nodeSelector causes defender deployment issues with twistlock-init
Bug
There are two issues:
- console nodeSelector and defender nodeSelector should not necessarily be the same
- the current nodeSelector is not copied into the defender secrete env variable correctly, which causes the API request for getting the defender ds manifest from the console to fail
For 2, the observed behavior is that the environment variable gets the value map[key:value]
vs. key:value
.
The workaround is to delete (or correct) the TWISTLOCK_NODE_SELECTOR
env variable from the twistlock-defender secret during the init.
Edited by Phillip Warner