Skip to content

Conversation

@SharonDiskin
Copy link

@SharonDiskin SharonDiskin commented Jul 18, 2025

Description

This pull request resolves a Helm templating bug in the Emissary-ingress Deployment manifest. Previously, user-provided initContainers were incorrectly merged into the args field of the chart's internal wait-for-apiext init container, causing deployment failures. The goal of this change is to ensure that custom init containers are correctly added as distinct, top-level entries within the Pod's initContainers list.

Related Issues

[If there's an existing GitHub issue for this bug, list it here, e.g., "Fixes #1234". If not, consider creating one and linking it.]

Testing

I've performed comprehensive local testing using helm template --debug to inspect the generated Kubernetes manifests. This confirmed that the initContainers section in the rendered Deployment YAML now correctly includes both the wait-for-apiext container and the custom fix-log-permissions container as separate, valid entries. Additionally, the updated chart was successfully deployed to a test EKS cluster, where the fix-log-permissions init container (using the busybox image and runAsUser: 0) executed as expected. I verified that the target hostPath directory (/var/log/emissary) was created and writable, and that a Filebeat pod on the same node could successfully read logs from this location after its configuration was updated to include the necessary volume mount.

Checklist

  • Does my change need to be backported to a previous release?

    • What backport versions were discussed with the Maintainers in the Issue?
      [Discuss with maintainers if this fix should be backported to older Emissary-ingress branches (e.g., v3.x, v2.x) if it affects those versions. If yes, state the versions here.]
  • I made sure to update CHANGELOG.md.

  • This is unlikely to impact how Ambassador performs at scale.
    This change is a Helm templating fix and does not alter Emissary's runtime behavior, resource consumption, or scaling characteristics.

  • My change is adequately tested.

  • I updated CONTRIBUTING.md with any special dev tricks I had to use to work on this code efficiently.

  • The changes in this PR have been reviewed for security concerns and adherence to security best practices.

@dosubot dosubot bot added size:L This PR changes 100-499 lines, ignoring generated files. t:bug Something isn't working labels Jul 18, 2025
@SharonDiskin SharonDiskin force-pushed the Sharon/fixInitContainers branch from d858096 to e57e4ad Compare July 18, 2025 20:13
Signed-off-by: SharonDiskin <[email protected]>
Signed-off-by: SharonDiskin <[email protected]>
@SharonDiskin SharonDiskin force-pushed the Sharon/fixInitContainers branch from 83a39db to 5a49803 Compare July 18, 2025 20:59
@SharonDiskin SharonDiskin changed the title Fix init container indentation [Bug FIX] init container indentation fix Jul 19, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

size:L This PR changes 100-499 lines, ignoring generated files. t:bug Something isn't working

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Ambassador scout trying to reach an external server without consent

1 participant