titan/atlas-iac
3
0
Fork 0
Code Issues Pull Requests 9 Actions Packages Projects Releases Wiki Activity

hermes: fit node access on constrained workers

Browse Source
This commit is contained in:
jenkins 2026-08-15 14:17:38 -03:00
parent 0843b24625
commit 6f459dfc63
2 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
services/hermes/node-ssh-access.yaml
View File

@ -32,6 +32,10 @@ spec:
{{- end }}
vault.hashicorp.com/agent-pre-populate-only: "true"
vault.hashicorp.com/agent-init-first: "true"
vault.hashicorp.com/agent-requests-cpu: 5m
vault.hashicorp.com/agent-requests-mem: 16Mi
vault.hashicorp.com/agent-limits-cpu: 50m
vault.hashicorp.com/agent-limits-mem: 64Mi
spec:
serviceAccountName: hermes-node-ssh-access
automountServiceAccountToken: true

2
testing/tests/test_hermes_cli_lanes.py
View File

@ -973,6 +973,8 @@ def test_owner_agent_has_pinned_dedicated_node_ssh_access():
assert pod_annotations[
"vault.hashicorp.com/agent-inject-secret-node-ssh-public-key"
] == "kv/data/atlas/hermes/developer-ssh"
assert pod_annotations["vault.hashicorp.com/agent-requests-cpu"] == "5m"
assert pod_annotations["vault.hashicorp.com/agent-requests-mem"] == "16Mi"
host_home = next(item for item in pod["volumes"] if item["name"] == "host-home")
assert host_home["hostPath"] == {"path": "/home", "type": "Directory"}
reconciler = pod["containers"][0]["args"][0]