Skip to content

add agents-sandbox-controller/manager chart#168

Open
ZhaoQing7892 wants to merge 1 commit intoopenkruise:masterfrom
ZhaoQing7892:agents-charts
Open

add agents-sandbox-controller/manager chart#168
ZhaoQing7892 wants to merge 1 commit intoopenkruise:masterfrom
ZhaoQing7892:agents-charts

Conversation

@ZhaoQing7892
Copy link

No description provided.

@kruise-bot kruise-bot requested review from FillZpp and furykerry March 4, 2026 07:36
@kruise-bot
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign fillzpp for approval by writing /assign @fillzpp in a comment. For more information see:The Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kruise-bot
Copy link

Welcome @ZhaoQing7892! It looks like this is your first PR to openkruise/charts 🎉


| 参数 | 描述 | 默认值 |
|-----------------------------------------------------|--------------------------------------------------------------------|-------------------------------------------------------------------------------------------------|
| `sandboxController.replicaCount` | sandbox-controller 部署的副本数 | `3` |
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

consider change default replica counts to 2

@@ -0,0 +1,699 @@
{{- if .Values.crds.enabled }}
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

consider put crd into separate crd directory


## 配置参数

下表列出了 agents-sandbox-controller chart 的可配置参数及其默认值。
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

plz use English only in README.md, we can add README-zh_CN.md for the Chinese version

capabilities:
drop:
- ALL
readOnlyRootFilesystem: false
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

can we enable readOnlyRootFilesystem?

allowPrivilegeEscalation: false
capabilities:
drop:
- ALL
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

shall we keep NET_BIND_SERVICE, otherwise controller cannot serve metrics endpoints

securityContext:
capabilities:
drop:
- ALL
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sandbox manager need NET_BIND_SERVICE cap

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants