🐝 bringback mc 🤦‍♀️ 🐝

charts/ipa/templates/machineconfig.yaml

@@ -0,0 +1,28 @@
+# https://access.redhat.com/solutions/4910611
+---
+apiVersion: machineconfiguration.openshift.io/v1
+kind: MachineConfig
+metadata:
+  labels:
+    {{- if .Values.runOnInfra }}
+    machineconfiguration.openshift.io/role: infra
+    {{- else }}
+    machineconfiguration.openshift.io/role: worker
+    {{- end }}
+  name: 01-sebool
+spec:
+  config:
+    ignition:
+      version: {{ .Values.machineconfig.ignition_version }}
+    systemd:
+      units:
+      - contents: |
+          [Unit]
+          Description=Enable container_manage_cgroup on worker nodes
+          Before=kubelet.service
+          [Service]
+          ExecStart=/usr/sbin/setsebool container_manage_cgroup 1
+          [Install]
+          WantedBy=multi-user.target
+        enabled: true
+        name: sebool.service

charts/ipa/values.yaml

@@ -5,7 +5,7 @@ admin_password: Passw0rd123
 realm: "-r redhatlabs.dev"
 
 # sensible defaults
-image: freeipa-server:latest
+image: quay.io/freeipa/freeipa-server@sha256:b7e79f8430a1d8ab7293c1f249162ca92eb5d5d2ce6a1f73c6a85e95a09c2da3
 install_opts: "-U --setup-dns --no-forwarders --no-ntp"
 container_args: "ipa-server-install"
 volume: 5Gi