From ea5e7c3baaef09093feba5749c5a7dfb9b853e47 Mon Sep 17 00:00:00 2001 From: Steven Crespo Date: Tue, 18 Oct 2022 13:32:36 -0700 Subject: [PATCH 1/3] Update ui-plugin-operator commit ref --- packages/ui-plugin-operator/package.yaml | 2 +- release.yaml | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/packages/ui-plugin-operator/package.yaml b/packages/ui-plugin-operator/package.yaml index 1c4f7a16a..af4258a67 100644 --- a/packages/ui-plugin-operator/package.yaml +++ b/packages/ui-plugin-operator/package.yaml @@ -1,6 +1,6 @@ url: https://github.com/rancher/ui-plugin-operator.git subdirectory: charts/ui-plugin-operator -commit: eaec3c599b4529f43f6e22fccc1107c4ffe332d1 +commit: f1dd1b0e2edb9b0a91375f7f61da63e938f631d2 version: 101.0.0 additionalCharts: - workingDir: charts-crd diff --git a/release.yaml b/release.yaml index 438c0ff56..f8e1f925f 100644 --- a/release.yaml +++ b/release.yaml @@ -105,9 +105,9 @@ harvester-csi-driver: system-upgrade-controller: - 101.0.0+up0.3.3 ui-plugin-operator: -- 101.0.0+up0.1.0 +- 101.0.0+up0.1.0-rc3 ui-plugin-operator-crd: -- 101.0.0+up0.1.0 +- 101.0.0+up0.1.0-rc3 sriov: - 100.0.4+up0.1.0 - 101.0.1+up0.1.0 From ea8e2672e15fb2dde1c4a8dc733d6e093e781e3c Mon Sep 17 00:00:00 2001 From: Steven Crespo Date: Tue, 18 Oct 2022 13:39:30 -0700 Subject: [PATCH 2/3] Make charts --- ...lugin-operator-crd-101.0.0+up0.1.0-rc3.tgz | Bin 0 -> 824 bytes ...ui-plugin-operator-101.0.0+up0.1.0-rc3.tgz | Bin 0 -> 3401 bytes .../101.0.0+up0.1.0-rc3/Chart.yaml | 10 ++ .../101.0.0+up0.1.0-rc3/README.md | 2 + .../101.0.0+up0.1.0-rc3/templates/crds.yaml | 61 +++++++++ .../101.0.0+up0.1.0-rc3/Chart.yaml | 19 +++ .../templates/_helpers.tpl | 89 +++++++++++++ .../templates/dashboardrole.yaml | 33 +++++ .../templates/deployment.yaml | 67 ++++++++++ .../templates/hardened.yaml | 119 ++++++++++++++++++ .../templates/service.yaml | 15 +++ .../templates/serviceaccount.yaml | 99 +++++++++++++++ .../101.0.0+up0.1.0-rc3/values.yaml | 67 ++++++++++ index.yaml | 16 +-- 14 files changed, 589 insertions(+), 8 deletions(-) create mode 100644 assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0-rc3.tgz create mode 100644 assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0-rc3.tgz create mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/Chart.yaml create mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/README.md create mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/templates/crds.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/Chart.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/_helpers.tpl create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/dashboardrole.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/deployment.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/hardened.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/service.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/serviceaccount.yaml create mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/values.yaml diff --git a/assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0-rc3.tgz b/assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0-rc3.tgz new file mode 100644 index 0000000000000000000000000000000000000000..5e20ecf3356465749764688f021de1034dcca192 GIT binary patch literal 824 zcmV-81IPRyiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI&yZ{s!)^;y4Suss%5sK`kQ-2!I|Vsjsp6N?*)B*>B5 zpy+=u^x?)Ia_mJmyI4T)B4{+6c|-Dz$XZXmsh8SLou`28!c+!zHZL)7`izyCyd6Ra zaXFi{Pa(waQ(WZPB%9^u`K7qZuP!DcyST{CCm_B-?xUz9W0;6H=h`jqCjnaP7+E_T ziv&O-qjAerBD0}XyE93F^`j z^ZB%4*$dIRtg>!mWl0qly|43RukUUj@=sglW~!V1!Fs)L9oCEef?>aYU60RoSN%3NH}^g^_s452Pvmlx%~w?97GFs6fJ3{w?=)N1 z%~6&I!gpgA&KW{G;IaOlz6-a5lXBogr<_ywu57AqHMP(F2=jxi2Z`+&+y16DVn=oX zmz&vQy$F5R{-1bX9{ls~&vH;1@h&)U{=5Hpee=i1v{K(9$Fcigmd|$Ye`1!8=fCfP zUk+V&uHnAB?tv^ZFmQ}i@ literal 0 HcmV?d00001 diff --git a/assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0-rc3.tgz b/assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0-rc3.tgz new file mode 100644 index 0000000000000000000000000000000000000000..bcffeedbdb29b316545ff5f74fd895431256d3e0 GIT binary patch literal 3401 zcmV-P4Yu+hiwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PH+}Z`(SO{ac@6pmyQiZluWhSqR$$vT5(3cYS$A+U{b}R}{1~ zwt1mQJ(6JFC{5(E z=+3mdllx!N2I*MmU*bhFk;Xa9S?s87|I+OjYa!K=Pc?#Ho`P0Ob=&l$J%J3yI#f%<4ss zadWU&%VZc0!zhgYTI81PKqkB1WAB;&ORdNL&j~9~-QxjpgZ7BL*LbFwftR+DKA{=Bvneu;ThF!lixiCV?*`HM9~zs*rfnqmyT?@bEE zRysX}a!wP=m$OjEtWX-|yOCi)NFBqg$dZ*))T6TFRpfc*&{PRwluylQ zdH@;ar%ndS%pV{l7mbc+iS>B&>6506{e=SAw)iJc&vaGC>u?<(1(+ zDJ0d4W5G3EXe-@`FUhA zp`7Z4d!38)sNqI9h%}|V}r z(}1HSF{-M7@DvJ#Qk6sPpOw`Gcn*ohSqs^8nSrN*p(+Wth^OT)G(eS}SzxoD2xH>h z5jH<5*C^r&E%o--8L}Lu3Uz)LSKx;8e?QtCcFzC9-QB~d^Zy~*<>mHE@9jlyEQOvSm{SnM z#6BlB5#YVtzPj=*F9WmjDM#>EbtW{!dOcO)cDTLlX(c!l6+E6glQ831Y z6beC!4B3V6VWqO z<9T7H5x?GiZI?XO0&z&fQztDqw&JtZ`JK$=l5#x(|4%CTlkz*b9MR1+t^cv5e~pDT z`=$(5&7#`HEj7hKF)~KB*#g@E%hm19swr^yT!!@U&G<%)BnbXreel2f-@ma$mI>~d zRU0wuKpnR;WLcrBGsWzUdr@JAsuc4V@O#ic&dV7zdMDh(?g#9o&{W{PMxy2tl9iSjxhMJ6}tTUu7Ba^v>P|OjX*iH&E)a7Tf-<5ZH-V zKl~*>W)j_JrxpKn$xTRH5a3QYlBTuXjMaA;M4Ju;6IrS)Fu@^=(Zn>azY$*=9Xc2C zj0ut|NJPO5D5zwHX~C-VSSW0wT-7-HGB7WL268v40M5_^n9a1V2{vs4BreCA4xCId z(J}ZZ;zLQ_bXTesga6ie9)4Fey=+uFyS2~?vpLFRk>$qa@c%XphkHR}Y(2@zm@=v< zs?c~TrNIh+p}MkN2G1BZ>1^#~j=Hs~Yk_)}_^}<+r}iLiZTy!KH5&^eQz;nUJ|TQl z{cm^wpdJ71MEg5W^}h#c%{q}BlO!aCo(Wmz8^g0#&WRd&XOyQgoC=0shMJ^Alh^~O zU6H1HdUX}ls#C(0#kQ`uVY|&438k0ha$_XVdysmvu-UT!NKSu|qR1_H;Btk_^r!7B zPiVEBOL4Jiytib_aWk#+c!iGbX&>}qE~JL5D}OmoefPjQ%5h0~@N(b5sI>#&A-51^qso3N^i@qb~W?LxbumPS3+xiPUJhFnt<;int&^4PoW z=WFZjKjus z1Nv{kDNm7W*fVHUj=n;+M+g!YGGM(afFvuu!jAuIvq$O8Uv_YamT8?yYjxl z`_0_1rX`lMIB+zoO;plo2(Thxi#HXw?Gl|6+jJk!