Only pull container images when not present (!164) · Merge requests · Platform / Infrastructure / CI CD / Helm charts for swh packages

Nicolas Dandrimont requested to merge mr/pull-policy into production Oct 02, 2023

The bullseye images are only updated once in a while (and we only use them for trivial tasks). Our own images are never updated on the same tag. Either way we can avoid pulling them all the time.

Helm diff output

p ```diff [swh] Comparing changes between branches production and mr/pull-policy... Your branch is up to date with 'origin/production'. [swh] Generate config in production branch for swh/values/default.yaml... [swh] Generate config in production branch for swh/values/minikube.yaml... [swh] Generate config in production branch for swh/values/production.yaml... [swh] Generate config in production branch for swh/values/production-cassandra.yaml... [swh] Generate config in production branch for swh/values/staging.yaml... [swh] Generate config in production branch for swh/values/staging-cassandra.yaml... Your branch is up to date with 'origin/mr/pull-policy'. [swh] Generate config in mr/pull-policy branch for swh/values/default.yaml... [swh] Generate config in mr/pull-policy branch for swh/values/minikube.yaml... [swh] Generate config in mr/pull-policy branch for swh/values/production.yaml... [swh] Generate config in mr/pull-policy branch for swh/values/production-cassandra.yaml... [swh] Generate config in mr/pull-policy branch for swh/values/staging.yaml... [swh] Generate config in mr/pull-policy branch for swh/values/staging-cassandra.yaml...

------------- diff for swh/values/default.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/default.yaml.before 2023-10-02 17:05:55.934913975 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/default.yaml.after 2023-10-02 17:05:57.094931016 +0200 @@ -186,21 +186,21 @@ matchLabels: app: prometheus-statsd-exporter template: metadata: labels: app: prometheus-statsd-exporter spec: containers: - name: prometheus-statsd-exporter image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

------------- diff for swh/values/minikube.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/minikube.yaml.before 2023-10-02 17:05:56.030915386 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/minikube.yaml.after 2023-10-02 17:05:57.206932662 +0200 @@ -188,21 +188,21 @@ template: metadata: labels: app: prometheus-statsd-exporter spec: priorityClassName: swh-system

   containers:
   - name: prometheus-statsd-exporter
     image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

------------- diff for swh/values/production.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/production.yaml.before 2023-10-02 17:05:56.334919852 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/production.yaml.after 2023-10-02 17:05:57.490936834 +0200 @@ -5403,21 +5403,21 @@ app: checker-deposit annotations: # Force a rollout upgrade if the configuration changes checksum/config: b244f0a6f87449102188f8a91c34e7aefb3eecc48d3aba2ee4d7a2f9f7fdbe15 spec: priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5450,21 +5450,21 @@ - name: checker-deposit resources: requests: memory: 100Mi cpu: 100m limits: memory: 1024Mi cpu: 1000m

     image: container-registry.softwareheritage.org/swh/infra/swh-apps/deposit_checkers:20230928.1

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5554,21 +5554,21 @@ app: graphql annotations: # Force a rollout upgrade if the configuration changes checksum/config: 547d1108924c26e9a377908838b7fdb97999d41d7aeb5c52efa8fc3b0d10a2a1 spec: priorityClassName: swh-frontend-rpc

   containers:
     - name: graphql
       image: container-registry.softwareheritage.org/swh/infra/swh-apps/graphql:20230928.2

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     resources:
       requests:
         memory: 150Mi
         cpu: 50m
     ports:
       - containerPort: 5013
         name: rpc
     startupProbe:
       httpGet:
         path: /

@@ -5653,21 +5653,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5688,21 +5688,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 600Mi cpu: 200m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5816,21 +5816,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5851,21 +5851,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5979,21 +5979,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6014,21 +6014,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6142,21 +6142,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6177,21 +6177,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6305,21 +6305,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6340,21 +6340,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6468,21 +6468,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6503,21 +6503,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6631,21 +6631,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6666,21 +6666,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6794,21 +6794,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6829,21 +6829,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6957,21 +6957,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6992,21 +6992,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7120,21 +7120,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7155,21 +7155,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7283,21 +7283,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7318,21 +7318,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7446,21 +7446,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7481,21 +7481,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7609,21 +7609,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7644,21 +7644,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7772,21 +7772,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7807,21 +7807,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7935,21 +7935,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7970,21 +7970,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8098,21 +8098,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8133,21 +8133,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 6144Mi cpu: 1000m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8261,21 +8261,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8296,21 +8296,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8424,21 +8424,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8459,21 +8459,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8587,21 +8587,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8622,21 +8622,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8750,21 +8750,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8785,21 +8785,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8913,21 +8913,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8948,21 +8948,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9076,21 +9076,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -9111,21 +9111,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9239,21 +9239,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -9274,21 +9274,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9402,21 +9402,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -9437,21 +9437,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9565,21 +9565,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -9600,21 +9600,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9728,21 +9728,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -9763,21 +9763,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9890,21 +9890,21 @@ - key: swh/loader-metadata operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     - name: BROKER_USER_PASSWORD
       valueFrom:
         secretKeyRef:
           name: swh-archive-broker-secret
           key: BROKER_USER_PASSWORD
           optional: true
     command:
       - /entrypoint.sh
     volumeMounts:

@@ -9915,21 +9915,21 @@ - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: metadata-fetcher-credentials mountPath: /etc/credentials/metadata-fetcher readOnly: true containers: - name: loader-metadata image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_metadata:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 350Mi
       cpu: 80m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -10016,21 +10016,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10049,21 +10049,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 500m
     limits:
       memory: 25600Mi
   lifecycle:
     preStop:

@@ -10184,21 +10184,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10217,21 +10217,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 500m
     limits:
       memory: 25600Mi
   lifecycle:
     preStop:

@@ -10352,21 +10352,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10385,21 +10385,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -10518,21 +10518,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10551,21 +10551,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_bzr:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 1000m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -10684,21 +10684,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10717,21 +10717,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -10850,21 +10850,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -10883,21 +10883,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_cvs:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11016,21 +11016,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11049,21 +11049,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11181,21 +11181,21 @@ - matchExpressions: - key: swh/loader operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload terminationGracePeriodSeconds: 3600 initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11229,21 +11229,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11361,21 +11361,21 @@ - matchExpressions: - key: swh/loader operator: In values: - "true" priorityClassName: swh-low-workload terminationGracePeriodSeconds: 3600 initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11394,21 +11394,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 768Mi
       cpu: 100m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11531,21 +11531,21 @@ - key: swh/large-scratch-fs operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11564,21 +11564,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 800m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11697,21 +11697,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11730,21 +11730,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -11863,21 +11863,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -11896,21 +11896,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 600Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12029,21 +12029,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12062,21 +12062,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_mercurial:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 128Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12195,21 +12195,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12228,21 +12228,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 512Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12361,21 +12361,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12394,21 +12394,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12527,21 +12527,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12560,21 +12560,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 1000m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12693,21 +12693,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12726,21 +12726,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -12859,21 +12859,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -12892,21 +12892,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -13025,21 +13025,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -13058,21 +13058,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_savecodenow:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 2048Mi
       cpu: 200m
     limits:
       memory: 25600Mi
   lifecycle:
     preStop:

@@ -13193,21 +13193,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -13226,21 +13226,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_svn:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 6144Mi
       cpu: 100m
     limits:
       memory: 25600Mi
   lifecycle:
     preStop:

@@ -13415,21 +13415,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -13482,21 +13482,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -13534,21 +13534,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -13602,21 +13602,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -13654,21 +13654,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -13741,21 +13741,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -13793,21 +13793,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: configuration-template
       mountPath: /etc/swh/configuration-template

@@ -13846,21 +13846,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: scheduler-journal-client-configuration-template
     items:

@@ -13898,21 +13898,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -13960,21 +13960,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: scheduler-schedule-recurrent-configuration-template
     items:

@@ -14013,21 +14013,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -14040,21 +14040,21 @@ mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template containers: - name: scheduler-rpc resources: requests: memory: 512Mi cpu: 500m image: container-registry.softwareheritage.org/swh/infra/swh-apps/scheduler:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5008
         name: rpc
     readinessProbe:
       httpGet:
         path: /
         port: rpc
       initialDelaySeconds: 15
       failureThreshold: 30
       periodSeconds: 5

