[release/v25.3.x] Fix ballast file propagation from tuning container (#1414) (#1419)

github-actions[bot] · andrewstucki · web-flow · commit 85a2efe9f4e6 · 2026-04-07T17:21:11.000Z
* Fix ballast file propagation from tuning container (#1414) * Fix ballast file propagation from tuning container * Regen golden files (cherry picked from commit df1b92f) # Conflicts: # charts/redpanda/testdata/template-cases.golden.txtar # operator/internal/lifecycle/testdata/stretch-cluster-cases.pools.golden.txtar # operator/multicluster/statefulset_init.go # operator/multicluster/testdata/render-cases.pools.golden.txtar * remove irrelevant files for backport * regen golden files * regen golden files --------- Co-authored-by: Andrew Stucki <andrew.stucki@redpanda.com>
diff --git a/.changes/unreleased/charts-redpanda-Fixed-20260406-144320.yaml b/.changes/unreleased/charts-redpanda-Fixed-20260406-144320.yaml
@@ -0,0 +1,4 @@
+project: charts/redpanda
+kind: Fixed
+body: Fixed issue with ballast file tuning where the tuning container didn't mount the proper directory needed for propagating the ballast file to the main container.
+time: 2026-04-06T14:43:20.320504-04:00
diff --git a/.changes/unreleased/operator-Fixed-20260406-144320.yaml b/.changes/unreleased/operator-Fixed-20260406-144320.yaml
@@ -0,0 +1,4 @@
+project: operator
+kind: Fixed
+body: Fixed issue with ballast file tuning where the tuning container didn't mount the proper directory needed for propagating the ballast file to the main container.
+time: 2026-04-06T14:43:20.320502-04:00
diff --git a/charts/redpanda/chart/templates/_statefulset.go.tpl b/charts/redpanda/chart/templates/_statefulset.go.tpl
@@ -200,7 +200,7 @@
 {{- break -}}
 {{- end -}}
 {{- $_is_returning = true -}}
-{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict)) (dict "name" "tuning" "image" (printf "%s:%s" $state.Values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $state)))) "r")) "command" (list `/bin/bash` `-c` `rpk redpanda tune all`) "securityContext" (mustMergeOverwrite (dict) (dict "capabilities" (mustMergeOverwrite (dict) (dict "add" (list `SYS_RESOURCE`))) "privileged" true "runAsNonRoot" false "runAsUser" ((0 | int64) | int64) "runAsGroup" ((0 | int64) | int64))) "volumeMounts" (concat (default (list) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $state)))) "r")) (list (mustMergeOverwrite (dict "name" "" "mountPath" "") (dict "name" "base-config" "mountPath" "/etc/redpanda"))))))) | toJson -}}
+{{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict)) (dict "name" "tuning" "image" (printf "%s:%s" $state.Values.image.repository (get (fromJson (include "redpanda.Tag" (dict "a" (list $state)))) "r")) "command" (list `/bin/bash` `-c` `rpk redpanda tune all`) "securityContext" (mustMergeOverwrite (dict) (dict "capabilities" (mustMergeOverwrite (dict) (dict "add" (list `SYS_RESOURCE`))) "privileged" true "runAsNonRoot" false "runAsUser" ((0 | int64) | int64) "runAsGroup" ((0 | int64) | int64))) "volumeMounts" (concat (default (list) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $state)))) "r")) (list (mustMergeOverwrite (dict "name" "" "mountPath" "") (dict "name" "base-config" "mountPath" "/etc/redpanda")) (mustMergeOverwrite (dict "name" "" "mountPath" "") (dict "name" `datadir` "mountPath" `/var/lib/redpanda/data`))))))) | toJson -}}
 {{- break -}}
 {{- end -}}
 {{- end -}}
@@ -215,9 +215,9 @@
 {{- (dict "r" (coalesce nil)) | toJson -}}
 {{- break -}}
 {{- end -}}
-{{- $_398_uid_gid := (get (fromJson (include "redpanda.securityContextUidGid" (dict "a" (list $state $pool "set-datadir-ownership")))) "r") -}}
-{{- $uid := ((index $_398_uid_gid 0) | int64) -}}
-{{- $gid := ((index $_398_uid_gid 1) | int64) -}}
+{{- $_402_uid_gid := (get (fromJson (include "redpanda.securityContextUidGid" (dict "a" (list $state $pool "set-datadir-ownership")))) "r") -}}
+{{- $uid := ((index $_402_uid_gid 0) | int64) -}}
+{{- $gid := ((index $_402_uid_gid 1) | int64) -}}
 {{- $_is_returning = true -}}
 {{- (dict "r" (mustMergeOverwrite (dict "name" "" "resources" (dict)) (dict "name" "set-datadir-ownership" "image" (printf "%s:%s" $pool.Statefulset.initContainerImage.repository $pool.Statefulset.initContainerImage.tag) "command" (list `/bin/sh` `-c` (printf `chown %d:%d -R /var/lib/redpanda/data` $uid $gid)) "securityContext" (mustMergeOverwrite (dict) (dict "runAsUser" (0 | int64) "runAsGroup" (0 | int64))) "volumeMounts" (concat (default (list) (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $state)))) "r")) (list (mustMergeOverwrite (dict "name" "" "mountPath" "") (dict "name" `datadir` "mountPath" `/var/lib/redpanda/data`))))))) | toJson -}}
 {{- break -}}
@@ -230,12 +230,12 @@
 {{- $containerName := (index .a 2) -}}
 {{- range $_ := (list 1) -}}
 {{- $_is_returning := false -}}
-{{- $_424_gid_uid := (get (fromJson (include "redpanda.giduidFromPodTemplate" (dict "a" (list $state.Values.podTemplate "redpanda")))) "r") -}}
-{{- $gid := (index $_424_gid_uid 0) -}}
-{{- $uid := (index $_424_gid_uid 1) -}}
-{{- $_425_sgid_suid := (get (fromJson (include "redpanda.giduidFromPodTemplate" (dict "a" (list $pool.Statefulset.podTemplate "redpanda")))) "r") -}}
-{{- $sgid := (index $_425_sgid_suid 0) -}}
-{{- $suid := (index $_425_sgid_suid 1) -}}
+{{- $_428_gid_uid := (get (fromJson (include "redpanda.giduidFromPodTemplate" (dict "a" (list $state.Values.podTemplate "redpanda")))) "r") -}}
+{{- $gid := (index $_428_gid_uid 0) -}}
+{{- $uid := (index $_428_gid_uid 1) -}}
+{{- $_429_sgid_suid := (get (fromJson (include "redpanda.giduidFromPodTemplate" (dict "a" (list $pool.Statefulset.podTemplate "redpanda")))) "r") -}}
+{{- $sgid := (index $_429_sgid_suid 0) -}}
+{{- $suid := (index $_429_sgid_suid 1) -}}
 {{- if (ne (toJson $sgid) "null") -}}
 {{- $gid = $sgid -}}
 {{- end -}}
@@ -312,9 +312,9 @@
 {{- (dict "r" (coalesce nil)) | toJson -}}
 {{- break -}}
 {{- end -}}
-{{- $_504_uid_gid := (get (fromJson (include "redpanda.securityContextUidGid" (dict "a" (list $state $pool "set-tiered-storage-cache-dir-ownership")))) "r") -}}
-{{- $uid := ((index $_504_uid_gid 0) | int64) -}}
-{{- $gid := ((index $_504_uid_gid 1) | int64) -}}
+{{- $_508_uid_gid := (get (fromJson (include "redpanda.securityContextUidGid" (dict "a" (list $state $pool "set-tiered-storage-cache-dir-ownership")))) "r") -}}
+{{- $uid := ((index $_508_uid_gid 0) | int64) -}}
+{{- $gid := ((index $_508_uid_gid 1) | int64) -}}
 {{- $cacheDir := (get (fromJson (include "redpanda.Storage.TieredCacheDirectory" (dict "a" (list $state.Values.storage $state)))) "r") -}}
 {{- $mounts := (get (fromJson (include "redpanda.CommonMounts" (dict "a" (list $state)))) "r") -}}
 {{- $mounts = (concat (default (list) $mounts) (list (mustMergeOverwrite (dict "name" "" "mountPath" "") (dict "name" "datadir" "mountPath" "/var/lib/redpanda/data")))) -}}
diff --git a/charts/redpanda/statefulset.go b/charts/redpanda/statefulset.go
@@ -382,6 +382,10 @@ func statefulSetInitContainerTuning(state *RenderState) *corev1.Container {
 				Name:      "base-config",
 				MountPath: "/etc/redpanda",
 			},
+			corev1.VolumeMount{
+				Name:      `datadir`,
+				MountPath: `/var/lib/redpanda/data`,
+			},
 		),
 	}
 }
diff --git a/charts/redpanda/testdata/template-cases.golden.txtar b/charts/redpanda/testdata/template-cases.golden.txtar
diff --git a/operator/internal/lifecycle/testdata/cases.pools.golden.txtar b/operator/internal/lifecycle/testdata/cases.pools.golden.txtar

Original file line number	Diff line number	Diff line change
`@@ -382,6 +382,10 @@ func statefulSetInitContainerTuning(state RenderState) corev1.Container {`
`382`	`382`	`Name: "base-config",`
`383`	`383`	`MountPath: "/etc/redpanda",`
`384`	`384`	`},`
	`385`	`+ corev1.VolumeMount{`
	`386`	+ Name: `datadir`,
	`387`	+ MountPath: `/var/lib/redpanda/data`,
	`388`	`+ },`
`385`	`389`	`),`
`386`	`390`	`}`
`387`	`391`	`}`