mirror of https://git.rancher.io/charts
Merge pull request #1965 from jakefhyde/update-operators
Update aks/eks/gke operatorspull/1931/head
Jake Hyde
GitHub
commit
0dea3b06c3
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
Binary file not shown.
|
|
@ -6,7 +6,7 @@ annotations:
|
|||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-aks-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.0.6-rc3
|
||||
appVersion: 1.0.6-rc4
|
||||
description: AKS Operator CustomResourceDefinitions
|
||||
name: rancher-aks-operator-crd
|
||||
version: 100.0.5+up1.0.6-rc3
|
||||
version: 100.0.5+up1.0.6-rc4
|
||||
|
|
@ -11,10 +11,10 @@ annotations:
|
|||
catalog.cattle.io/release-name: rancher-aks-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.0.6-rc3
|
||||
appVersion: 1.0.6-rc4
|
||||
description: A Helm chart for provisioning AKS clusters
|
||||
home: https://github.com/rancher/aks-operator
|
||||
name: rancher-aks-operator
|
||||
sources:
|
||||
- https://github.com/rancher/aks-operator
|
||||
version: 100.0.5+up1.0.6-rc3
|
||||
version: 100.0.5+up1.0.6-rc4
|
||||
|
|
@ -5,7 +5,7 @@ global:
|
|||
aksOperator:
|
||||
image:
|
||||
repository: rancher/aks-operator
|
||||
tag: v1.0.6-rc3
|
||||
tag: v1.0.6-rc4
|
||||
|
||||
httpProxy: ""
|
||||
httpsProxy: ""
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-eks-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
description: EKS Operator CustomResourceDefinitions
|
||||
name: rancher-eks-operator-crd
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
|
|
@ -0,0 +1,217 @@
|
|||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
helm.sh/resource-policy: keep
|
||||
name: eksclusterconfigs.eks.cattle.io
|
||||
spec:
|
||||
group: eks.cattle.io
|
||||
names:
|
||||
kind: EKSClusterConfig
|
||||
plural: eksclusterconfigs
|
||||
shortNames:
|
||||
- ekscc
|
||||
singular: eksclusterconfig
|
||||
preserveUnknownFields: false
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
properties:
|
||||
spec:
|
||||
properties:
|
||||
amazonCredentialSecret:
|
||||
nullable: true
|
||||
type: string
|
||||
displayName:
|
||||
nullable: true
|
||||
type: string
|
||||
imported:
|
||||
type: boolean
|
||||
kmsKey:
|
||||
nullable: true
|
||||
type: string
|
||||
kubernetesVersion:
|
||||
nullable: true
|
||||
type: string
|
||||
loggingTypes:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
nodeGroups:
|
||||
items:
|
||||
properties:
|
||||
desiredSize:
|
||||
nullable: true
|
||||
type: integer
|
||||
diskSize:
|
||||
nullable: true
|
||||
type: integer
|
||||
ec2SshKey:
|
||||
nullable: true
|
||||
type: string
|
||||
gpu:
|
||||
nullable: true
|
||||
type: boolean
|
||||
imageId:
|
||||
nullable: true
|
||||
type: string
|
||||
instanceType:
|
||||
nullable: true
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
launchTemplate:
|
||||
nullable: true
|
||||
properties:
|
||||
id:
|
||||
nullable: true
|
||||
type: string
|
||||
name:
|
||||
nullable: true
|
||||
type: string
|
||||
version:
|
||||
nullable: true
|
||||
type: integer
|
||||
type: object
|
||||
maxSize:
|
||||
nullable: true
|
||||
type: integer
|
||||
minSize:
|
||||
nullable: true
|
||||
type: integer
|
||||
nodegroupName:
|
||||
nullable: true
|
||||
type: string
|
||||
requestSpotInstances:
|
||||
nullable: true
|
||||
type: boolean
|
||||
resourceTags:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
spotInstanceTypes:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
subnets:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
tags:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
userData:
|
||||
nullable: true
|
||||
type: string
|
||||
version:
|
||||
nullable: true
|
||||
type: string
|
||||
required:
|
||||
- nodegroupName
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
privateAccess:
|
||||
nullable: true
|
||||
type: boolean
|
||||
publicAccess:
|
||||
nullable: true
|
||||
type: boolean
|
||||
publicAccessSources:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
region:
|
||||
nullable: true
|
||||
type: string
|
||||
secretsEncryption:
|
||||
nullable: true
|
||||
type: boolean
|
||||
securityGroups:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
serviceRole:
|
||||
nullable: true
|
||||
type: string
|
||||
subnets:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
tags:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
type: object
|
||||
status:
|
||||
properties:
|
||||
failureMessage:
|
||||
nullable: true
|
||||
type: string
|
||||
managedLaunchTemplateID:
|
||||
nullable: true
|
||||
type: string
|
||||
managedLaunchTemplateVersions:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
networkFieldsSource:
|
||||
nullable: true
|
||||
type: string
|
||||
phase:
|
||||
nullable: true
|
||||
type: string
|
||||
securityGroups:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
subnets:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
templateVersionsToDelete:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
virtualNetwork:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
annotations:
|
||||
catalog.cattle.io/auto-install: rancher-eks-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.18.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: eksclusterconfigs.eks.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.6.0-alpha'
|
||||
catalog.cattle.io/release-name: rancher-eks-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
description: A Helm chart for provisioning EKS clusters
|
||||
home: https://github.com/rancher/eks-operator
|
||||
name: rancher-eks-operator
|
||||
sources:
|
||||
- https://github.com/rancher/eks-operator
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
|
|
@ -0,0 +1,4 @@
|
|||
You have deployed the Rancher EKS operator
|
||||
Version: {{ .Chart.AppVersion }}
|
||||
Description: This operator provisions EKS clusters
|
||||
from EKSClusterConfig CRs.
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
{{/* vim: set filetype=mustache: */}}
|
||||
|
||||
{{- define "system_default_registry" -}}
|
||||
{{- if .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- else -}}
|
||||
{{- "" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Windows cluster will add default taint for linux nodes,
|
||||
add below linux tolerations to workloads could be scheduled to those linux nodes
|
||||
*/}}
|
||||
{{- define "linux-node-tolerations" -}}
|
||||
- key: "cattle.io/os"
|
||||
value: "linux"
|
||||
effect: "NoSchedule"
|
||||
operator: "Equal"
|
||||
{{- end -}}
|
||||
|
||||
{{- define "linux-node-selector" -}}
|
||||
kubernetes.io/os: linux
|
||||
{{- end -}}
|
||||
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: eks-operator
|
||||
namespace: cattle-system
|
||||
rules:
|
||||
- apiGroups: ['']
|
||||
resources: ['secrets']
|
||||
verbs: ['get', 'list', 'create', 'watch']
|
||||
- apiGroups: ['eks.cattle.io']
|
||||
resources: ['eksclusterconfigs']
|
||||
verbs: ['get', 'list', 'update', 'watch']
|
||||
- apiGroups: ['eks.cattle.io']
|
||||
resources: ['eksclusterconfigs/status']
|
||||
verbs: ['update']
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: eks-operator
|
||||
namespace: cattle-system
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: eks-operator
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: eks-operator
|
||||
namespace: cattle-system
|
||||
|
|
@ -0,0 +1,58 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: eks-config-operator
|
||||
namespace: cattle-system
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
ke.cattle.io/operator: eks
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
ke.cattle.io/operator: eks
|
||||
spec:
|
||||
nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
|
||||
{{- if .Values.nodeSelector }}
|
||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
|
||||
{{- if .Values.tolerations }}
|
||||
{{ toYaml .Values.tolerations | indent 8 }}
|
||||
{{- end }}
|
||||
serviceAccountName: eks-operator
|
||||
securityContext:
|
||||
fsGroup: 1007
|
||||
runAsUser: 1007
|
||||
containers:
|
||||
- name: eks-operator
|
||||
image: {{ template "system_default_registry" . }}{{ .Values.eksOperator.image.repository }}:{{ .Values.eksOperator.image.tag }}
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: HTTP_PROXY
|
||||
value: {{ .Values.httpProxy }}
|
||||
- name: HTTPS_PROXY
|
||||
value: {{ .Values.httpsProxy }}
|
||||
- name: NO_PROXY
|
||||
value: {{ .Values.noProxy }}
|
||||
{{- if .Values.additionalTrustedCAs }}
|
||||
# eks-operator mounts the additional CAs in two places:
|
||||
volumeMounts:
|
||||
# This directory is owned by the eks-operator user so c_rehash works here.
|
||||
- mountPath: /etc/rancher/ssl/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
# This directory is root-owned so c_rehash doesn't work here,
|
||||
# but the cert is here in case update-ca-certificates is called in the future or by the OS.
|
||||
- mountPath: /etc/pki/trust/anchors/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: tls-ca-additional-volume
|
||||
secret:
|
||||
defaultMode: 0400
|
||||
secretName: tls-ca-additional
|
||||
{{- end }}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
namespace: cattle-system
|
||||
name: eks-operator
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
global:
|
||||
cattle:
|
||||
systemDefaultRegistry: ""
|
||||
|
||||
eksOperator:
|
||||
image:
|
||||
repository: rancher/eks-operator
|
||||
tag: v1.1.4-rc2
|
||||
|
||||
httpProxy: ""
|
||||
httpsProxy: ""
|
||||
noProxy: ""
|
||||
additionalTrustedCAs: false
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
##
|
||||
nodeSelector: {}
|
||||
## List of node taints to tolerate (requires Kubernetes >= 1.6)
|
||||
tolerations: []
|
||||
|
||||
|
|
@ -0,0 +1,12 @@
|
|||
annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-gke-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
description: GKE Operator CustomResourceDefinitions
|
||||
name: rancher-gke-operator-crd
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
|
|
@ -0,0 +1,250 @@
|
|||
apiVersion: apiextensions.k8s.io/v1
|
||||
kind: CustomResourceDefinition
|
||||
metadata:
|
||||
annotations:
|
||||
helm.sh/resource-policy: keep
|
||||
name: gkeclusterconfigs.gke.cattle.io
|
||||
spec:
|
||||
group: gke.cattle.io
|
||||
names:
|
||||
kind: GKEClusterConfig
|
||||
plural: gkeclusterconfigs
|
||||
shortNames:
|
||||
- gkecc
|
||||
singular: gkeclusterconfig
|
||||
preserveUnknownFields: false
|
||||
scope: Namespaced
|
||||
versions:
|
||||
- name: v1
|
||||
schema:
|
||||
openAPIV3Schema:
|
||||
properties:
|
||||
spec:
|
||||
properties:
|
||||
clusterAddons:
|
||||
nullable: true
|
||||
properties:
|
||||
horizontalPodAutoscaling:
|
||||
type: boolean
|
||||
httpLoadBalancing:
|
||||
type: boolean
|
||||
networkPolicyConfig:
|
||||
type: boolean
|
||||
type: object
|
||||
clusterIpv4Cidr:
|
||||
nullable: true
|
||||
type: string
|
||||
clusterName:
|
||||
nullable: true
|
||||
type: string
|
||||
description:
|
||||
nullable: true
|
||||
type: string
|
||||
enableKubernetesAlpha:
|
||||
nullable: true
|
||||
type: boolean
|
||||
googleCredentialSecret:
|
||||
nullable: true
|
||||
type: string
|
||||
imported:
|
||||
type: boolean
|
||||
ipAllocationPolicy:
|
||||
nullable: true
|
||||
properties:
|
||||
clusterIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
clusterSecondaryRangeName:
|
||||
nullable: true
|
||||
type: string
|
||||
createSubnetwork:
|
||||
type: boolean
|
||||
nodeIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
servicesIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
servicesSecondaryRangeName:
|
||||
nullable: true
|
||||
type: string
|
||||
subnetworkName:
|
||||
nullable: true
|
||||
type: string
|
||||
useIpAliases:
|
||||
type: boolean
|
||||
type: object
|
||||
kubernetesVersion:
|
||||
nullable: true
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
locations:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
loggingService:
|
||||
nullable: true
|
||||
type: string
|
||||
maintenanceWindow:
|
||||
nullable: true
|
||||
type: string
|
||||
masterAuthorizedNetworks:
|
||||
nullable: true
|
||||
properties:
|
||||
cidrBlocks:
|
||||
items:
|
||||
properties:
|
||||
cidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
displayName:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
enabled:
|
||||
type: boolean
|
||||
type: object
|
||||
monitoringService:
|
||||
nullable: true
|
||||
type: string
|
||||
network:
|
||||
nullable: true
|
||||
type: string
|
||||
networkPolicyEnabled:
|
||||
nullable: true
|
||||
type: boolean
|
||||
nodePools:
|
||||
items:
|
||||
properties:
|
||||
autoscaling:
|
||||
nullable: true
|
||||
properties:
|
||||
enabled:
|
||||
type: boolean
|
||||
maxNodeCount:
|
||||
type: integer
|
||||
minNodeCount:
|
||||
type: integer
|
||||
type: object
|
||||
config:
|
||||
nullable: true
|
||||
properties:
|
||||
diskSizeGb:
|
||||
type: integer
|
||||
diskType:
|
||||
nullable: true
|
||||
type: string
|
||||
imageType:
|
||||
nullable: true
|
||||
type: string
|
||||
labels:
|
||||
additionalProperties:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: object
|
||||
localSsdCount:
|
||||
type: integer
|
||||
machineType:
|
||||
nullable: true
|
||||
type: string
|
||||
oauthScopes:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
preemptible:
|
||||
type: boolean
|
||||
tags:
|
||||
items:
|
||||
nullable: true
|
||||
type: string
|
||||
nullable: true
|
||||
type: array
|
||||
taints:
|
||||
items:
|
||||
properties:
|
||||
effect:
|
||||
nullable: true
|
||||
type: string
|
||||
key:
|
||||
nullable: true
|
||||
type: string
|
||||
value:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
type: object
|
||||
initialNodeCount:
|
||||
nullable: true
|
||||
type: integer
|
||||
management:
|
||||
nullable: true
|
||||
properties:
|
||||
autoRepair:
|
||||
type: boolean
|
||||
autoUpgrade:
|
||||
type: boolean
|
||||
type: object
|
||||
maxPodsConstraint:
|
||||
nullable: true
|
||||
type: integer
|
||||
name:
|
||||
nullable: true
|
||||
type: string
|
||||
version:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
nullable: true
|
||||
type: array
|
||||
privateClusterConfig:
|
||||
nullable: true
|
||||
properties:
|
||||
enablePrivateEndpoint:
|
||||
type: boolean
|
||||
enablePrivateNodes:
|
||||
type: boolean
|
||||
masterIpv4CidrBlock:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
projectID:
|
||||
nullable: true
|
||||
type: string
|
||||
region:
|
||||
nullable: true
|
||||
type: string
|
||||
subnetwork:
|
||||
nullable: true
|
||||
type: string
|
||||
zone:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
status:
|
||||
properties:
|
||||
failureMessage:
|
||||
nullable: true
|
||||
type: string
|
||||
phase:
|
||||
nullable: true
|
||||
type: string
|
||||
type: object
|
||||
type: object
|
||||
served: true
|
||||
storage: true
|
||||
subresources:
|
||||
status: {}
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.18.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.6.0-alpha'
|
||||
catalog.cattle.io/release-name: rancher-gke-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
description: A Helm chart for provisioning GKE clusters
|
||||
home: https://github.com/rancher/gke-operator
|
||||
name: rancher-gke-operator
|
||||
sources:
|
||||
- https://github.com/rancher/gke-operator
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
|
|
@ -0,0 +1,4 @@
|
|||
You have deployed the Rancher GKE operator
|
||||
Version: {{ .Chart.AppVersion }}
|
||||
Description: This operator provisions GKE clusters
|
||||
from GKEClusterConfig CRs.
|
||||
|
|
@ -0,0 +1,25 @@
|
|||
{{/* vim: set filetype=mustache: */}}
|
||||
|
||||
{{- define "system_default_registry" -}}
|
||||
{{- if .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}}
|
||||
{{- else -}}
|
||||
{{- "" -}}
|
||||
{{- end -}}
|
||||
{{- end -}}
|
||||
|
||||
{{/*
|
||||
Windows cluster will add default taint for linux nodes,
|
||||
add below linux tolerations to workloads could be scheduled to those linux nodes
|
||||
*/}}
|
||||
{{- define "linux-node-tolerations" -}}
|
||||
- key: "cattle.io/os"
|
||||
value: "linux"
|
||||
effect: "NoSchedule"
|
||||
operator: "Equal"
|
||||
{{- end -}}
|
||||
|
||||
{{- define "linux-node-selector" -}}
|
||||
kubernetes.io/os: linux
|
||||
{{- end -}}
|
||||
|
||||
|
|
@ -0,0 +1,15 @@
|
|||
kind: ClusterRole
|
||||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
metadata:
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
rules:
|
||||
- apiGroups: ['']
|
||||
resources: ['secrets']
|
||||
verbs: ['get', 'list', 'create', 'watch']
|
||||
- apiGroups: ['gke.cattle.io']
|
||||
resources: ['gkeclusterconfigs']
|
||||
verbs: ['get', 'list', 'update', 'watch']
|
||||
- apiGroups: ['gke.cattle.io']
|
||||
resources: ['gkeclusterconfigs/status']
|
||||
verbs: ['update']
|
||||
|
|
@ -0,0 +1,13 @@
|
|||
apiVersion: rbac.authorization.k8s.io/v1
|
||||
kind: ClusterRoleBinding
|
||||
metadata:
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
roleRef:
|
||||
apiGroup: rbac.authorization.k8s.io
|
||||
kind: ClusterRole
|
||||
name: gke-operator
|
||||
subjects:
|
||||
- kind: ServiceAccount
|
||||
name: gke-operator
|
||||
namespace: cattle-system
|
||||
|
|
@ -0,0 +1,58 @@
|
|||
apiVersion: apps/v1
|
||||
kind: Deployment
|
||||
metadata:
|
||||
name: gke-config-operator
|
||||
namespace: cattle-system
|
||||
spec:
|
||||
replicas: 1
|
||||
selector:
|
||||
matchLabels:
|
||||
ke.cattle.io/operator: gke
|
||||
template:
|
||||
metadata:
|
||||
labels:
|
||||
ke.cattle.io/operator: gke
|
||||
spec:
|
||||
nodeSelector: {{ include "linux-node-selector" . | nindent 8 }}
|
||||
{{- if .Values.nodeSelector }}
|
||||
{{ toYaml .Values.nodeSelector | indent 8 }}
|
||||
{{- end }}
|
||||
tolerations: {{ include "linux-node-tolerations" . | nindent 8 }}
|
||||
{{- if .Values.tolerations }}
|
||||
{{ toYaml .Values.tolerations | indent 8 }}
|
||||
{{- end }}
|
||||
serviceAccountName: gke-operator
|
||||
securityContext:
|
||||
fsGroup: 1007
|
||||
runAsUser: 1007
|
||||
containers:
|
||||
- name: rancher-gke-operator
|
||||
image: {{ template "system_default_registry" . }}{{ .Values.gkeOperator.image.repository }}:{{ .Values.gkeOperator.image.tag }}
|
||||
imagePullPolicy: IfNotPresent
|
||||
env:
|
||||
- name: HTTP_PROXY
|
||||
value: {{ .Values.httpProxy }}
|
||||
- name: HTTPS_PROXY
|
||||
value: {{ .Values.httpsProxy }}
|
||||
- name: NO_PROXY
|
||||
value: {{ .Values.noProxy }}
|
||||
{{- if .Values.additionalTrustedCAs }}
|
||||
# gke-operator mounts the additional CAs in two places:
|
||||
volumeMounts:
|
||||
# This directory is owned by the gke-operator user so c_rehash works here.
|
||||
- mountPath: /etc/rancher/ssl/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
# This directory is root-owned so c_rehash doesn't work here,
|
||||
# but the cert is here in case update-ca-certificates is called in the future or by the OS.
|
||||
- mountPath: /etc/pki/trust/anchors/ca-additional.pem
|
||||
name: tls-ca-additional-volume
|
||||
subPath: ca-additional.pem
|
||||
readOnly: true
|
||||
volumes:
|
||||
- name: tls-ca-additional-volume
|
||||
secret:
|
||||
defaultMode: 0400
|
||||
secretName: tls-ca-additional
|
||||
{{- end }}
|
||||
|
|
@ -0,0 +1,5 @@
|
|||
apiVersion: v1
|
||||
kind: ServiceAccount
|
||||
metadata:
|
||||
namespace: cattle-system
|
||||
name: gke-operator
|
||||
|
|
@ -0,0 +1,20 @@
|
|||
global:
|
||||
cattle:
|
||||
systemDefaultRegistry: ""
|
||||
|
||||
gkeOperator:
|
||||
image:
|
||||
repository: rancher/gke-operator
|
||||
tag: v1.1.4-rc2
|
||||
|
||||
httpProxy: ""
|
||||
httpsProxy: ""
|
||||
noProxy: ""
|
||||
additionalTrustedCAs: false
|
||||
## Node labels for pod assignment
|
||||
## Ref: https://kubernetes.io/docs/user-guide/node-selection/
|
||||
##
|
||||
nodeSelector: {}
|
||||
## List of node taints to tolerate (requires Kubernetes >= 1.6)
|
||||
tolerations: []
|
||||
|
||||
100
index.yaml
100
index.yaml
|
|
@ -1581,17 +1581,17 @@ entries:
|
|||
catalog.cattle.io/release-name: rancher-aks-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.0.6-rc3
|
||||
created: "2022-06-24T16:53:30.545884-04:00"
|
||||
appVersion: 1.0.6-rc4
|
||||
created: "2022-06-30T19:26:47.537049486-04:00"
|
||||
description: A Helm chart for provisioning AKS clusters
|
||||
digest: 8d21a5750fbcd019bc4fd8c6f268f432215a9e80a8e00520717c7d1f764914a8
|
||||
digest: 84e0c413b8a7336b8ca5428a0f4c5cea97da15e5c7102524f8b99e52183b2942
|
||||
home: https://github.com/rancher/aks-operator
|
||||
name: rancher-aks-operator
|
||||
sources:
|
||||
- https://github.com/rancher/aks-operator
|
||||
urls:
|
||||
- assets/rancher-aks-operator/rancher-aks-operator-100.0.5+up1.0.6-rc3.tgz
|
||||
version: 100.0.5+up1.0.6-rc3
|
||||
- assets/rancher-aks-operator/rancher-aks-operator-100.0.5+up1.0.6-rc4.tgz
|
||||
version: 100.0.5+up1.0.6-rc4
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-aks-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
|
|
@ -1716,14 +1716,14 @@ entries:
|
|||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-aks-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.0.6-rc3
|
||||
created: "2022-06-24T16:53:31.380782-04:00"
|
||||
appVersion: 1.0.6-rc4
|
||||
created: "2022-06-30T19:26:48.20933428-04:00"
|
||||
description: AKS Operator CustomResourceDefinitions
|
||||
digest: 9539744faffca672a0126cfac0a6111dda4e0b7d2a068ab14a5dd4bd2d2a77b0
|
||||
digest: 9849b90db8d9735ab4deeb30dc4f31b761adacc175361badac0ecf116efa63b2
|
||||
name: rancher-aks-operator-crd
|
||||
urls:
|
||||
- assets/rancher-aks-operator-crd/rancher-aks-operator-crd-100.0.5+up1.0.6-rc3.tgz
|
||||
version: 100.0.5+up1.0.6-rc3
|
||||
- assets/rancher-aks-operator-crd/rancher-aks-operator-crd-100.0.5+up1.0.6-rc4.tgz
|
||||
version: 100.0.5+up1.0.6-rc4
