add artifactapi image-keeper daemonset (#535)

artifactapi pulls its own images from itself, so a cold boot with every api pod down cannot pull them. Kubelet GC never removes images referenced by pods on the node, so a pod on every node holding the pinned tags keeps them local.

- add image-keeper DaemonSet referencing the api and ui images as no-op init containers
- run a static busybox as `true` inside the distroless api image
- tolerate all taints, run at low priority with tiny non-root resources

Reviewed-on: #535
Co-authored-by: unkin-agent <unkin-agent@unkin.net>
Co-committed-by: unkin-agent <unkin-agent@unkin.net>

This commit was merged in pull request #535.

This commit is contained in:

Unkin Agent

2026-10-10 01:06:10 +11:00

committed by

BenVincent

parent f89927b1f4

commit 69f2a2a6ec

2 changed files with 106 additions and 0 deletions

									
										apps/base/artifactapi/kustomization.yaml
									
		+1
		
												View File
												
				@@ -11,6 +11,7 @@ resources:

				  - cnpg_pooler.yaml

				  - gateway.yaml

				  - httproute.yaml

				  - image-keeper.yaml

				  - namespace.yaml

				  - oauth2-proxy-configmap.yaml

				  - oauth2-proxy-deployment.yaml