Add Trivy integration to noble cluster setup, including namespace and application configurations. Update README and playbook tags to reflect new security scanning capabilities. Enhance Longhorn and kube-prometheus-stack deployment reliability with increased timeout settings and retry mechanisms.
This commit is contained in:
@@ -2,3 +2,7 @@
|
||||
# Helm --wait default (5m) is often too short for first Longhorn install on several nodes
|
||||
# (image pulls + manager/driver ordering). See ansible/roles/noble_metallb/defaults/main.yml.
|
||||
noble_helm_longhorn_wait_timeout: 20m
|
||||
|
||||
# Transient Kyverno webhook timeouts during post-upgrade hooks / admission storms.
|
||||
noble_helm_longhorn_retries: 8
|
||||
noble_helm_longhorn_retry_delay: 25
|
||||
|
||||
@@ -31,4 +31,8 @@
|
||||
- "{{ noble_helm_longhorn_wait_timeout }}"
|
||||
environment:
|
||||
KUBECONFIG: "{{ noble_kubeconfig }}"
|
||||
register: noble_longhorn_helm
|
||||
retries: "{{ noble_helm_longhorn_retries | int }}"
|
||||
delay: "{{ noble_helm_longhorn_retry_delay | int }}"
|
||||
until: noble_longhorn_helm.rc == 0
|
||||
changed_when: true
|
||||
|
||||
Reference in New Issue
Block a user