Merge branch 'main' into prometheus-credentials-auto-refresh

Author: Avi-Robusta

helm/krr-enforcer/Chart.yaml

@@ -3,5 +3,5 @@ name: krr-enforcer
 description: KRR enforcer - auto apply KRR recommendations
 type: application
 
-version: 0.3.1
-appVersion: 0.3.1
+version: 0.3.4
+appVersion: 0.3.4

helm/krr-enforcer/templates/enforcer-cert-job.yaml

@@ -25,7 +25,7 @@ spec:
           emptyDir: {}
       containers:
         - name: cert-job
-          image: "bitnami/kubectl:1.30"
+          image: {{ .Values.certJob.image | quote }}
           workingDir: /tmp/certs
           volumeMounts:
             - name: workdir
@@ -36,6 +36,12 @@ spec:
             - |
               set -e
 
+              {{- if .Values.certJob.installOpenssl }}
+              # Install openssl if needed
+              echo "Installing openssl..."
+              apk add --no-cache openssl
+              {{- end }}
+
               # Generate a CA key and certificate
               echo "Generating CA certificate..."
               openssl genrsa -out ca.key 2048

helm/krr-enforcer/values.yaml

@@ -1,12 +1,17 @@
 certificate: "" # base64 encoded
 logLevel: INFO
 
+# Certificate job configuration
+certJob:
+  image: "alpine/k8s:1.30.0"  # Image with kubectl for certificate generation
+  installOpenssl: true  # Set to false if the image already includes openssl
+
 # fullImage: ~  # full image path can be used to override image.repository/image.name:image.tag
 
 image:
   repository: us-central1-docker.pkg.dev/genuine-flight-317411/devel
   name: krr-enforcer
-  tag: 0.3.1
+  tag: 0.3.4
 imagePullPolicy: IfNotPresent
 resources:
   requests: