feat(common): block host docker-compose and create hostpatch initcontainer (#1961)

* feat(common): block host docker-compose and create hostpatch initcontainer

* dont fail deployment in failure, only spawn error

* rename file

* technically this is a feature

charts/library/common/Chart.yaml

@@ -15,4 +15,4 @@ maintainers:
 name: common
 sources: null
 type: library
-version: 8.16.1
+version: 8.17.0

charts/library/common/templates/lib/controller/_hostpatch.tpl

@@ -0,0 +1,15 @@
+{{/*
+This template serves as the blueprint for the mountPermissions job that is run
+before chart installation.
+*/}}
+{{- define "common.controller.hostpatch" -}}
+- name: hostpatch
+  image: {{ .Values.alpineImage.repository }}:{{ .Values.alpineImage.tag }}
+  securityContext:
+    runAsUser: 0
+    privileged: true
+  command:
+    - "/bin/sh"
+    - "-c"
+    - ( sysctl -w fs.inotify.max_user_watches=524288 || echo "error setting inotify") && ( sysctl -w fs.inotify.max_user_instances=512 || echo "error setting inotify")&& ( chmod -x /usr/bin/docker-compose || echo "error locking docker-compose") && ( chmod -x /bin/docker-compose || echo "error locking docker-compose" )
+{{- end -}}

charts/library/common/templates/lib/controller/_inotify.tpl

@@ -1,15 +0,0 @@
-{{/*
-This template serves as the blueprint for the mountPermissions job that is run
-before chart installation.
-*/}}
-{{- define "common.controller.inotify" -}}
-- name: inotify
-  image: {{ .Values.alpineImage.repository }}:{{ .Values.alpineImage.tag }}
-  securityContext:
-    runAsUser: 0
-    privileged: true
-  command:
-    - "/bin/sh"
-    - "-c"
-    - "sysctl -w fs.inotify.max_user_watches=524288 && sysctl -w fs.inotify.max_user_instances=512 "
-{{- end -}}

charts/library/common/templates/lib/controller/_pod.tpl

@@ -51,7 +51,7 @@ terminationGracePeriodSeconds: {{ . }}
   {{- end }}
 initContainers:
   {{-  include "common.controller.autopermissions" . | nindent 2 }}
-  {{-  include "common.controller.inotify" . | nindent 2 }}
+  {{-  include "common.controller.hostpatch" . | nindent 2 }}
   {{-  include "common.dependencies.postgresql.init" . | nindent 2 }}
   {{- if .Release.IsInstall }}
   {{- if .Values.installContainers }}