feat(publick8s): add geoipupdater in dry-run mode for now

clusters/publick8s.yaml

@@ -287,3 +287,11 @@ releases:
       - "../config/stats.jenkins.io.yaml"
     secrets:
       - "../secrets/config/stats.jenkins.io/secrets.yaml"
+  - name: geoipdata
+    namespace: geoip-data
+    chart: jenkins-infra/geoipupdates
+    version: 2.0.0
+    values:
+      - ../config/geoipdata.yaml
+    secrets:
+      - ../secrets/config/geoipdata/secrets.yaml

config/geoipdata.yaml

@@ -1,32 +1,31 @@
 geoipupdate:
+  dryrun: true # avoid calling geoipupdate and rate limiting during test
   update_frequency: 72
+  editions: "GeoLite2-ASN GeoLite2-City GeoLite2-Country"
+  storage_name: "publick8spvdata"
+  storage_fileshare: "geoip-data-staging" # test environement
+  cron: '2 * * * *' # every hour and 2 mn for testing
 podSecurityContext:
   runAsUser: 65534  # User 'nobody'
   runAsGroup: 65534  # Group 'nogroup'
   runAsNonRoot: true
+resources:
+  limits:
+    cpu: 500m
+    memory: 256Mi # minimum 256Mi to avoid OMM kill for `az login`
+  requests:
+    cpu: 100m
+    memory: 256Mi # minimum 256Mi to avoid OMM kill for `az login`
 containerSecurityContext:
   readOnlyRootFilesystem: true
   allowPrivilegeEscalation: false
   capabilities:
     drop:
       - ALL
-
-resources:
-  limits:
-    cpu: 500m
-    memory: 128Mi
-  requests:
-    cpu: 50m
-    memory: 64Mi
-
 nodeSelector:
   kubernetes.io/arch: arm64
 tolerations:
   - key: "kubernetes.io/arch"
     operator: "Equal"
     value: "arm64"
     effect: "NoSchedule"
-
-dataVolume:
-  persistentVolumeClaim:
-    claimName: geoip-data