Registry migration job does not use nodeSelector or affinity
Summary
The registry db migration job does not pass through the affinity or nodeSelector values. This is especially problematic right now as the image only supports amd64 so in mixed-arch clusters I can't control the scheduling of the pod to run on a node that can actually run the job.
Steps to reproduce
Set nodeSelector or affinity, observe registry migration job does not have these applied.
Configuration used
(Please provide a sanitized version of the configuration used wrapped in a code block (```yaml))
certmanager:
install: false
certmanager-issuer:
install: false
gitlab:
toolbox:
enabled: false
gitlab-runner:
install: false
global:
appConfig:
artifacts:
bucket: gitlab-artifacts
connection:
secret: gitlab-artifacts
enabled: true
proxy_download: true
lfs:
bucket: git-lfs
connection:
secret: git-lfs
enabled: true
proxy_download: true
packages:
connection:
secret: gitlab-packages
enabled: true
proxy_download: true
uploads:
bucket: gitlab-uploads
connection:
secret: gitlab-uploads
enabled: true
proxy_download: true
edition: ce
gitaly:
enabled: true
hosts:
domain: "..."
ingress:
configureCertmanager: false
minio:
enabled: false
nodeSelector:
storage: "yes"
pages:
enabled: false
praefect:
dbSecret:
key: password
secret: praefect-db-app
enabled: true
psql:
dbName: app
host: praefect-db-rw
user: app
virtualStorages:
- gitalyReplicas: 3
maxUnavailable: 1
name: default
persistence:
accessMode: ReadWriteOnce
defaultReplicationFactor: 3
enabled: true
size: 50Gi
storageClass: local-hostpath
psql:
database: app
host: gitlab-db-rw
password:
key: password
secret: gitlab-db-app
username: app
postgresql:
install: false
prometheus:
install: false
redis:
global:
storageClass: local-hostpath
master:
nodeSelector:
storage: "yes"
registry:
database:
enabled: true
host: registry-db-rw
name: app
password:
secret: registry-db-app
user: app
nodeSelector:
storage: "yes"
Current behavior
Registry migration job tries to run on an arm64 node without the storage: yes
label, and fails with exec format error
Expected behavior
Registry migration job should obey nodeSelector and only run on a node with the matching label.
Versions
- Chart: 7.7.0
- Platform:
- Self-hosted: Talos
- Kubernetes: (
kubectl version
)- Client: v1.28.4
- Server: v1.29.0
- Helm: v3.2.1