ditch cpu limits

and added CiliumClusterWideNetworkPolicy which has to be enabled explicitly:

--set=networkPolicy.hostNetwork=true

Signed-off-by: Michal Minář michal.minar@id.ethz.ch

.gitlab/lint.yaml

@@ -8,7 +8,8 @@ yamllint:
   script:
     - yamllint .
   rules:
-    - if: >-
+    - &renovateGuard
+      if: >-
         $CI_PIPELINE_SOURCE !~ /^(?:push|merge_request_event|schedule|pipeline)$/ &&
         $RENOVATE == "true"
       when: never
@@ -26,10 +27,7 @@ markdownlint:
   script:
     - mdl --warnings .
   rules:
-    - if: >-
-        $CI_PIPELINE_SOURCE !~ /^(?:push|merge_request_event|schedule|pipeline)$/ &&
-        $RENOVATE == "true"
-      when: never
+    - *renovateGuard
     - changes:
         paths:
           - .gitlab/lint.yaml
@@ -46,10 +44,7 @@ hadolint:
   script:
     - find -name 'Dockerfile*' -print0 | xargs -0 hadolint
   rules:
-    - if: >-
-        $CI_PIPELINE_SOURCE !~ /^(?:push|merge_request_event|schedule|pipeline)$/ &&
-        $RENOVATE == "true"
-      when: never
+    - *renovateGuard
     - changes:
         paths:
           - Dockerfile*
@@ -62,20 +57,12 @@ iperf-kube-lint:
   image: registry.gitlab.com/ethz-hpc/pipelines/kube-linter:latest@sha256:f0f8fbe21a03b5f9b6553917815771ed7ab63fcb42125c0057c57e46dd474641
   stage: lint
   script:
-    - set -eo pipefail
-    - cd charts/iperf
-    - >-
-      helm template iperf-server . |
-        awk -v o=/dev/stderr '/^(apiVersion:|---)/ { o="/dev/stdout" } { print >o }' |
-        tee /dev/stderr |
-        kube-linter lint --fail-if-no-objects-found --fail-on-invalid-resource -
+    - make -C charts/iperf lint
   rules:
-    - if: >-
-        $CI_PIPELINE_SOURCE !~ /^(?:push|merge_request_event|schedule|pipeline)$/ &&
-        $RENOVATE == "true"
-      when: never
+    - *renovateGuard
     - changes:
         paths:
           - .gitlab-ci.yaml
           - .gitlab/lint.yaml
           - charts/**/*.yaml
+          - .kube-linter.yaml