feat: update peerpod-cm policy to allow adjustment of the root volume (#11)

Signed-off-by: Chris Butler <chris.butler@redhat.com>

Author: butler54

Chart.yaml

@@ -6,4 +6,4 @@ keywords:
   - confidential-computing
   - confidential-containers
 name: sandboxed-policies
-version: 0.0.3
+version: 0.0.4

README.md

@@ -1,6 +1,6 @@
 # sandboxed-policies
 
-![Version: 0.0.3](https://img.shields.io/badge/Version-0.0.3-informational?style=flat-square)
+![Version: 0.0.4](https://img.shields.io/badge/Version-0.0.4-informational?style=flat-square)
 
 A Helm chart to build and push polcies to support sandboxed containers into the spoke cluster of a validated pattern.
 
@@ -23,6 +23,8 @@ A small number of imperative jobs are also part of the coco pattern which are us
 | global.clusterPlatform | string | `""` |  |
 | global.coco.azure.VMFlavours | string | `"Standard_DC2as_v5,Standard_DC4as_v5,Standard_DC8as_v5,Standard_DC16as_v5"` |  |
 | global.coco.azure.defaultVMFlavour | string | `"Standard_DC2as_v5"` |  |
+| global.coco.azure.rootVolumeSize | string | `"20"` |  |
+| global.coco.azure.tags | string | `"key1=value1,key2=value2"` |  |
 
 ----------------------------------------------
 Autogenerated from chart metadata using [helm-docs v1.14.2](https://github.com/norwoodj/helm-docs/releases/v1.14.2)

templates/peer-pods-cm.yaml

@@ -36,6 +36,9 @@ spec:
               AZURE_NSG_ID: '/subscriptions/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).subscriptionId }}` }}/resourceGroups/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).resourceGroup }}` }}/providers/Microsoft.Network/networkSecurityGroups/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).securityGroupName }}` }}'
               DISABLECVM: "false"
               PROXY_TIMEOUT: "15m"
+              TAGS: '{{ .Values.global.coco.azure.tags }}'
+              PEERPODS_LIMIT_PER_NODE: "10"
+              ROOT_VOLUME_SIZE: '{{ .Values.global.coco.azure.rootVolumeSize }}'
               INITDATA: '{{ `{{ fromConfigMap "imperative" "initdata" "INITDATA" }}` }}'
 
 ---

values.yaml

@@ -4,4 +4,6 @@ global:
   coco:
     azure:
       defaultVMFlavour: "Standard_DC2as_v5"
-      VMFlavours: "Standard_DC2as_v5,Standard_DC4as_v5,Standard_DC8as_v5,Standard_DC16as_v5"
+      VMFlavours: "Standard_DC2as_v5,Standard_DC4as_v5,Standard_DC8as_v5,Standard_DC16as_v5"
+      tags: "key1=value1,key2=value2"
+      rootVolumeSize: "20"