_B`+%_*}F`vQ><*HM0#Vd6||j*yNRyMPgM-{L41QQt`>8xy6H8% zwZhYz*lPyLz1%ecZeVUT1Jl2)O)E3FC>x6vtT6>u>#0F6TXVH*r>O{mU=$0+4wkHul5ZLa%zJTEz+3SWxmZjOA zTv&rr`))u5&{2gBP(u@yAJj5kV5bNd+p^m>*? zBPHQegco18;03oj*;LW`?5Z59itpg^(!w`%6tiqa}s$RJTevq4gFMsz<_?#Jl z_NB&;;tcuketEs_%Kx%dGIw#)54gop$+m`QxDK~SWj1aOey_#&9$RpWlyNCXRcCDB z^I(d4umuB)cJQTz4n7Z@Wf**Ep|t&JwTUbUMP-3Xw5EL?6bf4-8~N!q^SYbFzbA)$ zTfyHhOWah84R~736}Pqf{*Iuoz-zH~2tNAh*Jacx=k|O!MolWFM=M)gc6eS-R2$g_6myU}sGWAyILvSWD~xeMe4!x#p?7D}Hsj~(L*Zf_}$VChX`}@259>7Goy>U9P~A=;?nA4dI=Xq`=rvNSL76b|I#78wHdf!|L-2|?sx0IhdWQ-e>_P0LHB=t@U0*C z?EBql%TMfwZyCvz-w3ik`!D@34{+D!r@vuyhgj*BA=3S40e-w%t^8LD9X+$IV?mwG zRPA5eN)uhE72WGl5JIMuH|5bs!%k}z*F%N*v`dMdumVZr*8if00960x4dUS08Rh^;c>0= literal 0 HcmV?d00001 diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/Chart.yaml b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/Chart.yaml new file mode 100644 index 000000000..e9d807dbf --- /dev/null +++ b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/Chart.yaml @@ -0,0 +1,10 @@ +annotations: + catalog.cattle.io/certified: rancher + catalog.cattle.io/hidden: "true" + catalog.cattle.io/namespace: cattle-ui-plugin-system + catalog.cattle.io/release-name: ui-plugin-operator-crd +apiVersion: v1 +description: Installs the CRDs for ui-plugin-operator. +name: ui-plugin-operator-crd +type: application +version: 101.0.0+up0.1.0-rc3 diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/README.md b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/README.md new file mode 100644 index 000000000..a68add828 --- /dev/null +++ b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/README.md @@ -0,0 +1,2 @@ +# ui-plugin-operator-crd +A Rancher chart that installs the CRDs used by ui-plugin-operator. diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/templates/crds.yaml b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/templates/crds.yaml new file mode 100644 index 000000000..18b71d5b0 --- /dev/null +++ b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0-rc3/templates/crds.yaml @@ -0,0 +1,61 @@ +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: uiplugins.catalog.cattle.io +spec: + group: catalog.cattle.io + names: + kind: UIPlugin + plural: uiplugins + singular: uiplugin + preserveUnknownFields: false + scope: Namespaced + versions: + - additionalPrinterColumns: + - jsonPath: .spec.release.name + name: Plugin Name + type: string + - jsonPath: .status.version + name: Version + type: string + - jsonPath: .status.state + name: State + type: string + name: v1 + schema: + openAPIV3Schema: + properties: + spec: + properties: + plugin: + properties: + endpoint: + nullable: true + type: string + metadata: + additionalProperties: + nullable: true + type: string + nullable: true + type: object + name: + nullable: true + type: string + noCache: + type: boolean + version: + nullable: true + type: string + type: object + type: object + status: + properties: + cacheState: + nullable: true + type: string + type: object + type: object + served: true + storage: true + subresources: + status: {} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/Chart.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/Chart.yaml new file mode 100644 index 000000000..f8ba6a38f --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/Chart.yaml @@ -0,0 +1,19 @@ +annotations: + catalog.cattle.io/auto-install: ui-plugin-operator-crd=match + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: UI Plugin Operator + catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.25.0-0' + catalog.cattle.io/namespace: cattle-ui-plugin-system + catalog.cattle.io/os: linux + catalog.cattle.io/permits-os: linux, windows + catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0' + catalog.cattle.io/release-name: ui-plugin-operator +apiVersion: v1 +appVersion: 0.1.0 +description: A UI Plugin Operator Chart for plugin management in Rancher +keywords: +- applications +- infrastructure +name: ui-plugin-operator +type: application +version: 101.0.0+up0.1.0-rc3 diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/_helpers.tpl b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/_helpers.tpl new file mode 100644 index 000000000..0d41d827f --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/_helpers.tpl @@ -0,0 +1,89 @@ +{{/* +Expand the name of the chart. +*/}} +{{- define "ui-plugin-operator.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "ui-plugin-operator.fullname" -}} +{{- if .Values.fullnameOverride }} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- $name := default .Chart.Name .Values.nameOverride }} +{{- if contains $name .Release.Name }} +{{- .Release.Name | trunc 63 | trimSuffix "-" }} +{{- else }} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "ui-plugin-operator.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "ui-plugin-operator.labels" -}} +helm.sh/chart: {{ include "ui-plugin-operator.chart" . }} +{{ include "ui-plugin-operator.selectorLabels" . }} +{{- if .Chart.AppVersion }} +app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} +{{- end }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "ui-plugin-operator.selectorLabels" -}} +app.kubernetes.io/name: {{ include "ui-plugin-operator.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Create the name of the service account to use +*/}} +{{- define "ui-plugin-operator.serviceAccountName" -}} +{{- if .Values.serviceAccount.create }} +{{- default (include "ui-plugin-operator.fullname" .) .Values.serviceAccount.name }} +{{- else }} +{{- default "default" .Values.serviceAccount.name }} +{{- end }} +{{- end }} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Windows cluster will add default taint for linux nodes, +add below linux tolerations to workloads could be scheduled to those linux nodes +*/}} +{{- define "linux-node-tolerations" -}} +- key: "cattle.io/os" + value: "linux" + effect: "NoSchedule" + operator: "Equal" +{{- end -}} + +{{- define "linux-node-selector" -}} +{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}} +beta.kubernetes.io/os: linux +{{- else -}} +kubernetes.io/os: linux +{{- end -}} +{{- end -}} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/dashboardrole.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/dashboardrole.yaml new file mode 100644 index 000000000..e8b7c456c --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/dashboardrole.yaml @@ -0,0 +1,33 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ .Chart.Name }}-dashboard + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +rules: +- apiGroups: + - "" + resources: + - services/proxy + resourceNames: + - "http:{{ .Chart.Name }}:{{ .Values.service.port }}" + - "https:{{ .Chart.Name }}:{{ .Values.service.port }}" + verbs: + - '*' +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ .Chart.Name }}-dashboard + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ .Chart.Name }}-dashboard +subjects: +- kind: Group + name: system:authenticated + apiGroup: rbac.authorization.k8s.io diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/deployment.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/deployment.yaml new file mode 100644 index 000000000..b355b40ff --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/deployment.yaml @@ -0,0 +1,67 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ .Chart.Name }} + labels: + {{- include "ui-plugin-operator.labels" . | nindent 4 }} +spec: + {{- if not .Values.autoscaling.enabled }} + replicas: {{ .Values.replicas }} + {{- end }} + selector: + matchLabels: + {{- include "ui-plugin-operator.selectorLabels" . | nindent 6 }} + template: + metadata: + {{- with .Values.podAnnotations }} + annotations: + {{- toYaml . | nindent 8 }} + {{- end }} + labels: + {{- include "ui-plugin-operator.selectorLabels" . | nindent 8 }} + spec: + {{- with .Values.imagePullSecrets }} + imagePullSecrets: + {{- toYaml . | nindent 8 }} + {{- end }} + nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} +{{- if .Values.nodeSelector }} +{{ toYaml .Values.nodeSelector | indent 8 }} +{{- end }} + tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} +{{- if .Values.tolerations }} +{{ toYaml .Values.tolerations | indent 8 }} +{{- end }} + serviceAccountName: {{ .Chart.Name }} + containers: + - name: {{ .Chart.Name }} + securityContext: + {{- toYaml .Values.securityContext | nindent 12 }} + image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" + imagePullPolicy: {{ .Values.image.pullPolicy }} + ports: + - name: http + containerPort: 80 + protocol: TCP + args: + - {{ template "ui-plugin-operator.name" . }} +{{- if .Values.debug }} + - --debug + - --debug-level={{ .Values.debugLevel }} +{{- end }} +{{- if .Values.additionalArgs }} +{{- toYaml .Values.additionalArgs | nindent 10 }} +{{- end }} + # livenessProbe: + # httpGet: + # path: / + # port: http + # readinessProbe: + # httpGet: + # path: / + # port: http + resources: + {{- with .Values.affinity }} + affinity: + {{- toYaml . | nindent 8 }} + {{- end }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/hardened.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/hardened.yaml new file mode 100644 index 000000000..ef3e90d08 --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/hardened.yaml @@ -0,0 +1,119 @@ +{{- $namespaces := dict "_0" .Release.Namespace -}} +apiVersion: batch/v1 +kind: Job +metadata: + name: {{ .Chart.Name }}-patch-sa + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }}-patch-sa + annotations: + "helm.sh/hook": post-install, post-upgrade + "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation +spec: + template: + metadata: + name: {{ .Chart.Name }}-patch-sa + labels: + app: {{ .Chart.Name }}-patch-sa + spec: + serviceAccountName: {{ .Chart.Name }}-patch-sa + securityContext: + runAsNonRoot: true + runAsUser: 1000 + restartPolicy: Never + containers: + {{- range $_, $ns := $namespaces }} + - name: patch-sa-{{ $ns }} + image: {{ template "system_default_registry" $ }}{{ $.Values.global.kubectl.repository }}:{{ $.Values.global.kubectl.tag }} + imagePullPolicy: {{ $.Values.global.kubectl.pullPolicy }} + command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] + args: ["-n", "{{ $ns }}"] + {{- end }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ .Chart.Name }}-patch-sa + labels: + app: {{ .Chart.Name }}-patch-sa +rules: +- apiGroups: + - "" + resources: + - serviceaccounts + verbs: ['get', 'patch'] +- apiGroups: ['policy'] + resources: ['podsecuritypolicies'] + verbs: ['use'] + resourceNames: + - {{ .Chart.Name }}-patch-sa +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ .Chart.Name }}-patch-sa + labels: + app: {{ .Chart.Name }}-patch-sa +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ .Chart.Name }}-patch-sa +subjects: +- kind: ServiceAccount + name: {{ .Chart.Name }}-patch-sa + namespace: {{ .Release.Namespace }} +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ .Chart.Name }}-patch-sa + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }}-patch-sa +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ .Chart.Name }}-patch-sa + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }}-patch-sa +spec: + privileged: false + hostNetwork: false + hostIPC: false + hostPID: false + runAsUser: + rule: 'MustRunAsNonRoot' + seLinux: + rule: 'RunAsAny' + supplementalGroups: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + fsGroup: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + readOnlyRootFilesystem: false + volumes: + - 'secret' +{{- range $_, $ns := $namespaces }} +--- +apiVersion: networking.k8s.io/v1 +kind: NetworkPolicy +metadata: + name: default-allow-all + namespace: {{ $ns }} +spec: + podSelector: {} + ingress: + - {} + egress: + - {} + policyTypes: + - Ingress + - Egress +{{- end }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/service.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/service.yaml new file mode 100644 index 000000000..7c4e735e9 --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/service.yaml @@ -0,0 +1,15 @@ +apiVersion: v1 +kind: Service +metadata: + name: {{ .Chart.Name }} + labels: + {{- include "ui-plugin-operator.labels" . | nindent 4 }} +spec: + type: {{ .Values.service.type }} + ports: + - port: {{ .Values.service.port }} + targetPort: {{ .Values.service.targetPort }} + protocol: TCP + name: http + selector: + {{- include "ui-plugin-operator.selectorLabels" . | nindent 4 }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/serviceaccount.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/serviceaccount.yaml new file mode 100644 index 000000000..ca9991c09 --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/templates/serviceaccount.yaml @@ -0,0 +1,99 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +rules: +- apiGroups: [""] + resources: ["configmaps"] + verbs: ["*"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ .Chart.Name }} +subjects: +- kind: ServiceAccount + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +rules: +- apiGroups: ["catalog.cattle.io"] + resources: + - uiplugins + - uiplugins/status + verbs: ["*"] +- apiGroups: ["coordination.k8s.io"] + resources: + - leases + verbs: ["*"] +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + name: {{ .Chart.Name }} +subjects: +- kind: ServiceAccount + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ .Chart.Name }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Chart.Name }} +spec: + privileged: false + hostNetwork: false + hostIPC: false + hostPID: false + runAsUser: + rule: 'MustRunAsNonRoot' + seLinux: + rule: 'RunAsAny' + supplementalGroups: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + fsGroup: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + readOnlyRootFilesystem: false + volumes: + - 'secret' diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/values.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/values.yaml new file mode 100644 index 000000000..a64800b4e --- /dev/null +++ b/charts/ui-plugin-operator/101.0.0+up0.1.0-rc3/values.yaml @@ -0,0 +1,67 @@ +# Default values for sample. +# This is a YAML-formatted file. +# Declare variables to be passed into your templates. + +replicaCount: 1 + +image: + repository: rancher/ui-plugin-operator + pullPolicy: Always + tag: "v0.1.0-rc3" + +imagePullSecrets: [] +nameOverride: "" +fullnameOverride: "" + +service: + type: ClusterIP + port: 80 + targetPort: 8080 + +autoscaling: + enabled: false + minReplicas: 1 + maxReplicas: 100 + targetCPUUtilizationPercentage: 80 + +replicas: 1 + +resources: {} + +securityContext: + runAsNonRoot: true + runAsUser: 1000 + +nodeSelector: {} + +tolerations: [] + +affinity: {} + +podAnnotations: [] + +additionalArgs: [] + +global: + cattle: + systemDefaultRegistry: "" + kubectl: + repository: rancher/kubectl + tag: v1.20.2 + pullPolicy: IfNotPresent + rbac: + ## Create RBAC resources for ServiceAccounts and users + ## + enabled: false + # create: true + # userRoles: + # ## Create default user ClusterRoles to allow users to interact with Prometheus CRs, ConfigMaps, and Secrets + # create: true + # ## Aggregate default user ClusterRoles into default k8s ClusterRoles + # aggregateToDefaultRoles: true + + # pspEnabled: true + # pspAnnotations: {} + +debug: false +debugLevel: 0 diff --git a/index.yaml b/index.yaml index 4960f118a..831dbd3a2 100755 --- a/index.yaml +++ b/index.yaml @@ -10787,17 +10787,17 @@ entries: catalog.cattle.io/release-name: ui-plugin-operator apiVersion: v1 appVersion: 0.1.0 - created: "2022-10-06T16:13:15.465631-07:00" + created: "2022-10-18T13:39:25.401002-07:00" description: A UI Plugin Operator Chart for plugin management in Rancher - digest: 7d7f703fe562de50f848e38991115ef90937742a29fb9e68901de0b4c4955b0f + digest: 6ff6a44aee7a330d30b2c2f86df6bebad3ed5851cabe93fce5226ceff70b786d keywords: - applications - infrastructure name: ui-plugin-operator type: application urls: - - assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0.tgz - version: 101.0.0+up0.1.0 + - assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0-rc3.tgz + version: 101.0.0+up0.1.0-rc3 ui-plugin-operator-crd: - annotations: catalog.cattle.io/certified: rancher @@ -10805,12 +10805,12 @@ entries: catalog.cattle.io/namespace: cattle-ui-plugin-system catalog.cattle.io/release-name: ui-plugin-operator-crd apiVersion: v1 - created: "2022-09-28T09:09:17.867219-07:00" + created: "2022-10-18T13:39:25.402141-07:00" description: Installs the CRDs for ui-plugin-operator. - digest: a129672cebea1b8540f5df17c55ad76b1a48f84d83150311cd409636c1d51e24 + digest: 32d06de797c09414842bb9eaf02bbdc1c946025fef2a45545613a4001113c8d5 name: ui-plugin-operator-crd type: application urls: - - assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0.tgz - version: 101.0.0+up0.1.0 + - assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0-rc3.tgz + version: 101.0.0+up0.1.0-rc3 generated: "2022-02-25T11:29:45.848360265+05:30" From 67d767f8ea14165a599203669db031e217ed5b71 Mon Sep 17 00:00:00 2001 From: Steven Crespo Date: Tue, 18 Oct 2022 13:40:34 -0700 Subject: [PATCH 3/3] Make remove --- ...ui-plugin-operator-crd-101.0.0+up0.1.0.tgz | Bin 821 -> 0 bytes .../ui-plugin-operator-101.0.0+up0.1.0.tgz | Bin 3392 -> 0 bytes .../101.0.0+up0.1.0/Chart.yaml | 10 -- .../101.0.0+up0.1.0/README.md | 2 - .../101.0.0+up0.1.0/templates/crds.yaml | 61 --------- .../101.0.0+up0.1.0/Chart.yaml | 19 --- .../101.0.0+up0.1.0/templates/_helpers.tpl | 89 ------------- .../templates/dashboardrole.yaml | 33 ----- .../101.0.0+up0.1.0/templates/deployment.yaml | 67 ---------- .../101.0.0+up0.1.0/templates/hardened.yaml | 119 ------------------ .../101.0.0+up0.1.0/templates/service.yaml | 15 --- .../templates/serviceaccount.yaml | 99 --------------- .../101.0.0+up0.1.0/values.yaml | 65 ---------- 13 files changed, 579 deletions(-) delete mode 100644 assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0.tgz delete mode 100644 assets/ui-plugin-operator/ui-plugin-operator-101.0.0+up0.1.0.tgz delete mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0/Chart.yaml delete mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0/README.md delete mode 100644 charts/ui-plugin-operator-crd/101.0.0+up0.1.0/templates/crds.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/Chart.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/_helpers.tpl delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/dashboardrole.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/deployment.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/hardened.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/service.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/templates/serviceaccount.yaml delete mode 100644 charts/ui-plugin-operator/101.0.0+up0.1.0/values.yaml diff --git a/assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0.tgz b/assets/ui-plugin-operator-crd/ui-plugin-operator-crd-101.0.0+up0.1.0.tgz deleted file mode 100644 index d1bcb6fa61aea9cac3edb4645498b925d7103acc..0000000000000000000000000000000000000000 GIT binary patch literal 0 HcmV?d00001 literal 821 zcmV-51Iqj#iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PI&yZ{s!)^;y4Suss%5s5ssfx&_V_$e~4$#pXUHCl)spNsuGA zM$!LX=);Xaq&SOYcM(AEB4{+6c|-Dz$VyMWsaD!fou`28!c+!zwkR-gy1~*+UJoIJ z_;_*AJcSU4Pcc8APqK?yHW!!T<9t35*?gX56A*8Z`y{H!7$)M?xekkaCqQc*BWq`4 zo&ZQ>G;WnjWHyv)cP1&Ye$b?H2xw(Nq1Ua@N|DXs1BZ$}^txCqDSDKYLu;HqZN9jP zOl9w|K!z~Vv>u*A|9(x->w5}OJDbBgOB6*JwCCpi#zsbCB5*;lxVw(<;6hKJGt1D*Ot@Zx~#KyVr4-k=AEzeWUp>-?q{F(%=J{){e$&(;aY4L`w9Ji-MX%{J+wYIq6S&z zownTf4Zv2$;L=bI^>3-y<*537>~8L3?Cy`}SiX?UNjBe5kz0Nx$vqCu>VBu$vTlL0 z7zp2vT{>q7ZI8$Hcluqp4Nl6yhgLZ+-Mg}`y3y1z`xDFuS@#kDc zVQyr3R8em|NM&qo0PH+%bK5qP`OIIj!{iyYsYy$gUoxELW?U!N$zAGdoTQyjn#n-q zO2QcgSOAo*bNt_L0FV?((XwJYcJ9vj5KF*fcd=M3_615#gN)@<$^((1BwEPrqZyGp zT#%GKxtrGS_xt<1yY_Ft-*5jN?CkfS40eZugZ=&f?qK+&KiEAO9z22m9noLga;1rU z(!VvW_Tv7RG{U*iL{q_4&Pk{F7=t-VMFo$b_iry@5Dxak ze$a=XVG!=@nUB5BsfLcqNQ@D<&S1GRwNM(<&S^qLz$nkpJ4Z8=Db*^dptj(Q@kW4-;$M6)T5%~Mc?zxrKw`VD4&|y$c<={2quIn z^Z-)IPn-;tSwBEZ&TAe0CDxm7N24 z3bDl*ftGpMWhR~ohN>XkAf6N_%m9@-WP#0DA&iMLN7#I&T%#nhhBK;XFp?rgJ;PkV z(TUoEBf%$h`WwmAmgTol>WXFuXO@w}=~Uu$JumjCmcyqnRAaP4MoLWYMY*kZ*^XoZ zmZ|J@DYzOdnaUcvWb`Y+aXu}@Yrnk3IkE^Iuljpw9ru4_skcARkYy-UsI%L+0@vLC zd;Q^{b^jj>hdYn=|9!NJi|yy$>+{T56FoyPw;+g#{T$mwfcJd+^3uDw2#j%{9Km1J znb1u0Ay@)hD-ya?!m+^_{^8up`ZWt*jCtTO><{fnn!d{?6M7DQ;6s56d15|#meInX zl8S=4xEJtGPM8fcO$=d|5PE;2!)@WUpiC_3rF;r1!}!P0dozI|9CJuw!8M^=Ir+IhY79DK#xu%| zUqp;cWtcCx-9*Nvld_aEom66NdoZQ=t{mS)^h{NFp4nwYFE`)YC6ARr9Fp+FNz2VG z`D}E4C3BgiTu;FNmkR!+{1z@pbaPGX{@BpJ+Qyo5Qv|DKQ|;y!n&O}s86(?lgYAUn z?zUG|7r6Ueg!J&m_)m<)2>wq#_@Di+KUgA71$WGCmkc#aplW=j-G35*VlM9V4nXF=Q zsgEQWFC3y$!wM&|Q>LY#{WVf;FF5Gr#wAj&k)1OYVfT7$LXXGTTuuEzcIkclf+zwc zAkK$2wlY_^;X>=)_wiL`tqB%7{}x);%n$3tu(X=tk5{4P^>x?mN=d*kKKL6U=&~J4 zS-6nsbAj=*EP|rW)w`goO#5{PQytb~+rJS4yYTXhzvRa(qW#%v#h)&@39$`Jl`YwZL)1hFZPqhUmfP^ucxX1O^Vo;+)XF{GbK@tVA$e95J70)oqS$Q7|g>{sx z8fOOsGZ@s6yF~?XiY5rHr*%z0Y7-z)G1qk9WP-7dz&{r63i_tIRILd7*T(bk+oI`Y zqdeJ-jaHb>Q67mjGcJe!^B^4T27P1eNk+z$QB6^W#!D#-R`@H`rR_3!#;8f_XfJcr zja^*})Um}6?U+8cdueOqzl5mSSP+>=!SLn@;p^&u!@d1x{I}EJ8w?-gzx!zQI*}Zc zI3&5A30dSD!_ybei5hsPlqV6K2!>vYnj}P%$OEWck-B?&c^OoyQ@|9(wzjunyUiU5 zg_q>=XC%uyka{w=8MXjOMt_we&n$T0@`=mzr|m0lXtkY5alWXHTe8KxnbujfLdW(r zFZwVOQp4q?znrJOdg2`AxS-s7-t&SW@NOXfUnox~pFZF&2!Bx&b0trk1wmRkit>n3|U9u>S3usEkzs{TJYrC&)GI8Z;_HTf8Y8WG-}N zQENrDu&B#8!pkaH&Hk314x|>10hF$|W7WQ0d0XTCdhS=#63bQWI~wI7DrnRMSQ4-W zo|4;Una!cFCb;=LXE|Gozevg&lwT~THI{1{Ypm~fE3D|0d)2w3cHwo&%SuW1HVbPN zG;1l5&e&@OZ7brgqbu@LB|}{hU!aYv!Ca%ZdIfKd@bo(N>Va}6cXfbkm|M-jbRTQe ziVQBw+GYi7OhMV&HR#$|Krg7-(G+8B}329dxp zSel;evVtw$vc=ctA_52k+uhX{Fq|WMS(C`JeA|%=t5IscA1DD@s?Y+eX+pnKoxzrv z8J#0XrAAVWF=`Bf75uNL+uZ;e(X$A)SNrX5wD#*MNF)jU##9>740IXT@|{NQvM66} z+{~apv@7!19-yuD|7S!d$T7L)Tfpn;|GR_TcKv_%(f_}nR@HWG4nWxoFO4<$pZk7S zlE4+DmNCQFc+bnA;XlN9qr^mJrUi=JVP2w+bH#1;%M#^Gh*Lj;OekHxYTt6-@@y(e zf~(*`f($hVnZ4%y2yCay;}|i)WDCYP5fTI2Z7Wn%@G6j59|&w9ALwx3ua`j6JKxCH zYZJZFd6PLmRL6p!2%&2aysDuO3Z;F;Sh_J1%^}mJ6LpMp`!fLO^el}=O2VfI&pvO# zGj4UVuA*+~ZC^;1)wE+X|xQI@}vj_VnjG>?1%ID}7SC!g@9(_?Ghgya8un4*9~4 z=UK+=PoD@|nvqqMJ=bfluj)bzAf?mhX=#GcK!EY=kfO+_tL)6`=4+8>IXjhemmOoWBcQ{ zlw``U1z8{c=l-XAcx&_Bzp%MQtaQT=>F%=t-(Ia&{;P$So>|v1r_N@o=C^I7iO$uE z?zJcgArs2$^5~*rm$i!PzQX?RK%F;A1>C<@-y-n8OQC+dF#j&Od<^OzGN^xO=i;$F Ww#W8exBm$M0RR7u!CRUDP5=PZ!o<)3 diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/Chart.yaml b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/Chart.yaml deleted file mode 100644 index 1168f4c94..000000000 --- a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/Chart.yaml +++ /dev/null @@ -1,10 +0,0 @@ -annotations: - catalog.cattle.io/certified: rancher - catalog.cattle.io/hidden: "true" - catalog.cattle.io/namespace: cattle-ui-plugin-system - catalog.cattle.io/release-name: ui-plugin-operator-crd -apiVersion: v1 -description: Installs the CRDs for ui-plugin-operator. -name: ui-plugin-operator-crd -type: application -version: 101.0.0+up0.1.0 diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/README.md b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/README.md deleted file mode 100644 index a68add828..000000000 --- a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/README.md +++ /dev/null @@ -1,2 +0,0 @@ -# ui-plugin-operator-crd -A Rancher chart that installs the CRDs used by ui-plugin-operator. diff --git a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/templates/crds.yaml b/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/templates/crds.yaml deleted file mode 100644 index 18b71d5b0..000000000 --- a/charts/ui-plugin-operator-crd/101.0.0+up0.1.0/templates/crds.yaml +++ /dev/null @@ -1,61 +0,0 @@ -apiVersion: apiextensions.k8s.io/v1 -kind: CustomResourceDefinition -metadata: - name: uiplugins.catalog.cattle.io -spec: - group: catalog.cattle.io - names: - kind: UIPlugin - plural: uiplugins - singular: uiplugin - preserveUnknownFields: false - scope: Namespaced - versions: - - additionalPrinterColumns: - - jsonPath: .spec.release.name - name: Plugin Name - type: string - - jsonPath: .status.version - name: Version - type: string - - jsonPath: .status.state - name: State - type: string - name: v1 - schema: - openAPIV3Schema: - properties: - spec: - properties: - plugin: - properties: - endpoint: - nullable: true - type: string - metadata: - additionalProperties: - nullable: true - type: string - nullable: true - type: object - name: - nullable: true - type: string - noCache: - type: boolean - version: - nullable: true - type: string - type: object - type: object - status: - properties: - cacheState: - nullable: true - type: string - type: object - type: object - served: true - storage: true - subresources: - status: {} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/Chart.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/Chart.yaml deleted file mode 100644 index 2a4409676..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/Chart.yaml +++ /dev/null @@ -1,19 +0,0 @@ -annotations: - catalog.cattle.io/auto-install: ui-plugin-operator-crd=match - catalog.cattle.io/certified: rancher - catalog.cattle.io/display-name: UI Plugin Operator - catalog.cattle.io/kube-version: '>= 1.16.0-0 < 1.25.0-0' - catalog.cattle.io/namespace: cattle-ui-plugin-system - catalog.cattle.io/os: linux - catalog.cattle.io/permits-os: linux, windows - catalog.cattle.io/rancher-version: '>= 2.7.0-0 < 2.8.0-0' - catalog.cattle.io/release-name: ui-plugin-operator -apiVersion: v1 -appVersion: 0.1.0 -description: A UI Plugin Operator Chart for plugin management in Rancher -keywords: -- applications -- infrastructure -name: ui-plugin-operator -type: application -version: 101.0.0+up0.1.0 diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/_helpers.tpl b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/_helpers.tpl deleted file mode 100644 index 0d41d827f..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/_helpers.tpl +++ /dev/null @@ -1,89 +0,0 @@ -{{/* -Expand the name of the chart. -*/}} -{{- define "ui-plugin-operator.name" -}} -{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Create a default fully qualified app name. -We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). -If release name contains chart name it will be used as a full name. -*/}} -{{- define "ui-plugin-operator.fullname" -}} -{{- if .Values.fullnameOverride }} -{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- $name := default .Chart.Name .Values.nameOverride }} -{{- if contains $name .Release.Name }} -{{- .Release.Name | trunc 63 | trimSuffix "-" }} -{{- else }} -{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" }} -{{- end }} -{{- end }} -{{- end }} - -{{/* -Create chart name and version as used by the chart label. -*/}} -{{- define "ui-plugin-operator.chart" -}} -{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} -{{- end }} - -{{/* -Common labels -*/}} -{{- define "ui-plugin-operator.labels" -}} -helm.sh/chart: {{ include "ui-plugin-operator.chart" . }} -{{ include "ui-plugin-operator.selectorLabels" . }} -{{- if .Chart.AppVersion }} -app.kubernetes.io/version: {{ .Chart.AppVersion | quote }} -{{- end }} -app.kubernetes.io/managed-by: {{ .Release.Service }} -{{- end }} - -{{/* -Selector labels -*/}} -{{- define "ui-plugin-operator.selectorLabels" -}} -app.kubernetes.io/name: {{ include "ui-plugin-operator.name" . }} -app.kubernetes.io/instance: {{ .Release.Name }} -{{- end }} - -{{/* -Create the name of the service account to use -*/}} -{{- define "ui-plugin-operator.serviceAccountName" -}} -{{- if .Values.serviceAccount.create }} -{{- default (include "ui-plugin-operator.fullname" .) .Values.serviceAccount.name }} -{{- else }} -{{- default "default" .Values.serviceAccount.name }} -{{- end }} -{{- end }} - -{{- define "system_default_registry" -}} -{{- if .Values.global.cattle.systemDefaultRegistry -}} -{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} -{{- else -}} -{{- "" -}} -{{- end -}} -{{- end -}} - -{{/* -Windows cluster will add default taint for linux nodes, -add below linux tolerations to workloads could be scheduled to those linux nodes -*/}} -{{- define "linux-node-tolerations" -}} -- key: "cattle.io/os" - value: "linux" - effect: "NoSchedule" - operator: "Equal" -{{- end -}} - -{{- define "linux-node-selector" -}} -{{- if semverCompare "<1.14-0" .Capabilities.KubeVersion.GitVersion -}} -beta.kubernetes.io/os: linux -{{- else -}} -kubernetes.io/os: linux -{{- end -}} -{{- end -}} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/dashboardrole.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/dashboardrole.yaml deleted file mode 100644 index e8b7c456c..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/dashboardrole.yaml +++ /dev/null @@ -1,33 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: {{ .Chart.Name }}-dashboard - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -rules: -- apiGroups: - - "" - resources: - - services/proxy - resourceNames: - - "http:{{ .Chart.Name }}:{{ .Values.service.port }}" - - "https:{{ .Chart.Name }}:{{ .Values.service.port }}" - verbs: - - '*' ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: {{ .Chart.Name }}-dashboard - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: {{ .Chart.Name }}-dashboard -subjects: -- kind: Group - name: system:authenticated - apiGroup: rbac.authorization.k8s.io diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/deployment.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/deployment.yaml deleted file mode 100644 index b355b40ff..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/deployment.yaml +++ /dev/null @@ -1,67 +0,0 @@ -apiVersion: apps/v1 -kind: Deployment -metadata: - name: {{ .Chart.Name }} - labels: - {{- include "ui-plugin-operator.labels" . | nindent 4 }} -spec: - {{- if not .Values.autoscaling.enabled }} - replicas: {{ .Values.replicas }} - {{- end }} - selector: - matchLabels: - {{- include "ui-plugin-operator.selectorLabels" . | nindent 6 }} - template: - metadata: - {{- with .Values.podAnnotations }} - annotations: - {{- toYaml . | nindent 8 }} - {{- end }} - labels: - {{- include "ui-plugin-operator.selectorLabels" . | nindent 8 }} - spec: - {{- with .Values.imagePullSecrets }} - imagePullSecrets: - {{- toYaml . | nindent 8 }} - {{- end }} - nodeSelector: {{ include "linux-node-selector" . | nindent 8 }} -{{- if .Values.nodeSelector }} -{{ toYaml .Values.nodeSelector | indent 8 }} -{{- end }} - tolerations: {{ include "linux-node-tolerations" . | nindent 8 }} -{{- if .Values.tolerations }} -{{ toYaml .Values.tolerations | indent 8 }} -{{- end }} - serviceAccountName: {{ .Chart.Name }} - containers: - - name: {{ .Chart.Name }} - securityContext: - {{- toYaml .Values.securityContext | nindent 12 }} - image: "{{ .Values.image.repository }}:{{ .Values.image.tag | default .Chart.AppVersion }}" - imagePullPolicy: {{ .Values.image.pullPolicy }} - ports: - - name: http - containerPort: 80 - protocol: TCP - args: - - {{ template "ui-plugin-operator.name" . }} -{{- if .Values.debug }} - - --debug - - --debug-level={{ .Values.debugLevel }} -{{- end }} -{{- if .Values.additionalArgs }} -{{- toYaml .Values.additionalArgs | nindent 10 }} -{{- end }} - # livenessProbe: - # httpGet: - # path: / - # port: http - # readinessProbe: - # httpGet: - # path: / - # port: http - resources: - {{- with .Values.affinity }} - affinity: - {{- toYaml . | nindent 8 }} - {{- end }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/hardened.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/hardened.yaml deleted file mode 100644 index ef3e90d08..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/hardened.yaml +++ /dev/null @@ -1,119 +0,0 @@ -{{- $namespaces := dict "_0" .Release.Namespace -}} -apiVersion: batch/v1 -kind: Job -metadata: - name: {{ .Chart.Name }}-patch-sa - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }}-patch-sa - annotations: - "helm.sh/hook": post-install, post-upgrade - "helm.sh/hook-delete-policy": hook-succeeded, before-hook-creation -spec: - template: - metadata: - name: {{ .Chart.Name }}-patch-sa - labels: - app: {{ .Chart.Name }}-patch-sa - spec: - serviceAccountName: {{ .Chart.Name }}-patch-sa - securityContext: - runAsNonRoot: true - runAsUser: 1000 - restartPolicy: Never - containers: - {{- range $_, $ns := $namespaces }} - - name: patch-sa-{{ $ns }} - image: {{ template "system_default_registry" $ }}{{ $.Values.global.kubectl.repository }}:{{ $.Values.global.kubectl.tag }} - imagePullPolicy: {{ $.Values.global.kubectl.pullPolicy }} - command: ["kubectl", "patch", "serviceaccount", "default", "-p", "{\"automountServiceAccountToken\": false}"] - args: ["-n", "{{ $ns }}"] - {{- end }} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: {{ .Chart.Name }}-patch-sa - labels: - app: {{ .Chart.Name }}-patch-sa -rules: -- apiGroups: - - "" - resources: - - serviceaccounts - verbs: ['get', 'patch'] -- apiGroups: ['policy'] - resources: ['podsecuritypolicies'] - verbs: ['use'] - resourceNames: - - {{ .Chart.Name }}-patch-sa ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: {{ .Chart.Name }}-patch-sa - labels: - app: {{ .Chart.Name }}-patch-sa -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: {{ .Chart.Name }}-patch-sa -subjects: -- kind: ServiceAccount - name: {{ .Chart.Name }}-patch-sa - namespace: {{ .Release.Namespace }} ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ .Chart.Name }}-patch-sa - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }}-patch-sa ---- -apiVersion: policy/v1beta1 -kind: PodSecurityPolicy -metadata: - name: {{ .Chart.Name }}-patch-sa - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }}-patch-sa -spec: - privileged: false - hostNetwork: false - hostIPC: false - hostPID: false - runAsUser: - rule: 'MustRunAsNonRoot' - seLinux: - rule: 'RunAsAny' - supplementalGroups: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 - fsGroup: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 - readOnlyRootFilesystem: false - volumes: - - 'secret' -{{- range $_, $ns := $namespaces }} ---- -apiVersion: networking.k8s.io/v1 -kind: NetworkPolicy -metadata: - name: default-allow-all - namespace: {{ $ns }} -spec: - podSelector: {} - ingress: - - {} - egress: - - {} - policyTypes: - - Ingress - - Egress -{{- end }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/service.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/service.yaml deleted file mode 100644 index 7c4e735e9..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/service.yaml +++ /dev/null @@ -1,15 +0,0 @@ -apiVersion: v1 -kind: Service -metadata: - name: {{ .Chart.Name }} - labels: - {{- include "ui-plugin-operator.labels" . | nindent 4 }} -spec: - type: {{ .Values.service.type }} - ports: - - port: {{ .Values.service.port }} - targetPort: {{ .Values.service.targetPort }} - protocol: TCP - name: http - selector: - {{- include "ui-plugin-operator.selectorLabels" . | nindent 4 }} diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/serviceaccount.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/serviceaccount.yaml deleted file mode 100644 index ca9991c09..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/templates/serviceaccount.yaml +++ /dev/null @@ -1,99 +0,0 @@ -apiVersion: rbac.authorization.k8s.io/v1 -kind: Role -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -rules: -- apiGroups: [""] - resources: ["configmaps"] - verbs: ["*"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: RoleBinding -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: Role - name: {{ .Chart.Name }} -subjects: -- kind: ServiceAccount - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRole -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -rules: -- apiGroups: ["catalog.cattle.io"] - resources: - - uiplugins - - uiplugins/status - verbs: ["*"] -- apiGroups: ["coordination.k8s.io"] - resources: - - leases - verbs: ["*"] ---- -apiVersion: rbac.authorization.k8s.io/v1 -kind: ClusterRoleBinding -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -roleRef: - apiGroup: rbac.authorization.k8s.io - kind: ClusterRole - name: {{ .Chart.Name }} -subjects: -- kind: ServiceAccount - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} ---- -apiVersion: v1 -kind: ServiceAccount -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} ---- -apiVersion: policy/v1beta1 -kind: PodSecurityPolicy -metadata: - name: {{ .Chart.Name }} - namespace: {{ .Release.Namespace }} - labels: - app: {{ .Chart.Name }} -spec: - privileged: false - hostNetwork: false - hostIPC: false - hostPID: false - runAsUser: - rule: 'MustRunAsNonRoot' - seLinux: - rule: 'RunAsAny' - supplementalGroups: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 - fsGroup: - rule: 'MustRunAs' - ranges: - - min: 1 - max: 65535 - readOnlyRootFilesystem: false - volumes: - - 'secret' diff --git a/charts/ui-plugin-operator/101.0.0+up0.1.0/values.yaml b/charts/ui-plugin-operator/101.0.0+up0.1.0/values.yaml deleted file mode 100644 index cc11c2683..000000000 --- a/charts/ui-plugin-operator/101.0.0+up0.1.0/values.yaml +++ /dev/null @@ -1,65 +0,0 @@ -# Default values for sample. -# This is a YAML-formatted file. -# Declare variables to be passed into your templates. - -replicaCount: 1 - -image: - repository: rancher/ui-plugin-operator - pullPolicy: Always - tag: "v0.1.0-rc3" - -imagePullSecrets: [] -nameOverride: "" -fullnameOverride: "" - -service: - type: ClusterIP - port: 80 - targetPort: 8080 - -autoscaling: - enabled: false - minReplicas: 1 - maxReplicas: 100 - targetCPUUtilizationPercentage: 80 - -replicas: 1 - -resources: {} - -securityContext: {} - -nodeSelector: {} - -tolerations: [] - -affinity: {} - -podAnnotations: [] - -additionalArgs: [] - -global: - cattle: - systemDefaultRegistry: "" - kubectl: - repository: rancher/kubectl - tag: v1.20.2 - pullPolicy: IfNotPresent - rbac: - ## Create RBAC resources for ServiceAccounts and users - ## - enabled: false - # create: true - # userRoles: - # ## Create default user ClusterRoles to allow users to interact with Prometheus CRs, ConfigMaps, and Secrets - # create: true - # ## Aggregate default user ClusterRoles into default k8s ClusterRoles - # aggregateToDefaultRoles: true - - # pspEnabled: true - # pspAnnotations: {} - -debug: false -debugLevel: 0