fix: add support for root modules and debug support (#12)

* feat: update peerpod-cm policy to allow adjustment of the root volume

Signed-off-by: Chris Butler <chris.butler@redhat.com>

* fix: add CUSTOM_CLOUD_INIT_MODULES when SSH debug enabled

* fix: bump versions

Signed-off-by: Chris Butler <chris.butler@redhat.com>

---------

Signed-off-by: Chris Butler <chris.butler@redhat.com>
Co-authored-by: Beraldo Leal <bleal@redhat.com>

Author: butler54

Chart.yaml

@@ -6,4 +6,4 @@ keywords:
   - confidential-computing
   - confidential-containers
 name: sandboxed-policies
-version: 0.0.4
+version: 0.1.0

README.md

@@ -1,6 +1,6 @@
 # sandboxed-policies
 
-![Version: 0.0.4](https://img.shields.io/badge/Version-0.0.4-informational?style=flat-square)
+![Version: 0.1.0](https://img.shields.io/badge/Version-0.1.0-informational?style=flat-square)
 
 A Helm chart to build and push polcies to support sandboxed containers into the spoke cluster of a validated pattern.
 

templates/peer-pods-cm.yaml

@@ -35,6 +35,9 @@ spec:
               AZURE_SUBNET_ID: '/subscriptions/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).subscriptionId }}` }}/resourceGroups/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).vnetResourceGroup }}` }}/providers/Microsoft.Network/virtualNetworks/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).vnetName }}` }}/subnets/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).subnetName }}` }}'
               AZURE_NSG_ID: '/subscriptions/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).subscriptionId }}` }}/resourceGroups/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).resourceGroup }}` }}/providers/Microsoft.Network/networkSecurityGroups/{{ `{{ (fromJson (fromConfigMap "openshift-cloud-controller-manager" "cloud-conf" "cloud.conf" | toLiteral)).securityGroupName }}` }}'
               DISABLECVM: "false"
+              {{- if .Values.global.coco.enableSSHDebug }}
+              CUSTOM_CLOUD_INIT_MODULES: "no"
+              {{- end }}
               PROXY_TIMEOUT: "15m"
               TAGS: '{{ .Values.global.coco.azure.tags }}'
               PEERPODS_LIMIT_PER_NODE: "10"