Skip to content

Add helm chart for init-agent#185

Merged
kcp-ci-bot merged 5 commits intokcp-dev:mainfrom
xrstf:init-agent
Feb 18, 2026
Merged

Add helm chart for init-agent#185
kcp-ci-bot merged 5 commits intokcp-dev:mainfrom
xrstf:init-agent

Conversation

@xrstf
Copy link
Contributor

@xrstf xrstf commented Feb 9, 2026

This PR creates a new Helm chart to install init-agent.

This chart is special in a sense that it can output 3 different sets of manifests, based on the target value. This is so that you have just one chart to

  • setup the init-agent itself (i.e. a Deployment)
  • setup RBAC in a kcp workspace where InitTargets are managed
  • setup RBAC in any other kcp workspace where there are WorkspaceTypes that need initialization

I've tested this chart in a kind-based cluster using the kcp-operator to provision stuff for me. There's a documentation PR @ kcp-dev/init-agent#6 that outlines the process.

On-behalf-of: @SAP christoph.mewes@sap.com
@kcp-ci-bot kcp-ci-bot added do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. dco-signoff: yes Indicates the PR's author has signed the DCO. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. labels Feb 9, 2026
On-behalf-of: @SAP christoph.mewes@sap.com
On-behalf-of: @SAP christoph.mewes@sap.com
@xrstf xrstf changed the title WIP - Add helm chart for init-agent Add helm chart for init-agent Feb 11, 2026
@kcp-ci-bot kcp-ci-bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Feb 11, 2026
@xrstf xrstf requested a review from SimonTheLeg February 12, 2026 13:16
@@ -0,0 +1,78 @@
# KCP Helm Chart - Init Agent
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Suggested change
# KCP Helm Chart - Init Agent
# kcp Helm Chart - Init Agent

Comment on lines +13 to +24
* `""` (default) – By default, the Helm chart will output the Deployment, ServiceAccount and RBAC to
run the Init Agent on a Kubernetes cluster. For this to work, you need to provide Helm with a
kubeconfig for that cluster.
* `configcluster` – In this mode, the Helm chart outputs the RBAC necessary for the agent to read
and process its `InitTarget` objects. This is meant to be installed into the workspace that is
configured via `.configWorkspace` when installing the chart in default mode (above). This needs
to be done once, using a kubeconfig for Helm that points to the config workspace of choice in
kcp.
* `wstcluster` – This mode outputs the necessary RBAC to read and initialize `WorkspaceTypes`. This
needs to be installed into each workspace where `WorkspaceType` objects exist that are referenced
by an `InitTarget`.For this to work, you need to provide Helm with a kubeconfig that points to
the effective workspace.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Wouldn't it be overall better to just make these three separate helm charts? Although I can see the benefit of using the exact same values.yaml and just overriding the target depending on where the built yamls land.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looking at the templates however e.g. wstcluster only relies on its own information and the name of the helm deployment.
I was thinking that with all three being in the same helm chart one could at least install them all into the same kcp workspace but that doesn't work either because the target can only be one.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hmm... I feel like having multiple charts just for the init-agent is .. idk, it feels excessive. When I imagine seeing three init-agent-... charts in the charts folder.. it doesn't spark joy in me.

I have no technical arguments besides my hope that one day the setup will be much simpler and then we don't have to retire 2 charts.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Yeah I agree. TBH I don't feel strong either way, it's just an odd setup :D
But that's kinda what happens when one component interacts with ~three control planes.

Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Maybe lets make target into targets so e.g. the kcp workspace could be used as the configcluster and workspacetype cluster? Or all three if there's something providing compute for the target kcp workspace (or syncs the workspacetype from the compute cluster to the workspace)

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

mkay

On-behalf-of: @SAP christoph.mewes@sap.com
On-behalf-of: @SAP christoph.mewes@sap.com
Copy link
Member

@ntnn ntnn left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@kcp-ci-bot kcp-ci-bot added the lgtm Indicates that a PR is ready to be merged. label Feb 18, 2026
@kcp-ci-bot
Copy link
Contributor

LGTM label has been added.

DetailsGit tree hash: e12631fa353aa3cd6f128f71ec5b05762945e40d

@kcp-ci-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: ntnn

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kcp-ci-bot kcp-ci-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Feb 18, 2026
@kcp-ci-bot kcp-ci-bot merged commit a0059a0 into kcp-dev:main Feb 18, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has signed the DCO. lgtm Indicates that a PR is ready to be merged. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants