feat(base-cluster): drift detection

in preparation of fluxcd/helm-controller#643 we raise the reconcile times,
as the reconciliation might now really do some work, finally!

charts/base-cluster/templates/_helmRelease.yaml

@@ -11,7 +11,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "cetic" "chart" "static" "context" .context) | nindent 6 }}
-  interval: 30m
+  interval: 1h
   dependsOn:
     {{- range $namespace, $name := .dependencies }}
     - name: {{ $name }}
@@ -25,4 +25,4 @@ spec:
     {{- else }}
     static: {{ .resource | toYaml | replace "{{" "{{ `{{` }}" | indent 6 }}
     {{- end }}
-{{- end -}}
+{{- end -}}

charts/base-cluster/templates/cert-manager/cert-manager.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "jetstack" "chart" "cert-manager" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   {{- if .Values.monitoring.prometheus.enabled }}
   dependsOn:
     - name: kube-prometheus-stack

charts/base-cluster/templates/descheduler/descheduler.yaml

@@ -22,7 +22,7 @@ spec:
         name: descheduler
         namespace: {{ .Release.Namespace }}
       version: {{ $selectedVersion }}
-  interval: 1m
+  interval: 1h
   values:
     cronJobApiVersion: {{ include "common.capabilities.cronjob.apiVersion" . }}
     startingDeadlineSeconds: 120

charts/base-cluster/templates/dns/external-dns.yaml

@@ -23,7 +23,7 @@ spec:
     {{- else }}
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "bitnami" "chart" "external-dns" "context" $) | nindent 6 }}
     {{- end }}
-  interval: 1m
+  interval: 1h
   {{- if .Values.monitoring.prometheus.enabled }}
   dependsOn:
     - name: kube-prometheus-stack

charts/base-cluster/templates/global/reflector.yaml

@@ -9,7 +9,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "emberstack" "chart" "reflector" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   values:
     {{- if .Values.global.imageRegistry }}
     image:
@@ -20,4 +20,4 @@ spec:
       allowPrivilegeEscalation: false
       seccompProfile:
         type: RuntimeDefault
-{{- end -}}
+{{- end -}}

charts/base-cluster/templates/ingress/nginx.yaml

@@ -8,7 +8,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "nginx" "chart" "ingress-nginx" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   {{- if .Values.monitoring.prometheus.enabled }}
   dependsOn:
     - name: kube-prometheus-stack

charts/base-cluster/templates/kyverno/kyverno.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "kyverno" "chart" "kyverno" "context" $) | nindent 6 }}
-  interval: 5m
+  interval: 1h
   {{- if .Values.monitoring.prometheus.enabled }}
   dependsOn:
     - name: kube-prometheus-stack
@@ -67,4 +67,4 @@ spec:
             - key: kubernetes.io/metadata.name
               operator: NotIn
               values: {{- include "base-cluster.kyverno.ignoredNamespaces" . | nindent 18 }}
-{{- end }}
+{{- end }}

charts/base-cluster/templates/kyverno/policies/kyverno-base-policies/kyverno-policies.yaml

@@ -11,7 +11,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "kyverno" "chart" "kyverno-policies" "context" $) | nindent 6 }}
-  interval: 5m
+  interval: 1h
   dependsOn:
     - name: kyverno
       namespace: kyverno
@@ -97,4 +97,4 @@ spec:
       disallow-capabilities-strict:
         any: {{- $disallowCapabilities | toYaml | nindent 10 }}
     {{- end -}}
-{{- end }}
+{{- end }}

charts/base-cluster/templates/monitoring/kube-prometheus-stack/prometheus-operator.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "prometheus" "chart" "kube-prometheus-stack" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   install:
     timeout: 20m0s
     crds: CreateReplace
@@ -49,7 +49,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "bitnami" "chart" "oauth2-proxy" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   values:
     redis:
       enabled: false

charts/base-cluster/templates/monitoring/loki/loki.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "grafana" "chart" "loki-stack" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   install:
     timeout: 10m0s
   upgrade:

charts/base-cluster/templates/monitoring/metrics-server/metrics-server.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "bitnami" "chart" "metrics-server" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   values:
     apiService:
       create: true

charts/base-cluster/templates/monitoring/security/trivy.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "trivy" "chart" "trivy-operator" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   {{- if .Values.monitoring.prometheus.enabled }}
   dependsOn:
     - name: kube-prometheus-stack

charts/base-cluster/templates/nfs-server-provisioner/nfs-server-provisioner.yaml

@@ -10,7 +10,7 @@ metadata:
 spec:
   chart:
     spec: {{- include "base-cluster.helm.chartSpec" (dict "repo" "nfs-server-provisioner" "chart" "nfs-server-provisioner" "context" $) | nindent 6 }}
-  interval: 1m
+  interval: 1h
   values:
     storageClass:
       name: {{ .Values.storage.readWriteMany.storageClass.name }}
@@ -28,4 +28,4 @@ spec:
     podSecurityContext:
       seccompProfile:
         type: Unconfined
-{{- end }}
+{{- end }}