From 4ca793380b12cb6c96fb06cbed1d55ffe4731b5e Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Sun, 19 Apr 2026 12:44:46 +0000 Subject: [PATCH] [multi] Sweep Kyverno wait-for redis annotations to redis-master MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Replaces `redis.redis:6379` with `redis-master.redis:6379` in all 11 dependency.kyverno.io/wait-for annotations across 8 stacks, plus one docs comment in the Kyverno module. These annotations drive DNS-only `nc -z` init-container readiness checks — zero RW risk. Both hostnames resolve, so there is no wait-for failure window during the rolling re-apply. Closes: code-otr --- stacks/affine/main.tf | 2 +- stacks/dawarich/main.tf | 2 +- stacks/grampsweb/main.tf | 2 +- .../kyverno/modules/kyverno/dependency-init-containers.tf | 2 +- stacks/onlyoffice/main.tf | 2 +- stacks/paperless-ngx/main.tf | 2 +- stacks/real-estate-crawler/main.tf | 6 +++--- stacks/trading-bot/main.tf | 4 ++-- 8 files changed, 11 insertions(+), 11 deletions(-) diff --git a/stacks/affine/main.tf b/stacks/affine/main.tf index bb550bcb..a80381ce 100644 --- a/stacks/affine/main.tf +++ b/stacks/affine/main.tf @@ -201,7 +201,7 @@ resource "kubernetes_deployment" "affine" { annotations = { "diun.enable" = "true" "diun.include_tags" = "^\\d+\\.\\d+\\.\\d+$" - "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis-master.redis:6379" } } spec { diff --git a/stacks/dawarich/main.tf b/stacks/dawarich/main.tf index b55a3fff..392b9d82 100644 --- a/stacks/dawarich/main.tf +++ b/stacks/dawarich/main.tf @@ -84,7 +84,7 @@ resource "kubernetes_deployment" "dawarich" { annotations = { "diun.enable" = "true" "diun.include_tags" = "^v?\\d+\\.\\d+\\.\\d+$" - "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis-master.redis:6379" } } spec { diff --git a/stacks/grampsweb/main.tf b/stacks/grampsweb/main.tf index bf0c5cbb..9ea09a95 100644 --- a/stacks/grampsweb/main.tf +++ b/stacks/grampsweb/main.tf @@ -180,7 +180,7 @@ resource "kubernetes_deployment" "grampsweb" { app = "grampsweb" } annotations = { - "dependency.kyverno.io/wait-for" = "redis.redis:6379" + "dependency.kyverno.io/wait-for" = "redis-master.redis:6379" } } spec { diff --git a/stacks/kyverno/modules/kyverno/dependency-init-containers.tf b/stacks/kyverno/modules/kyverno/dependency-init-containers.tf index ffe24780..27d9c02b 100644 --- a/stacks/kyverno/modules/kyverno/dependency-init-containers.tf +++ b/stacks/kyverno/modules/kyverno/dependency-init-containers.tf @@ -7,7 +7,7 @@ # # Usage: # annotations: -# dependency.kyverno.io/wait-for: "postgresql.dbaas:5432,redis.redis:6379" +# dependency.kyverno.io/wait-for: "postgresql.dbaas:5432,redis-master.redis:6379" # # Each comma-separated entry becomes a busybox init container that runs # `nc -z ` in a loop until the dependency is reachable. diff --git a/stacks/onlyoffice/main.tf b/stacks/onlyoffice/main.tf index 1785e453..a81bbed9 100644 --- a/stacks/onlyoffice/main.tf +++ b/stacks/onlyoffice/main.tf @@ -142,7 +142,7 @@ resource "kubernetes_deployment" "onlyoffice-document-server" { app = "onlyoffice-document-server" } annotations = { - "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis-master.redis:6379" } } spec { diff --git a/stacks/paperless-ngx/main.tf b/stacks/paperless-ngx/main.tf index a8ff4548..bceafaf2 100644 --- a/stacks/paperless-ngx/main.tf +++ b/stacks/paperless-ngx/main.tf @@ -117,7 +117,7 @@ resource "kubernetes_deployment" "paperless-ngx" { annotations = { "diun.enable" = "true" "diun.include_tags" = "^\\d+(?:\\.\\d+)?(?:\\.\\d+)?$" - "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis-master.redis:6379" } } spec { diff --git a/stacks/real-estate-crawler/main.tf b/stacks/real-estate-crawler/main.tf index 87e74634..3a1d274e 100644 --- a/stacks/real-estate-crawler/main.tf +++ b/stacks/real-estate-crawler/main.tf @@ -217,7 +217,7 @@ resource "kubernetes_deployment" "realestate-crawler-api" { "kubernetes.io/cluster-service" = "true" } annotations = { - "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis-master.redis:6379" } } spec { @@ -395,7 +395,7 @@ resource "kubernetes_deployment" "realestate-crawler-celery" { app = "realestate-crawler-celery" } annotations = { - "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis-master.redis:6379" } } spec { @@ -524,7 +524,7 @@ resource "kubernetes_deployment" "realestate-crawler-celery-beat" { app = "realestate-crawler-celery-beat" } annotations = { - "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "mysql.dbaas:3306,redis-master.redis:6379" } } spec { diff --git a/stacks/trading-bot/main.tf b/stacks/trading-bot/main.tf index b695e9ed..3f941b0e 100644 --- a/stacks/trading-bot/main.tf +++ b/stacks/trading-bot/main.tf @@ -252,7 +252,7 @@ resource "kubernetes_deployment" "trading-bot-frontend" { app = "trading-bot-frontend" } annotations = { - "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis-master.redis:6379" } } spec { @@ -353,7 +353,7 @@ resource "kubernetes_deployment" "trading-bot-workers" { app = "trading-bot-workers" } annotations = { - "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis.redis:6379" + "dependency.kyverno.io/wait-for" = "postgresql.dbaas:5432,redis-master.redis:6379" } } spec {