@@ -14124,21 +14124,21 @@ template: metadata: labels: app: prometheus-statsd-exporter spec: priorityClassName: swh-system

   containers:
   - name: prometheus-statsd-exporter
     image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

@@ -14170,21 +14170,21 @@ annotations: # Force a rollout upgrade if the configuration changes checksum/config: 8209cd49158f81821478551233ea50f2b8ce25f4ca26865306c3d9f8a266d3e7 checksum/configScript: ef583e243082f7daea66c8b1ee650607b8c5a21b09a1f181b33b531b763091a7 spec: priorityClassName: swh-tools

   initContainers:
     - name: prepare-configuration-scheduler
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-scheduler.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -14200,21 +14200,21 @@ key: postgres-swh-scheduler-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-scheduler-template mountPath: /etc/swh/configuration-template - name: prepare-configuration-scrubber image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-scrubber.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -14222,21 +14222,21 @@ key: postgres-swh-scrubber-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-scrubber-template mountPath: /etc/swh/configuration-template - name: prepare-configuration-storage image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-storage.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -14245,21 +14245,21 @@ # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-storage-template mountPath: /etc/swh/configuration-template containers: - name: swh-toolbox image: container-registry.softwareheritage.org/swh/infra/swh-apps/toolbox:20230928.3

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   resources:
     requests:
       memory: 256Mi
       cpu: 250m
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   volumeMounts:

@@ -14311,21 +14311,21 @@ schedule: "27 3-23/4 * * *" jobTemplate: spec: template: spec: priorityClassName: swh-frontend-rpc-workload

       initContainers:
         - name: prepare-configuration
           image: debian:bullseye

```
         imagePullPolicy: Always
```

         imagePullPolicy: ifNotPresent
         command:
         - /bin/bash
         args:
         - -c
         - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
         env:
         
         - name: AMQP_PASSWORD
           valueFrom:
             secretKeyRef:

@@ -14374,21 +14374,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
         imagePullPolicy: Always
```

         imagePullPolicy: ifNotPresent
         volumeMounts:
         - name: configuration
           mountPath: /etc/swh
     volumes:
     - name: configuration
       emptyDir: {}
     - name: configuration-template
       configMap:
         name: scheduler-update-metrics-configuration-template
         items:

------------- diff for swh/values/production-cassandra.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/production-cassandra.yaml.before 2023-10-02 17:05:56.470921849 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/production-cassandra.yaml.after 2023-10-02 17:05:57.626938832 +0200 @@ -997,21 +997,21 @@ app: graphql annotations: # Force a rollout upgrade if the configuration changes checksum/config: 40386733bfae98b7fe945b9c5d4598e56aca0d530fbe4f4b1167047f54c911f8 spec: priorityClassName: swh-cassandra-frontend-rpc

   containers:
     - name: graphql
       image: container-registry.softwareheritage.org/swh/infra/swh-apps/graphql:20230928.2

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     resources:
       requests:
         memory: 150Mi
         cpu: 50m
     ports:
       - containerPort: 5013
         name: rpc
     startupProbe:
       httpGet:
         path: /

@@ -1137,21 +1137,21 @@ template: metadata: labels: app: prometheus-statsd-exporter spec: priorityClassName: swh-cassandra-system

   containers:
   - name: prometheus-statsd-exporter
     image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

@@ -1187,21 +1187,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1242,21 +1242,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1297,21 +1297,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1352,21 +1352,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1407,21 +1407,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1462,21 +1462,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1517,21 +1517,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1572,21 +1572,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1627,21 +1627,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1682,21 +1682,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1737,21 +1737,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1792,21 +1792,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1847,21 +1847,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -1902,21 +1902,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -1957,21 +1957,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -2012,21 +2012,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -2067,21 +2067,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -2122,21 +2122,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -2177,21 +2177,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -2232,21 +2232,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -2287,21 +2287,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -2342,21 +2342,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -2397,21 +2397,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: storage-replayer-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -2452,21 +2452,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -2511,21 +2511,21 @@ nodeSelectorTerms: - matchExpressions: - key: swh/storage operator: In values: - "true" priorityClassName: swh-cassandra-frontend-rpc initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: CASSANDRA_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -2542,21 +2542,21 @@ - name: configuration-template mountPath: /etc/swh/configuration-template

   containers:
     - name: storage
       resources:
         requests:
           memory: 500Mi
           cpu: 500m
       image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5002
         name: rpc
     readinessProbe:
       httpGet:
         path: /
         port: rpc
       initialDelaySeconds: 15
       failureThreshold: 30
       periodSeconds: 5

@@ -2639,50 +2639,50 @@ - matchExpressions: - key: swh/web operator: In values: - "true" priorityClassName: swh-cassandra-frontend-rpc

   initContainers:
   #  - name: prepare-configuration
   #    image: debian:bullseye

```
 #    imagePullPolicy: Always
```

 #    imagePullPolicy: ifNotPresent
 #    command:
 #    - /bin/bash
 #    args:
 #    - -c
 #    - eval echo "\"$(</etc/softwareheritage/configuration-template/config.yml.template)\"" > /etc/softwareheritage/config.yml
 #    volumeMounts:
 #    - name: configuration
 #      mountPath: /etc/softwareheritage
 #    - name: configuration-template
 #      mountPath: /etc/softwareheritage/configuration-template
   - name: prepare-static
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/web:20230929.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - cp -r $PWD/.local/share/swh/web/static/ /usr/share/swh/web/static/
     volumeMounts:
     - name: static
       mountPath: /usr/share/swh/web/static
 containers:
   - name: web
     resources:
       requests:
         memory: 500Mi
         cpu: 500m
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/web:20230929.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5004
         name: webapp
     readinessProbe:
       httpGet:
         path: /
         port: webapp
         httpHeaders:
           - name: Host
             value: webapp-cassandra.internal.softwareheritage.org

@@ -2729,21 +2729,21 @@ volumeMounts: - name: configuration mountPath: /etc/softwareheritage readOnly: true - name: nginx resources: requests: memory: 500Mi cpu: 500m image: nginx:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 80
         name: webstatic
     readinessProbe:
       httpGet:
         path: static/robots.txt
         port: webstatic
       initialDelaySeconds: 5
       failureThreshold: 30
       periodSeconds: 10

------------- diff for swh/values/staging.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/staging.yaml.before 2023-10-02 17:05:56.730925669 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/staging.yaml.after 2023-10-02 17:05:57.894942769 +0200 @@ -4067,21 +4067,21 @@ app: checker-deposit annotations: # Force a rollout upgrade if the configuration changes checksum/config: 21cc8097369fe55a021c4647045e8b1d3e19b897ce96d0c6014711975f25299c spec: priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4114,21 +4114,21 @@ - name: checker-deposit resources: requests: memory: 100Mi cpu: 100m limits: memory: 1024Mi cpu: 1000m

     image: container-registry.softwareheritage.org/swh/infra/swh-apps/deposit_checkers:20230928.1

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -4228,21 +4228,21 @@ - key: swh/cooker operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -4260,21 +4260,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: cookers resources: requests: memory: 512Mi cpu: 500m image: container-registry.softwareheritage.org/swh/infra/swh-apps/vault_cookers:20230928.1

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -4371,21 +4371,21 @@ - key: swh/cooker operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -4403,21 +4403,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: cookers resources: requests: memory: 512Mi cpu: 500m image: container-registry.softwareheritage.org/swh/infra/swh-apps/vault_cookers:20230928.1

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -4503,21 +4503,21 @@ app: graphql annotations: # Force a rollout upgrade if the configuration changes checksum/config: 56fadf3e5e04b05f59eed1134799dcea2c077b69301c5373203f89b6f37f948b spec: priorityClassName: swh-frontend-rpc

   containers:
     - name: graphql
       image: container-registry.softwareheritage.org/swh/infra/swh-apps/graphql:20230928.2

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     resources:
       requests:
         memory: 150Mi
         cpu: 25m
     ports:
       - containerPort: 5013
         name: rpc
     startupProbe:
       httpGet:
         path: /

@@ -4602,21 +4602,21 @@ - key: swh/indexer operator: In values: - "true" priorityClassName: swh-frontend-rpc

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     
     env:
     - name: BROKER_USER_PASSWORD
       valueFrom:
         secretKeyRef:
           name: swh-archive-broker-secret
           key: BROKER_USER_PASSWORD
           optional: false
     
     command:

@@ -4626,21 +4626,21 @@ mountPath: /entrypoint.sh subPath: "init-container-entrypoint.sh" readOnly: true - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template containers: - name: indexers image: container-registry.softwareheritage.org/swh/infra/swh-apps/indexer:20230928.1

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 512Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4743,21 +4743,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -4778,21 +4778,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 600Mi cpu: 200m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -4906,21 +4906,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -4941,21 +4941,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5069,21 +5069,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5104,21 +5104,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5232,21 +5232,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5267,21 +5267,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5395,21 +5395,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5430,21 +5430,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5558,21 +5558,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5593,21 +5593,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5721,21 +5721,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5756,21 +5756,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -5884,21 +5884,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -5919,21 +5919,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6047,21 +6047,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6082,21 +6082,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6210,21 +6210,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6245,21 +6245,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6373,21 +6373,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6408,21 +6408,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6536,21 +6536,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6571,21 +6571,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6699,21 +6699,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6734,21 +6734,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -6862,21 +6862,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -6897,21 +6897,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7025,21 +7025,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7060,21 +7060,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 6144Mi cpu: 1000m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7188,21 +7188,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7223,21 +7223,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7351,21 +7351,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7386,21 +7386,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7514,21 +7514,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7549,21 +7549,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7677,21 +7677,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7712,21 +7712,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -7840,21 +7840,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -7875,21 +7875,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8003,21 +8003,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8038,21 +8038,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8166,21 +8166,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8201,21 +8201,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8329,21 +8329,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8364,21 +8364,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8492,21 +8492,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8527,21 +8527,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8655,21 +8655,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8690,21 +8690,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -8818,21 +8818,21 @@ - key: swh/lister operator: In values: - "true" priorityClassName: swh-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false
     command:

@@ -8853,21 +8853,21 @@ - name: sentry-settings-for-celery-tasks mountPath: /etc/credentials/sentry-settings readOnly: true containers: - name: listers resources: requests: memory: 256Mi cpu: 250m image: container-registry.softwareheritage.org/swh/infra/swh-apps/lister:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]
   env:

@@ -9036,21 +9036,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9107,21 +9107,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -9159,21 +9159,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9231,21 +9231,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -9283,21 +9283,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9374,21 +9374,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: extra-services-configuration-template
     items:

@@ -9426,21 +9426,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: configuration-template
       mountPath: /etc/swh/configuration-template

@@ -9483,21 +9483,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: scheduler-journal-client-configuration-template
     items:

@@ -9535,21 +9535,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9597,21 +9597,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:
     name: scheduler-schedule-recurrent-configuration-template
     items:

@@ -9650,21 +9650,21 @@ - matchExpressions: - key: swh/scheduler operator: In values: - "true" priorityClassName: swh-frontend-rpc

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9677,21 +9677,21 @@ mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template containers: - name: scheduler-rpc resources: requests: memory: 1024Mi cpu: 50m image: container-registry.softwareheritage.org/swh/infra/swh-apps/scheduler:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5008
         name: rpc
     readinessProbe:
       httpGet:
         path: /
         port: rpc
       initialDelaySeconds: 15
       failureThreshold: 30
       periodSeconds: 5

@@ -9761,21 +9761,21 @@ template: metadata: labels: app: prometheus-statsd-exporter spec: priorityClassName: swh-system

   containers:
   - name: prometheus-statsd-exporter
     image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

@@ -9811,21 +9811,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -9878,21 +9878,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -9933,21 +9933,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10000,21 +10000,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10055,21 +10055,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10122,21 +10122,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10177,21 +10177,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10244,21 +10244,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10299,21 +10299,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10366,21 +10366,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10421,21 +10421,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10488,21 +10488,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10543,21 +10543,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10610,21 +10610,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10665,21 +10665,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10732,21 +10732,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10787,21 +10787,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10854,21 +10854,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -10909,21 +10909,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -10976,21 +10976,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -11031,21 +11031,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -11098,21 +11098,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -11153,21 +11153,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-postgresql-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -11220,21 +11220,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -11271,21 +11271,21 @@ annotations: # Force a rollout upgrade if the configuration changes checksum/config: ca0e0cc4f29948e07bfadf33826325a806b0219ab27ee861f1d01ebfd208d57b checksum/configScript: ef583e243082f7daea66c8b1ee650607b8c5a21b09a1f181b33b531b763091a7 spec: priorityClassName: swh-tools

   initContainers:
     - name: prepare-configuration-scheduler
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-scheduler.yml
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -11301,21 +11301,21 @@ key: postgres-swh-scheduler-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-scheduler-template mountPath: /etc/swh/configuration-template - name: prepare-configuration-scrubber image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-scrubber.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -11323,21 +11323,21 @@ key: postgres-swh-scrubber-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-scrubber-template mountPath: /etc/swh/configuration-template - name: prepare-configuration-storage image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: IfNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config-storage.yml
     env:
     
     - name: POSTGRESQL_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -11346,21 +11346,21 @@ # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-storage-template mountPath: /etc/swh/configuration-template containers: - name: swh-toolbox image: container-registry.softwareheritage.org/swh/infra/swh-apps/toolbox:20230928.3

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   resources:
     requests:
       memory: 256Mi
       cpu: 250m
   command:
   - /bin/bash
   args:
   - -c
   - /opt/swh/entrypoint.sh
   volumeMounts:

@@ -11412,21 +11412,21 @@ schedule: "0/10 * * * *" jobTemplate: spec: template: spec: priorityClassName: swh-frontend-rpc-workload

       initContainers:
         - name: prepare-configuration
           image: debian:bullseye

```
         imagePullPolicy: Always
```

         imagePullPolicy: ifNotPresent
         command:
         - /bin/bash
         args:
         - -c
         - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
         env:
         
         - name: AMQP_PASSWORD
           valueFrom:
             secretKeyRef:

@@ -11475,21 +11475,21 @@ value: swh.scheduler - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: scheduler-sentry-secrets key: sentry-dsn # if the setting doesn't exist, sentry issue pushes will be disabled optional: false - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
         imagePullPolicy: Always
```

         imagePullPolicy: ifNotPresent
         volumeMounts:
         - name: configuration
           mountPath: /etc/swh
     volumes:
     - name: configuration
       emptyDir: {}
     - name: configuration-template
       configMap:
         name: scheduler-update-metrics-configuration-template
         items:

------------- diff for swh/values/staging-cassandra.yaml -------------

--- /tmp/swh-chart.swh.tb2RIPZB/staging-cassandra.yaml.before 2023-10-02 17:05:56.954928959 +0200 +++ /tmp/swh-chart.swh.tb2RIPZB/staging-cassandra.yaml.after 2023-10-02 17:05:58.126946176 +0200 @@ -3529,21 +3529,21 @@ app: graphql annotations: # Force a rollout upgrade if the configuration changes checksum/config: ed48f035f1d36e1d58a01239c5d99127e646be0c1acb440fcef7ceb84ae71c7d spec: priorityClassName: swh-cassandra-frontend-rpc

   containers:
     - name: graphql
       image: container-registry.softwareheritage.org/swh/infra/swh-apps/graphql:20230928.2

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     resources:
       requests:
         memory: 150Mi
         cpu: 50m
     ports:
       - containerPort: 5013
         name: rpc
     startupProbe:
       httpGet:
         path: /

@@ -3628,21 +3628,21 @@ - key: swh/loader-metadata operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     - name: BROKER_USER_PASSWORD
       valueFrom:
         secretKeyRef:
           name: swh-archive-broker-secret
           key: BROKER_USER_PASSWORD
           optional: true
     command:
       - /entrypoint.sh
     volumeMounts:

@@ -3653,21 +3653,21 @@ - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: metadata-fetcher-credentials mountPath: /etc/credentials/metadata-fetcher readOnly: true containers: - name: loader-metadata image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_metadata:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 200Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -3754,21 +3754,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -3787,21 +3787,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -3920,21 +3920,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -3953,21 +3953,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4086,21 +4086,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4119,21 +4119,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4252,21 +4252,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4285,21 +4285,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_bzr:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4418,21 +4418,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4451,21 +4451,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 150Mi
       cpu: 350m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4584,21 +4584,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4617,21 +4617,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4750,21 +4750,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4783,21 +4783,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_cvs:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -4916,21 +4916,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -4949,21 +4949,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -5081,21 +5081,21 @@ - matchExpressions: - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-frontend-rpc-workload terminationGracePeriodSeconds: 3600 initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5129,21 +5129,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -5262,21 +5262,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5295,21 +5295,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 768Mi
       cpu: 1000m
     limits:
       memory: 1024Mi
       cpu: 1500m
   lifecycle:

@@ -5430,21 +5430,21 @@ - matchExpressions: - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-low-workload terminationGracePeriodSeconds: 3600 initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5463,21 +5463,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 768Mi
       cpu: 100m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -5596,21 +5596,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5629,21 +5629,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_git:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -5762,21 +5762,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5795,21 +5795,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -5928,21 +5928,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -5961,21 +5961,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_mercurial:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 768Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6094,21 +6094,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6127,21 +6127,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 600Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6260,21 +6260,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6293,21 +6293,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_mercurial:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 124Mi
       cpu: 500m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6426,21 +6426,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6459,21 +6459,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6592,21 +6592,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6625,21 +6625,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 1000m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6758,21 +6758,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6791,21 +6791,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 800m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -6924,21 +6924,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -6957,21 +6957,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 256Mi
       cpu: 200m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -7090,21 +7090,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -7123,21 +7123,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_package:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 3072Mi
       cpu: 1000m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -7256,21 +7256,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -7289,21 +7289,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_savecodenow:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 1024Mi
       cpu: 100m
   lifecycle:
     preStop:
       exec:
         command: ["/pre-stop.sh"]

@@ -7422,21 +7422,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -7455,21 +7455,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_svn:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 6144Mi
       cpu: 100m
     limits:
       memory: 25600Mi
   lifecycle:
     preStop:

@@ -7590,21 +7590,21 @@ - key: swh/loader operator: In values: - "true" priorityClassName: swh-cassandra-normal-workload

   terminationGracePeriodSeconds: 3600
   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     env:
     
     - name: AMQP_PASSWORD
       valueFrom:
         secretKeyRef:
           name: amqp-secrets
           key: swhconsumer-password
           # 'name' secret must exist & include that ^ key
           optional: false

@@ -7623,21 +7623,21 @@ mountPath: /etc/credentials/metadata-fetcher readOnly: true

       - name: sentry-settings-for-celery-tasks
         mountPath: /etc/credentials/sentry-settings
         readOnly: true
   containers:
   - name: loaders
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/loader_svn:20230928.2

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   command:
     - /opt/swh/entrypoint.sh
   resources:
     requests:
       memory: 768Mi
       cpu: 1000m
     limits:
       memory: 1024Mi
       cpu: 1500m
   lifecycle:

@@ -7798,21 +7798,21 @@ template: metadata: labels: app: prometheus-statsd-exporter spec: priorityClassName: swh-cassandra-system

   containers:
   - name: prometheus-statsd-exporter
     image: prom/statsd-exporter:v0.22.7

```
   imagePullPolicy: Always
```

   imagePullPolicy: ifNotPresent
   args:
     - "--statsd.mapping-config=/etc/prometheus/statsd-mapping.yml"
   ports:
   - containerPort: 9125
   volumeMounts:
     - name: config
       mountPath: /etc/prometheus/statsd-mapping.yml
       subPath: config.yml
       readOnly: true
 volumes:

@@ -7848,21 +7848,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -7874,21 +7874,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -7916,21 +7916,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -7971,21 +7971,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -7997,21 +7997,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8039,21 +8039,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8094,21 +8094,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8120,21 +8120,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8162,21 +8162,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8217,21 +8217,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8243,21 +8243,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8285,21 +8285,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8340,21 +8340,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8366,21 +8366,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8408,21 +8408,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8463,21 +8463,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8489,21 +8489,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8531,21 +8531,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8586,21 +8586,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8612,21 +8612,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8654,21 +8654,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8709,21 +8709,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8735,21 +8735,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8777,21 +8777,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8832,21 +8832,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8858,21 +8858,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -8900,21 +8900,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -8955,21 +8955,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -8981,21 +8981,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -9023,21 +9023,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -9078,21 +9078,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -9104,21 +9104,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -9146,21 +9146,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -9201,21 +9201,21 @@ - matchExpressions: - key: swh/replayer operator: In values: - "true" priorityClassName: swh-cassandra-background-workload

   initContainers:
     - name: prepare-configuration
       image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     envFrom:
     - secretRef:
         name: swh-cassandra-broker-secret
     
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:

@@ -9227,21 +9227,21 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage_replayer:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints

@@ -9269,21 +9269,21 @@ value: swh.storage - name: SWH_SENTRY_DSN valueFrom: secretKeyRef: name: storage-replayer-sentry-secrets key: sentry-dsn # 'name' secret must exist & include key "host" optional: true - name: SWH_SENTRY_DISABLE_LOGGING_EVENTS value: "true"

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
     - name: database-utils
       mountPath: /entrypoints
 volumes:
 - name: configuration
   emptyDir: {}
 - name: configuration-template
   configMap:

@@ -9327,21 +9327,21 @@ nodeSelectorTerms: - matchExpressions: - key: swh/storage operator: In values: - "true" priorityClassName: swh-cassandra-frontend-rpc initContainers: - name: prepare-configuration image: debian:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - eval echo "\"$(</etc/swh/configuration-template/config.yml.template)\"" > /etc/swh/config.yml
     env:
     
     - name: CASSANDRA_PASSWORD
       valueFrom:
         secretKeyRef:

@@ -9349,40 +9349,40 @@ key: cassandra-swh-rw-password # 'name' secret must exist & include that ^ key optional: false volumeMounts: - name: configuration mountPath: /etc/swh - name: configuration-template mountPath: /etc/swh/configuration-template - name: init-database image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /usr/local/bin/python3
     args:
     - /entrypoints/init-keyspace.py
     volumeMounts:
     - name: configuration
       mountPath: /etc/swh
       readOnly: true
     - name: database-utils
       mountPath: /entrypoints
       readOnly: true
 containers:
   - name: storage
     resources:
       requests:
         memory: 1500Mi
         cpu: 500m
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/storage:20230928.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5002
         name: rpc
     readinessProbe:
       httpGet:
         path: /
         port: rpc
       initialDelaySeconds: 15
       failureThreshold: 30
       periodSeconds: 5

@@ -9471,50 +9471,50 @@ - matchExpressions: - key: swh/web operator: In values: - "true" priorityClassName: swh-cassandra-frontend-rpc

   initContainers:
   #  - name: prepare-configuration
   #    image: debian:bullseye

```
 #    imagePullPolicy: Always
```

 #    imagePullPolicy: ifNotPresent
 #    command:
 #    - /bin/bash
 #    args:
 #    - -c
 #    - eval echo "\"$(</etc/softwareheritage/configuration-template/config.yml.template)\"" > /etc/softwareheritage/config.yml
 #    volumeMounts:
 #    - name: configuration
 #      mountPath: /etc/softwareheritage
 #    - name: configuration-template
 #      mountPath: /etc/softwareheritage/configuration-template
   - name: prepare-static
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/web:20230929.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     command:
     - /bin/bash
     args:
     - -c
     - cp -r $PWD/.local/share/swh/web/static/ /usr/share/swh/web/static/
     volumeMounts:
     - name: static
       mountPath: /usr/share/swh/web/static
 containers:
   - name: web
     resources:
       requests:
         memory: 500Mi
         cpu: 500m
     image: container-registry.softwareheritage.org/swh/infra/swh-apps/web:20230929.1

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 5004
         name: webapp
     readinessProbe:
       httpGet:
         path: /
         port: webapp
         httpHeaders:
           - name: Host
             value: webapp-cassandra.internal.staging.swh.network

@@ -9561,21 +9561,21 @@ volumeMounts: - name: configuration mountPath: /etc/softwareheritage readOnly: true - name: nginx resources: requests: memory: 500Mi cpu: 500m image: nginx:bullseye

```
     imagePullPolicy: Always
```

     imagePullPolicy: ifNotPresent
     ports:
       - containerPort: 80
         name: webstatic
     readinessProbe:
       httpGet:
         path: static/robots.txt
         port: webstatic
       initialDelaySeconds: 5
       failureThreshold: 30
       periodSeconds: 10


</details>

Edited Oct 03, 2023 by Antoine R. Dumont

Silent mode is enabled

Only pull container images when not present

Merge request reports