Skip to content

fix: correct bare-metal custom S3 dataplane values#255

Draft
mhotan wants to merge 1 commit intomike/baremetal-custom-s3-testfrom
mike/baremetal-custom-s3-fixes
Draft

fix: correct bare-metal custom S3 dataplane values#255
mhotan wants to merge 1 commit intomike/baremetal-custom-s3-testfrom
mike/baremetal-custom-s3-fixes

Conversation

@mhotan
Copy link
Contributor

@mhotan mhotan commented Feb 26, 2026

Summary

Fixes 6 deployment issues found in the bare-metal custom S3 dataplane values test case (see draft PR #253 for the "before" state and review comments).

Fixes applied

# Severity Issue Before After
1 HIGH imageBuilder.defaultRepository has protocol prefix https://ghcr.io/acme-corp/acme/union ghcr.io/acme-corp/acme/union
2 HIGH storage.region not set at top level Defaults to us-east-1 region: RNO2A added
3 HIGH Duplicate container: key in rendered YAML storage.custom.container duplicates storage.bucketName Removed container from storage.custom
4 MEDIUM OpenCost enabled without Prometheus Pods crashloop on missing service opencost.enabled: false
5 MEDIUM AWS IAM annotations on bare-metal eks.amazonaws.com/role-arn on every SA userRoleAnnotationKey: ""
6 LOW Orphaned monitoring resources ServiceMonitors with no Prometheus monitoring.enabled: false, cost.enabled: false

Impact

Generated manifest reduced from 2765 → 1754 lines (-1011 lines of unnecessary resources).

Not fixed (chart-level bug)

namespace_config.yaml in clusterresourcesync/configmap.yaml doesn't use tpl, causing backtick escapes to appear literally. This requires a chart template fix, not a values fix.

Test plan

  • make generate-expected passes
  • make helm-test passes
  • No duplicate YAML keys in generated manifest
  • bucketRegion correctly resolves to RNO2A
  • No OpenCost/monitoring resources rendered
  • No AWS-specific annotations present

🤖 Generated with Claude Code

Fixes 6 issues found during deployment review of a bare-metal
S3-compatible storage deployment:

1. Remove https:// from imageBuilder.defaultRepository
2. Add storage.region at top level to match stow region (RNO2A)
3. Remove container from storage.custom (eliminates duplicate YAML key)
4. Disable opencost (requires prometheus which is disabled)
5. Clear AWS IAM role annotations (not applicable to bare-metal)
6. Disable monitoring and cost (require prometheus)

Generated manifest reduced from 2765 to 1754 lines.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@mhotan mhotan marked this pull request as draft February 26, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant