Skip to content

Conversation

@basti1302
Copy link
Member

@basti1302 basti1302 commented Nov 6, 2025

Stacked PR, #571 needs to be merged first.

Also, this is very much WIP and not in any shape to be merged as-is.

If the Helm value operator.gke.autopilot.enabled is true, deploy the
Dash0 AllowlistSynchronizer so the Dash0 WorkloadAllowlist resources
will be installed into the cluster.

The resource is annotated as a Helm hook (pre-install,pre-upgrade) to
make sure the WorkloadAllowlist are rolled out before the rest of the
Helm chart, that is, before the operator manager deployment (since that
workload already needs the exemption to be in place).

Additionally, lift the following feature set restrictions in GKE
Autopilot mode:
- allow node affinities on GKE Autopilot
- enable host metrics receiver on GKE Autopilot
This was an attempt to get automatic deletion of the
allowlistsynchronizer to work without requesting a new
WorkloadAllowlist first, by cramming it into the pre-delete hook.
Unfortunately, this is not an option -- the associated
WorkloadAllowlists will be deleted immediately, while some Dash0
operator workloads are still present in the cluster, which produces
"interesting" errors and ultimately an inconsistent state.
Instead, we have to go the proper route, update the set of
WorkloadAllowlists, add one for a new post-delete job there, wait for it
to be reviewed and merged, and then roll out a new version of the
operator that includes this additional cleanup hook.

This commit/branch is mostly to keep the work for deleting the
AllowlistSynchronizer, with the expectation that we move it to a new
hook and untangle it from the existing pre-delete hook code. The
business with the separate Goroutine and wait group can probably be
removed again then.

[skip ci]
@sonarqubecloud
Copy link

sonarqubecloud bot commented Nov 6, 2025

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants