add artifactapi image-keeper daemonset #535

Merged
benvin merged 3 commits from benvin/artifactapi-image-keeper into main 2026-10-10 01:06:10 +11:00
Member

artifactapi pulls its own images from itself, so a cold boot with every api pod down cannot pull them. Kubelet GC never removes images referenced by pods on the node, so a pod on every node holding the pinned tags keeps them local.

  • add image-keeper DaemonSet referencing the api and ui images as no-op init containers
  • run a static busybox as true inside the distroless api image
  • tolerate all taints, run at low priority with tiny non-root resources
artifactapi pulls its own images from itself, so a cold boot with every api pod down cannot pull them. Kubelet GC never removes images referenced by pods on the node, so a pod on every node holding the pinned tags keeps them local. - add image-keeper DaemonSet referencing the api and ui images as no-op init containers - run a static busybox as `true` inside the distroless api image - tolerate all taints, run at low priority with tiny non-root resources
unkin-agent added 3 commits 2026-10-09 23:30:52 +11:00
bump artifactapi to v3.13.1 from docker-internal
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
633df4d441
Merge remote-tracking branch 'origin/main' into benvin/artifactapi-image-keeper
ci/woodpecker/pr/pre-commit Pipeline was successful
ci/woodpecker/pr/kubeconform Pipeline was successful
32d4755504
Author
Member

No findings.

No findings.
benvin merged commit 69f2a2a6ec into main 2026-10-10 01:06:10 +11:00
benvin deleted branch benvin/artifactapi-image-keeper 2026-10-10 01:06:11 +11:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: unkin/argocd-apps#535