yaml

@@ -16,13 +16,13 @@ type: application
 # to the chart and its templates, including the app version.
 # Versions are expected to follow Semantic Versioning (https://semver.org/)
 
-version: 1.2.6
+version: 1.2.7
 
 # This is the version number of the application being deployed. This version number should be
 # incremented each time you make changes to the application. Versions are not expected to
 # follow Semantic Versioning. They should reflect the version the application is using.
 # It is recommended to use it with quotes.
-appVersion: "1.2.4"
+appVersion: "1.2.5"
 
 home: https://open-metadata.org/
 
@@ -55,4 +55,4 @@ maintainers:
   - name: OpenMetadata
     email: support@open-metadata.org
 
-icon: https://open-metadata.org/images/favicon.png
+icon: https://open-metadata.org/images/favicon.png

charts/openmetadata/README.md

@@ -240,6 +240,10 @@ helm install openmetadata open-metadata/openmetadata --values <<path-to-values-f
 | readinessProbe.httpGet.port | string | `http` |
 | replicaCount | int | `1` |
 | resources | object | `{}` |
+| initContainerResources.limits.cpu | string | `1` |
+| initContainerResources.limits.memory | string | `2048Mi` |
+| initContainerResources.requests.cpu | string | `500m` |
+| initContainerResources.requests.memory | string | `256Mi` |
 | securityContext | object | `{}` |
 | service.adminPort | string | `8586` |
 | service.annotations | object | `{}` |
@@ -248,6 +252,7 @@ helm install openmetadata open-metadata/openmetadata --values <<path-to-values-f
 | serviceAccount.annotations | object | `{}` |
 | serviceAccount.create | bool | `true` |
 | serviceAccount.name | string | `nil` |
+| automountServiceAccountToken| bool | `true` |
 | serviceMonitor.annotations | object | `{}` |
 | serviceMonitor.enabled | bool | `false` |
 | serviceMonitor.interval | string | `30s` |
@@ -262,4 +267,4 @@ helm install openmetadata open-metadata/openmetadata --values <<path-to-values-f
 | networkPolicy.enabled | bool |`false` |
 | podDisruptionBudget.enabled | bool | `false` |
 | podDisruptionBudget.config.maxUnavailable | String | `1` |
-| podDisruptionBudget.config.minAvailable | String | `1` |
+| podDisruptionBudget.config.minAvailable | String | `1` |

charts/openmetadata/templates/deployment.yaml

@@ -23,6 +23,9 @@ spec:
         {{- toYaml . | nindent 8 }}
       {{- end }}
       serviceAccountName: {{ include "OpenMetadata.serviceAccountName" . }}
+      {{- if not (.Values.automountServiceAccountToken) }}
+      automountServiceAccountToken: {{ .Values.automountServiceAccountToken }}
+      {{- end }}
       securityContext:
         {{- toYaml .Values.podSecurityContext | nindent 8 }}
       initContainers:
@@ -36,6 +39,8 @@ spec:
           {{- with .Values.extraVolumeMounts }}
             {{- toYaml . | nindent 10 }}
           {{- end }}
+        resources:
+          {{- toYaml .Values.initContainerResources | nindent 10 }}
         envFrom:
           - secretRef:
               name: {{ include "OpenMetadata.fullname" . }}-config-secret

charts/openmetadata/values.schema.json

@@ -1014,6 +1014,12 @@
         "replicaCount": {
             "type": "integer"
         },
+        "automountServiceAccountToken": {
+            "type": "boolean"
+        },
+        "initContainerResources": {
+            "type": "object"
+        },
         "resources": {
             "type": "object"
         },
@@ -1121,4 +1127,4 @@
             }
         }
     }
-}
+}

charts/openmetadata/values.yaml

@@ -305,6 +305,7 @@ serviceAccount:
   # The name of the service account to use.
   # If not set and create is true, a name is generated using the fullname template
   name: ""
+automountServiceAccountToken: true
 podSecurityContext: {}
   # fsGroup: 2000
 securityContext: {}
@@ -362,6 +363,14 @@ extraVolumeMounts: []
 
 extraInitContainers: []
 
+initContainerResources:
+  limits:
+    cpu: 1
+    memory: 2048Mi
+  requests:
+    cpu: 500m
+    memory: 256Mi
+
 resources: {}
 # We usually recommend not to specify default resources and to leave this as a conscious
 # choice for the user. This also increases chances charts run on environments with little
@@ -409,4 +418,4 @@ podDisruptionBudget:
     minAvailable: "1"
 
 commonLabels: {}
-podAnnotations: {}
+podAnnotations: {}