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
|
|
@ -2956,6 +2956,30 @@ entries:
|
|||
- assets/rancher-csp-adapter/rancher-csp-adapter-1.0.0+up1.0.0-rc2.tgz
|
||||
version: 1.0.0+up1.0.0-rc2
|
||||
rancher-eks-operator:
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-eks-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.18.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: eksclusterconfigs.eks.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.6.0-alpha'
|
||||
catalog.cattle.io/release-name: rancher-eks-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
created: "2022-06-30T19:40:07.716375923-04:00"
|
||||
description: A Helm chart for provisioning EKS clusters
|
||||
digest: 38095aaac3a507d10d5ac8ca639a17713542a304fbba9f633d837cadd00bb920
|
||||
home: https://github.com/rancher/eks-operator
|
||||
name: rancher-eks-operator
|
||||
sources:
|
||||
- https://github.com/rancher/eks-operator
|
||||
urls:
|
||||
- assets/rancher-eks-operator/rancher-eks-operator-100.0.3+up1.1.4-rc2.tgz
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-eks-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
|
|
@ -3026,6 +3050,22 @@ entries:
|
|||
- assets/rancher-eks-operator/rancher-eks-operator-100.0.0+up1.1.1.tgz
|
||||
version: 100.0.0+up1.1.1
|
||||
rancher-eks-operator-crd:
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-eks-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
created: "2022-06-30T19:40:08.45621639-04:00"
|
||||
description: EKS Operator CustomResourceDefinitions
|
||||
digest: b41ac5cba24782d9aad4c6ab7c020e9eba3a05bdd0cc927ebe6e2dd9b60ccfcb
|
||||
name: rancher-eks-operator-crd
|
||||
urls:
|
||||
- assets/rancher-eks-operator-crd/rancher-eks-operator-crd-100.0.3+up1.1.4-rc2.tgz
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
|
|
@ -3634,6 +3674,30 @@ entries:
|
|||
- assets/rancher-gatekeeper-crd/rancher-gatekeeper-crd-3.1.100.tgz
|
||||
version: 3.1.100
|
||||
rancher-gke-operator:
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/kube-version: '>= 1.18.0-0'
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/provides-gvr: gkeclusterconfigs.gke.cattle.io/v1
|
||||
catalog.cattle.io/rancher-version: '>= 2.6.0-alpha'
|
||||
catalog.cattle.io/release-name: rancher-gke-operator
|
||||
catalog.cattle.io/scope: management
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
created: "2022-06-30T19:44:48.949698162-04:00"
|
||||
description: A Helm chart for provisioning GKE clusters
|
||||
digest: db560c33e2c47b8143a6280fdd4873a6972065a790eb3751d82de4e6dc37a28e
|
||||
home: https://github.com/rancher/gke-operator
|
||||
name: rancher-gke-operator
|
||||
sources:
|
||||
- https://github.com/rancher/gke-operator
|
||||
urls:
|
||||
- assets/rancher-gke-operator/rancher-gke-operator-100.0.3+up1.1.4-rc2.tgz
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
- annotations:
|
||||
catalog.cattle.io/auto-install: rancher-gke-operator-crd=match
|
||||
catalog.cattle.io/certified: rancher
|
||||
|
|
@ -3704,6 +3768,22 @@ entries:
|
|||
- assets/rancher-gke-operator/rancher-gke-operator-100.0.0+up1.1.1.tgz
|
||||
version: 100.0.0+up1.1.1
|
||||
rancher-gke-operator-crd:
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
catalog.cattle.io/namespace: cattle-system
|
||||
catalog.cattle.io/os: linux
|
||||
catalog.cattle.io/permits-os: linux,windows
|
||||
catalog.cattle.io/release-name: rancher-gke-operator-crd
|
||||
apiVersion: v2
|
||||
appVersion: 1.1.4-rc2
|
||||
created: "2022-06-30T19:44:49.74441196-04:00"
|
||||
description: GKE Operator CustomResourceDefinitions
|
||||
digest: de872df934983e48dcd63a760fff756320a90ca3c3a2b8129f10af003f7e9ba7
|
||||
name: rancher-gke-operator-crd
|
||||
urls:
|
||||
- assets/rancher-gke-operator-crd/rancher-gke-operator-crd-100.0.3+up1.1.4-rc2.tgz
|
||||
version: 100.0.3+up1.1.4-rc2
|
||||
- annotations:
|
||||
catalog.cattle.io/certified: rancher
|
||||
catalog.cattle.io/hidden: "true"
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/aks-operator/releases/download/v1.0.6-rc3/rancher-aks-operator-crd-1.0.6-rc3.tgz
|
||||
url: https://github.com/rancher/aks-operator/releases/download/v1.0.6-rc4/rancher-aks-operator-crd-1.0.6-rc4.tgz
|
||||
version: 100.0.5
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/aks-operator/releases/download/v1.0.6-rc3/rancher-aks-operator-1.0.6-rc3.tgz
|
||||
url: https://github.com/rancher/aks-operator/releases/download/v1.0.6-rc4/rancher-aks-operator-1.0.6-rc4.tgz
|
||||
version: 100.0.5
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/eks-operator/releases/download/v1.1.3/rancher-eks-operator-crd-1.1.3.tgz
|
||||
version: 100.0.2
|
||||
url: https://github.com/rancher/eks-operator/releases/download/v1.1.4-rc2/rancher-eks-operator-crd-1.1.4-rc2.tgz
|
||||
version: 100.0.3
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/eks-operator/releases/download/v1.1.3/rancher-eks-operator-1.1.3.tgz
|
||||
version: 100.0.2
|
||||
url: https://github.com/rancher/eks-operator/releases/download/v1.1.4-rc2/rancher-eks-operator-1.1.4-rc2.tgz
|
||||
version: 100.0.3
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/gke-operator/releases/download/v1.1.3/rancher-gke-operator-crd-1.1.3.tgz
|
||||
version: 100.0.2
|
||||
url: https://github.com/rancher/gke-operator/releases/download/v1.1.4-rc2/rancher-gke-operator-crd-1.1.4-rc2.tgz
|
||||
version: 100.0.3
|
||||
|
|
|
|||
|
|
@ -1,2 +1,2 @@
|
|||
url: https://github.com/rancher/gke-operator/releases/download/v1.1.3/rancher-gke-operator-1.1.3.tgz
|
||||
version: 100.0.2
|
||||
url: https://github.com/rancher/gke-operator/releases/download/v1.1.4-rc2/rancher-gke-operator-1.1.4-rc2.tgz
|
||||
version: 100.0.3
|
||||
|
|
|
|||
12
release.yaml
12
release.yaml
|
|
@ -13,12 +13,20 @@ rancher-gatekeeper:
|
|||
rancher-gatekeeper-crd:
|
||||
- 100.1.1+up3.7.1
|
||||
rancher-aks-operator:
|
||||
- 100.0.5+up1.0.6-rc3
|
||||
- 100.0.5+up1.0.6-rc4
|
||||
rancher-aks-operator-crd:
|
||||
- 100.0.5+up1.0.6-rc3
|
||||
- 100.0.5+up1.0.6-rc4
|
||||
rancher-csp-adapter:
|
||||
- 1.0.0+up1.0.0-rc2
|
||||
rancher-cis-benchmark:
|
||||
- 2.0.5-rc2
|
||||
rancher-cis-benchmark-crd:
|
||||
- 2.0.5-rc2
|
||||
rancher-eks-operator:
|
||||
- 100.0.3+up1.1.4-rc2
|
||||
rancher-eks-operator-crd:
|
||||
- 100.0.3+up1.1.4-rc2
|
||||
rancher-gke-operator:
|
||||
- 100.0.3+up1.1.4-rc2
|
||||
rancher-gke-operator-crd:
|
||||
- 100.0.3+up1.1.4-rc2
|
||||
|
|
|
|||
Loading…
Reference in New Issue