From 464d92b668a396dfed924e8e0f09025716cda9ce Mon Sep 17 00:00:00 2001 From: actions Date: Mon, 12 Apr 2021 16:14:38 +0000 Subject: [PATCH] Merge pull request #1110 from brendarearden/kiali-updates-1320 Kiali v1.32.0 --- .../rancher-istio-1.8.400-rc02.tgz | Bin 0 -> 19202 bytes .../rancher-istio-1.9.200-rc02.tgz | Bin 0 -> 19491 bytes .../rancher-kiali-server-1.32.100-rc01.tgz | Bin 0 -> 10204 bytes ...rancher-kiali-server-crd-1.32.100-rc01.tgz | Bin 0 -> 614 bytes .../rancher-istio/1.8.400-rc02/Chart.yaml | 21 ++ .../rancher-istio/1.8.400-rc02/README.md | 69 +++++++ .../rancher-istio/1.8.400-rc02/app-readme.md | 45 ++++ .../1.8.400-rc02/charts/kiali/Chart.yaml | 31 +++ .../charts/kiali/templates/NOTES.txt | 5 + .../charts/kiali/templates/_helpers.tpl | 192 ++++++++++++++++++ .../charts/kiali/templates/cabundle.yaml | 13 ++ .../charts/kiali/templates/configmap.yaml | 24 +++ .../kiali/templates/dashboards/envoy.yaml | 56 +++++ .../charts/kiali/templates/dashboards/go.yaml | 67 ++++++ .../kiali/templates/dashboards/kiali.yaml | 44 ++++ .../dashboards/micrometer-1.0.6-jvm-pool.yaml | 43 ++++ .../dashboards/micrometer-1.0.6-jvm.yaml | 65 ++++++ .../dashboards/micrometer-1.1-jvm.yaml | 68 +++++++ .../dashboards/microprofile-1.1.yaml | 59 ++++++ .../dashboards/microprofile-x.y.yaml | 38 ++++ .../kiali/templates/dashboards/nodejs.yaml | 59 ++++++ .../kiali/templates/dashboards/quarkus.yaml | 33 +++ .../dashboards/springboot-jvm-pool.yaml | 16 ++ .../templates/dashboards/springboot-jvm.yaml | 16 ++ .../dashboards/springboot-tomcat.yaml | 16 ++ .../kiali/templates/dashboards/thorntail.yaml | 22 ++ .../kiali/templates/dashboards/tomcat.yaml | 67 ++++++ .../templates/dashboards/vertx-client.yaml | 60 ++++++ .../templates/dashboards/vertx-eventbus.yaml | 59 ++++++ .../kiali/templates/dashboards/vertx-jvm.yaml | 16 ++ .../templates/dashboards/vertx-pool.yaml | 68 +++++++ .../templates/dashboards/vertx-server.yaml | 62 ++++++ .../charts/kiali/templates/deployment.yaml | 174 ++++++++++++++++ .../charts/kiali/templates/hpa.yaml | 17 ++ .../charts/kiali/templates/ingress.yaml | 40 ++++ .../charts/kiali/templates/oauth.yaml | 17 ++ .../charts/kiali/templates/psp.yaml | 67 ++++++ .../kiali/templates/role-controlplane.yaml | 15 ++ .../charts/kiali/templates/role-viewer.yaml | 97 +++++++++ .../charts/kiali/templates/role.yaml | 108 ++++++++++ .../templates/rolebinding-controlplane.yaml | 17 ++ .../charts/kiali/templates/rolebinding.yaml | 20 ++ .../charts/kiali/templates/route.yaml | 30 +++ .../charts/kiali/templates/service.yaml | 47 +++++ .../kiali/templates/serviceaccount.yaml | 9 + .../kiali/templates/validate-install-crd.yaml | 14 ++ .../kiali/templates/web-root-configmap.yaml | 12 ++ .../1.8.400-rc02/charts/kiali/values.yaml | 93 +++++++++ .../1.8.400-rc02/charts/tracing/.helmignore | 23 +++ .../1.8.400-rc02/charts/tracing/Chart.yaml | 12 ++ .../1.8.400-rc02/charts/tracing/README.md | 5 + .../charts/tracing/templates/_affinity.tpl | 92 +++++++++ .../charts/tracing/templates/_helpers.tpl | 32 +++ .../charts/tracing/templates/deployment.yaml | 86 ++++++++ .../charts/tracing/templates/psp.yaml | 86 ++++++++ .../charts/tracing/templates/pvc.yaml | 16 ++ .../charts/tracing/templates/service.yaml | 63 ++++++ .../1.8.400-rc02/charts/tracing/values.yaml | 44 ++++ .../1.8.400-rc02/configs/istio-base.yaml | 89 ++++++++ .../1.8.400-rc02/requirements.yaml | 17 ++ .../1.8.400-rc02/samples/overlay-example.yaml | 37 ++++ .../1.8.400-rc02/templates/_helpers.tpl | 12 ++ .../1.8.400-rc02/templates/admin-role.yaml | 43 ++++ .../templates/base-config-map.yaml | 7 + .../1.8.400-rc02/templates/clusterrole.yaml | 120 +++++++++++ .../templates/clusterrolebinding.yaml | 12 ++ .../1.8.400-rc02/templates/edit-role.yaml | 43 ++++ .../1.8.400-rc02/templates/istio-cni-psp.yaml | 51 +++++ .../templates/istio-install-job.yaml | 50 +++++ .../templates/istio-install-psp.yaml | 30 +++ .../1.8.400-rc02/templates/istio-psp.yaml | 81 ++++++++ .../templates/istio-uninstall-job.yaml | 45 ++++ .../templates/overlay-config-map.yaml | 9 + .../templates/service-monitors.yaml | 51 +++++ .../templates/serviceaccount.yaml | 5 + .../1.8.400-rc02/templates/view-role.yaml | 41 ++++ .../rancher-istio/1.8.400-rc02/values.yaml | 95 +++++++++ .../rancher-istio/1.9.200-rc02/Chart.yaml | 21 ++ .../rancher-istio/1.9.200-rc02/README.md | 69 +++++++ .../rancher-istio/1.9.200-rc02/app-readme.md | 45 ++++ .../1.9.200-rc02/charts/kiali/Chart.yaml | 31 +++ .../charts/kiali/templates/NOTES.txt | 5 + .../charts/kiali/templates/_helpers.tpl | 192 ++++++++++++++++++ .../charts/kiali/templates/cabundle.yaml | 13 ++ .../charts/kiali/templates/configmap.yaml | 24 +++ .../kiali/templates/dashboards/envoy.yaml | 56 +++++ .../charts/kiali/templates/dashboards/go.yaml | 67 ++++++ .../kiali/templates/dashboards/kiali.yaml | 44 ++++ .../dashboards/micrometer-1.0.6-jvm-pool.yaml | 43 ++++ .../dashboards/micrometer-1.0.6-jvm.yaml | 65 ++++++ .../dashboards/micrometer-1.1-jvm.yaml | 68 +++++++ .../dashboards/microprofile-1.1.yaml | 59 ++++++ .../dashboards/microprofile-x.y.yaml | 38 ++++ .../kiali/templates/dashboards/nodejs.yaml | 59 ++++++ .../kiali/templates/dashboards/quarkus.yaml | 33 +++ .../dashboards/springboot-jvm-pool.yaml | 16 ++ .../templates/dashboards/springboot-jvm.yaml | 16 ++ .../dashboards/springboot-tomcat.yaml | 16 ++ .../kiali/templates/dashboards/thorntail.yaml | 22 ++ .../kiali/templates/dashboards/tomcat.yaml | 67 ++++++ .../templates/dashboards/vertx-client.yaml | 60 ++++++ .../templates/dashboards/vertx-eventbus.yaml | 59 ++++++ .../kiali/templates/dashboards/vertx-jvm.yaml | 16 ++ .../templates/dashboards/vertx-pool.yaml | 68 +++++++ .../templates/dashboards/vertx-server.yaml | 62 ++++++ .../charts/kiali/templates/deployment.yaml | 174 ++++++++++++++++ .../charts/kiali/templates/hpa.yaml | 17 ++ .../charts/kiali/templates/ingress.yaml | 40 ++++ .../charts/kiali/templates/oauth.yaml | 17 ++ .../charts/kiali/templates/psp.yaml | 67 ++++++ .../kiali/templates/role-controlplane.yaml | 15 ++ .../charts/kiali/templates/role-viewer.yaml | 97 +++++++++ .../charts/kiali/templates/role.yaml | 108 ++++++++++ .../templates/rolebinding-controlplane.yaml | 17 ++ .../charts/kiali/templates/rolebinding.yaml | 20 ++ .../charts/kiali/templates/route.yaml | 30 +++ .../charts/kiali/templates/service.yaml | 47 +++++ .../kiali/templates/serviceaccount.yaml | 9 + .../kiali/templates/validate-install-crd.yaml | 14 ++ .../kiali/templates/web-root-configmap.yaml | 12 ++ .../1.9.200-rc02/charts/kiali/values.yaml | 93 +++++++++ .../1.9.200-rc02/charts/tracing/.helmignore | 23 +++ .../1.9.200-rc02/charts/tracing/Chart.yaml | 12 ++ .../1.9.200-rc02/charts/tracing/README.md | 5 + .../charts/tracing/templates/_affinity.tpl | 92 +++++++++ .../charts/tracing/templates/_helpers.tpl | 32 +++ .../charts/tracing/templates/deployment.yaml | 86 ++++++++ .../charts/tracing/templates/psp.yaml | 86 ++++++++ .../charts/tracing/templates/pvc.yaml | 16 ++ .../charts/tracing/templates/service.yaml | 63 ++++++ .../1.9.200-rc02/charts/tracing/values.yaml | 44 ++++ .../1.9.200-rc02/configs/istio-base.yaml | 89 ++++++++ .../1.9.200-rc02/requirements.yaml | 17 ++ .../1.9.200-rc02/samples/overlay-example.yaml | 37 ++++ .../1.9.200-rc02/templates/_helpers.tpl | 12 ++ .../1.9.200-rc02/templates/admin-role.yaml | 43 ++++ .../templates/base-config-map.yaml | 7 + .../1.9.200-rc02/templates/clusterrole.yaml | 120 +++++++++++ .../templates/clusterrolebinding.yaml | 12 ++ .../1.9.200-rc02/templates/edit-role.yaml | 43 ++++ .../1.9.200-rc02/templates/istio-cni-psp.yaml | 51 +++++ .../templates/istio-install-job.yaml | 50 +++++ .../templates/istio-install-psp.yaml | 30 +++ .../1.9.200-rc02/templates/istio-psp.yaml | 81 ++++++++ .../templates/istio-uninstall-job.yaml | 45 ++++ .../templates/overlay-config-map.yaml | 9 + .../templates/service-monitors.yaml | 51 +++++ .../templates/serviceaccount.yaml | 5 + .../1.9.200-rc02/templates/view-role.yaml | 41 ++++ .../rancher-istio/1.9.200-rc02/values.yaml | 95 +++++++++ .../1.32.100-rc01/Chart.yaml | 7 + .../1.32.100-rc01/README.md | 2 + .../1.32.100-rc01/templates/crds.yaml | 22 ++ .../1.32.100-rc01/Chart.yaml | 31 +++ .../1.32.100-rc01/templates/NOTES.txt | 5 + .../1.32.100-rc01/templates/_helpers.tpl | 192 ++++++++++++++++++ .../1.32.100-rc01/templates/cabundle.yaml | 13 ++ .../1.32.100-rc01/templates/configmap.yaml | 24 +++ .../templates/dashboards/envoy.yaml | 56 +++++ .../templates/dashboards/go.yaml | 67 ++++++ .../templates/dashboards/kiali.yaml | 44 ++++ .../dashboards/micrometer-1.0.6-jvm-pool.yaml | 43 ++++ .../dashboards/micrometer-1.0.6-jvm.yaml | 65 ++++++ .../dashboards/micrometer-1.1-jvm.yaml | 68 +++++++ .../dashboards/microprofile-1.1.yaml | 59 ++++++ .../dashboards/microprofile-x.y.yaml | 38 ++++ .../templates/dashboards/nodejs.yaml | 59 ++++++ .../templates/dashboards/quarkus.yaml | 33 +++ .../dashboards/springboot-jvm-pool.yaml | 16 ++ .../templates/dashboards/springboot-jvm.yaml | 16 ++ .../dashboards/springboot-tomcat.yaml | 16 ++ .../templates/dashboards/thorntail.yaml | 22 ++ .../templates/dashboards/tomcat.yaml | 67 ++++++ .../templates/dashboards/vertx-client.yaml | 60 ++++++ .../templates/dashboards/vertx-eventbus.yaml | 59 ++++++ .../templates/dashboards/vertx-jvm.yaml | 16 ++ .../templates/dashboards/vertx-pool.yaml | 68 +++++++ .../templates/dashboards/vertx-server.yaml | 62 ++++++ .../1.32.100-rc01/templates/deployment.yaml | 174 ++++++++++++++++ .../1.32.100-rc01/templates/hpa.yaml | 17 ++ .../1.32.100-rc01/templates/ingress.yaml | 40 ++++ .../1.32.100-rc01/templates/oauth.yaml | 17 ++ .../1.32.100-rc01/templates/psp.yaml | 67 ++++++ .../templates/role-controlplane.yaml | 15 ++ .../1.32.100-rc01/templates/role-viewer.yaml | 97 +++++++++ .../1.32.100-rc01/templates/role.yaml | 108 ++++++++++ .../templates/rolebinding-controlplane.yaml | 17 ++ .../1.32.100-rc01/templates/rolebinding.yaml | 20 ++ .../1.32.100-rc01/templates/route.yaml | 30 +++ .../1.32.100-rc01/templates/service.yaml | 47 +++++ .../templates/serviceaccount.yaml | 9 + .../templates/validate-install-crd.yaml | 14 ++ .../templates/web-root-configmap.yaml | 12 ++ .../1.32.100-rc01/values.yaml | 93 +++++++++ index.yaml | 110 ++++++++++ 195 files changed, 8933 insertions(+) create mode 100755 assets/rancher-istio-1.8/rancher-istio-1.8.400-rc02.tgz create mode 100755 assets/rancher-istio-1.9/rancher-istio-1.9.200-rc02.tgz create mode 100755 assets/rancher-kiali-server/rancher-kiali-server-1.32.100-rc01.tgz create mode 100755 assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100-rc01.tgz create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/Chart.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/README.md create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/app-readme.md create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/Chart.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/NOTES.txt create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/cabundle.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/configmap.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/envoy.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/go.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/kiali.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/nodejs.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/quarkus.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/thorntail.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/tomcat.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-client.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-server.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/deployment.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/hpa.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/ingress.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/oauth.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/psp.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-controlplane.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-viewer.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding-controlplane.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/route.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/service.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/serviceaccount.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/validate-install-crd.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/web-root-configmap.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/values.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/.helmignore create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/Chart.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/README.md create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_affinity.tpl create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/deployment.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/psp.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/pvc.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/service.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/values.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/configs/istio-base.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/requirements.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/samples/overlay-example.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/admin-role.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/base-config-map.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrole.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrolebinding.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/edit-role.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-cni-psp.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-job.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-psp.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-psp.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-uninstall-job.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/overlay-config-map.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/service-monitors.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/serviceaccount.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/view-role.yaml create mode 100755 charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/values.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/Chart.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/README.md create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/app-readme.md create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/Chart.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/NOTES.txt create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/cabundle.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/configmap.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/envoy.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/go.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/kiali.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/nodejs.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/quarkus.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/thorntail.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/tomcat.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-client.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-server.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/deployment.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/hpa.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/ingress.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/oauth.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/psp.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-controlplane.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-viewer.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding-controlplane.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/route.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/service.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/serviceaccount.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/validate-install-crd.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/web-root-configmap.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/values.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/.helmignore create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/Chart.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/README.md create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_affinity.tpl create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/deployment.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/psp.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/pvc.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/service.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/values.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/configs/istio-base.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/requirements.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/samples/overlay-example.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/_helpers.tpl create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/admin-role.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/base-config-map.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrole.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrolebinding.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/edit-role.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-cni-psp.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-job.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-psp.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-psp.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-uninstall-job.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/overlay-config-map.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/service-monitors.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/serviceaccount.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/view-role.yaml create mode 100755 charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/values.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/Chart.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/README.md create mode 100755 charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/templates/crds.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/Chart.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/NOTES.txt create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/_helpers.tpl create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/cabundle.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/configmap.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/envoy.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/go.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/kiali.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.1-jvm.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-1.1.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-x.y.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/nodejs.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/quarkus.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm-pool.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-tomcat.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/thorntail.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/tomcat.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-client.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-eventbus.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-jvm.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-pool.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-server.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/deployment.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/hpa.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/ingress.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/oauth.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/psp.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-controlplane.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-viewer.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding-controlplane.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/route.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/service.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/serviceaccount.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/validate-install-crd.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/web-root-configmap.yaml create mode 100755 charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/values.yaml diff --git a/assets/rancher-istio-1.8/rancher-istio-1.8.400-rc02.tgz b/assets/rancher-istio-1.8/rancher-istio-1.8.400-rc02.tgz new file mode 100755 index 0000000000000000000000000000000000000000..5a9b567310ea8e8452171015118e029bcaba0ac5 GIT binary patch literal 19202 zcmV*TKwQ5ciwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PMZ_d*imUD0qGy{S|oX+^?6{q84u*y~)ftZYS|Qz4+Qr&YYVs zqlQRGLQE120Ls?s^!)Ab!$yLeNG+D#Il>R!76}##1)xw>C{$4xx-&#Om~l+HXER8- zvw(sBw=I@luh%<1Je2?UdcFMr{lnhj-};BWgQMO_@A&xWZ@vD($>Gu8KyRB!RF#-< zNdMN`xUGEWzLEmNkZ{N`3E8j(fD1YF$<%Qn=RR^U>B5+k4h|WIzCQ$Jy4+&u;|@b~ zj%dfF-gkZHVBqw7y$*GI{Zc?Kq8v{!@)9Ve)jZ51A1*o}4A2lTO3Xu3D?2InPbXh=!@=R7j@_T zG2*bimlXL3GNjSZtgedsf5eD!)^VeF2u}LF@*X7B0u&Is7=pn;|L{F7tsCQxOM-}m zDCC+rEg0cn5M`KzLon~RU=$@k`_3EZu;n4*z}V2H;N;4{d9o(Bxv zVLk(Vh7@?0`wqB56GQ&J{E3L=V$N7MfDT*pHB-JGdwxHol0^ z5PTpWx+Ii~=~w-Y>~P5^0tfF31%#tA!bR98ybMqS63K6~#A$KlqX2QbD1$j4s7aF> zrKwNG(AR<>_w~$Dbb5;>F!uQsnqnrP3T^?!!nj{Fo`ACUd|=OJHIVYf2#1(&4$D)B zUJ~yuW;B*E&G)f4MZB!f0MIdX)tiV#=ebdN2L3KYUBKe8lu*EglAu%!Zpj~I#D+1S zX-aYmIhrnp0EQ%71SDn>;m9Y8K!|IymY!Ur!Yr(zi^4|!n^I*iCG(zK8ywLP`XepJ zGTmuP0>o!1*1rL8W5!7^5|anJY!p*}2--qU8+N;<=K%=?8aSMGQUF>AwO^{aUPudSQdK1@!bi^Hku0}e-eL&@T=t2s7DkdXSv$8V0ize6-dR6(3lIDsLogII#S z{&G3$ZyFP$F}RjRgu>);NyyPXzl3}?1Z}IQ>aPatPF2)xbOcMrVTXjsUV?+3)BCp; zsK2t3mH#;kBB`x)M>FI{h%$#q8><2}@_+B>=pZNmA0HeZ?&beol+T~LufTc8Vv0aw zQURC=tzQcE3VEms`uw>gwpkn^&{mpx@@*S*zI^UVy_6B|h5R8c=8dJ?2x|7 zpYzW#yP!^(yve_xdAm8a{+R*#?GcYr>gzq@u%a<07eWUcj2>(b)93^sX zN60`EoEmnu$iqlX6LDC6>A{F2%F+j%Q#_723SfvQi1GB*42GU>*A;Rcj4+FkJI0}h z!)fWe^r6&mLl>n_{)h>Or2vvQ=_A?WSf8wx@`V!o)K5cW)th>u+x+Xx{lYM_u~SDmG#qoWM>Wv@%{-2M8m z;{RjFP)9A7P5`5gHi0_%Z*ZLF|0l->CwuoyOiy#dP>oQm(4e9{Q1NcArT zUBtMd9Ft%^Ose(4jFmwmTy(AjsTk36?zfDX2PI(GItU| zj2UvIe{|73a@8-fBQTCaJ|})0AlHXDV1|3pWImn9E{VfNL@kVwv=Z6}w)W|L zaUcyNv-B~m$(W(Nm{?yL$bWijt}h1G>3@euy{!B<=pFZZd--n{r6AUQuSUDMQLtVN zWbycSmIHvSPGU7?AtpD}= z|74Ko|0jpN{r#Vvlyc_@$-Yx>NWpFGO+smI$vqggEnE`sTCb=}rP&oF!-z$lWM-|* z@CD}+u%PdgyGx4a*hf=z&Rpn2b#X;ITuzvh=k)3ltZ4|Y;_#H6hC<<-5yn3#E|+?N ziq}6g;|N#s6+`cE7~faFkE6&(0SY=8Msn~XnP?F4#am3Z!G%fR zz1A8#wk_9hdr&NyyNMiaB=d|&p2Z+l7o?|lxx$d${KaQ$(q;PuQ8LI%=8k-e>lizX ztI?M)tE~U!{NK3V|4zmm>;ZM>KmDUYUjH8)?$3XBQtTBo7V=@bI{uT4tCV|}`x~g~ z0OW3+0??izKXBNrJ0s+_Ep`~jO$)E(k2soA=%Hfm&K<(j8E+3kyK~eodG8?~anw=k zuRR1~G$9mqFr4?d}+dT{dgKZg*U%Fqs1BRBBe;n9;6J zTb~CnqX$CYDK#myX6(rovdZku4GwN5iOCUhMD%4da$fQom$$ggn)+9 zs_Z|@NIxGc%$OzUSBvuou#zgy)ZLI2*;E<^eR-eXdaPx<^mzeaDs*1Tl^QSvAJ81p zzpMrI>n_dYzs+m_b^3q5UpW669Pj17os`|`|C=807;!5y%D;8LEu+-i4=*myvJWmV z-dY!svwFW$)t|qQ8JGI{2NGTp!k_2$e_hY$^v{>*|9Ozl)l(QwZ6l*}gikqb0Plz3 z_~_{1C~wc$92`Z^`xyEQ(J|?IDP_%+B$@5D1D+?F*>m$mnJk{KsdMhj(<#gO|K_&e zzctYR2YLO!e|&tfzyG(BvKIf}*yNbZu17I9rme4GYE;1@^iftvOXeMz)NTkyd+Kcr zC&2fJuKziS5QUu3j-Z~5sL=RZZ~a#F0bd7)g8F2A{7pcUHNMxTfGwJhH<;9Gn2hb# z)-f07`@Nw|w@$a~&vT4KG9h$~Jr9M~3+8e^)%*Z%=ODn%)oW>|6%W>aQ@fd$A8*M z$*q4GJk-QA&U1j$i@T}5piOP>Rjm@{ATI@U7>Ashd9{Y-U|%yyF-q)El-y&)5)q#v zUz!+oeWBr;-$xY5yXwgi*XLWbupsErqa8dA2}Q4gv62qKTY}gJ!q4w9<6ms#uQTny zaFI9`|4zp51j?EI%K)AFj;=P^DQQl=?WQDVl*_MSuP*9e7*bb0`i zZ&o2r88w!)VLmAsST|igCWN=n?C@YKC}|;GMClYZi7c!x3(CPL`fZ)XW-qOa@U>DT z1wa|l`nQHFEWeWEI+<}ES)p=ER?L%+&A5wFv;XS@mCX);>*W9bN&fuzUfVWpHl@Kq}2aX3B%)5Rn0w zP>NjcFJ6NMi9rxEp1#g~mSibQD&TOc>El_5gBJ`Tkim=Ecufc``Rb(uZf2MP%)l7A zFlGn{6s%Z-AVkO$?T-@1sOPW^#kR z(`sEzWao8iH-i)hXIF0(qAcyZtR(uK0j#M97XXD)fe`r25SS3(CwHPcqLk3#u+{o> zF8@l2s3_!;Ao7uza5B$iUw!a`y%aTNM@7eFw^CzGra#I7z^+b_OQs?I7Xt0}5QIdT zCy=Tx1RKzPpI8gtLN*%{NWHcosmW#6woEw6P%6bD=tncyZ+{X~@YM4JPZyI|=8bB# zRQf3C;>ILlH~~Udks0v<7{aN^gO?l}duC$<0b(=2XOzU#8Gs=`kjcd*CWL2j6f5f4 zvuB`c!K7I0nMNoeTrBI$#LSqPp{yLQ0aEI30u`05q7$xQl808>CBwTvNSaUf@a>T=RQNoz9%SkF^U-b?AMVfb0{tr$)-nuwe_lt(b(B5)L*63CQi@@B1_A^{$9&(4 zHmL?>i~w^fj8q;)Yxa#7#vfNRKGij~U|blg6~ifDrX-$Vn zRWnXa^%ND+bpm`GV6Lzcz2`)_|KJIBt*Ux0R9tybR=tO-D4+A$+9c)=y{lAm%-+L?foM8C@7t48Dw zhFp?N4yKbp4@Ga~{sjGN`A)}g=R_e_!jg>slfsiz$25n-+)PTi-MLO@XS&4Hi)Yrn zl5^ZF?tJz;Yb-y3nEEE^ktTta3U}E0^yyPe=V!BAu>?{d=ZI45A@JpkowP1jOQLR7 zl^NSUf3|Y(IT|fTCfxk;MK&qW7nmtFzy$A7TtVGpS18J%|77Fx>9zWuY4y`6nPElZmRE!=w%@JE;u0-GDw7n^N)h-eHzrxpv1)`2poYU>>KL*ZoG;aI*aKdI;+g|iIzY=XSvF7_ zt#p*kgUk?t|CE^%TP^i}P8t-SASDiJF6?2ZElwT?uuDlYhIs)4%cQ&{6r-iY8qxJM zHKT4hCm_jf8Z#*r{SiZ7rsbCuiYW17dC2L2pP5SS{HuncC)sZ=Ov?7VyE`Y76H?~y zCob#uok71lRoSCE(y0x3-Iu^4ZY*ykNHjPB9^!}wI79{~8%?>>$du7YV<$Tq-5DxO|<(m(N8G2qcAGB{%F^3CA>)!`NA>)y#_dR z{n(RAM`%3!zy$k9Yej-HNEWFL0rxuPf;mY57aTyJ5e*2jVe1um_3Brt9i><&D*DS; zuZDt~DJCKXX2~g)I1MJEC9PzWSY^Ewinju)m|qRklP#QrKVt0O0?F@Q+e|pa)?$N* z*(z*queeW;nt!C;nsU5^TfYX8QUWQOD0`1WY7HJ6z=dM5;thh@o{+UBv|hb3^Tg5_ zYb^<{UMW4(dM&L6kXm+xG800&M;Tujxs30Tq(r zgwQ}A34~xKBvCbEvArvihG%zL~qkxS@_wqyHWEP73+|4}1Ikk2@*0?^izKVRE*q9lxX`{ZTt?r_nn+ zkA!E5)41}Kv7@sX-x)1DXX3Nk_3UdW@_ujzqL_@!Aj!#!vH>pL5HI`04RQVp72W4Y z?Wklt*2_N5*383M5;I79qBm|RS9N(y*|0*o!tERD3a{o|_Wf9~^ORnVW*qXEb;SG3 zb=t_>L>crm&vW-wGH(q`!L|k^(BAYaLA~kaUWUX&>eWI2AoI>{g_X2&cz96VO#Wr2 znQzOQ;cisY$U*}(lxrAyU3}qh|n^ICElmVmvN8s)=D`{NppF&Ww)oI%w;SkNI^y4WGx7J>if?E>grRs~! z&}sy4axAf=d)8;U`B1{PbIg8|X{?}Ec2m91A!m(0M?MM=r;BA9Pg1Eko#un(Gc^5l zKFEKaqf?2jXi1lw&`3b8q>y--8FO?mk314~$?PpE7ZpL`oUaf51fdR)@FoT8lj%D& zM}9#*HZMv>=&@Coec3|E>i@QD@-{SoRqF149`$nZ-}^_0`}<$JDYkR%ux0cOX(UuJ zLzPUebB-G>HI&D-!*18)*f0 zsGt}!*>a)gr5eI%tEXSNh{lR-Lr&fyPWs&TO#kAdl^7K8B|5olj!V znG!PfkvtXf3G_N+=)=%Ow4*e2844qWe(mVULzL?AaUthE>STQ9_Jgyn!Fl-gpF97_ zY?@tp4{vihuulFvDae1v$4C44UppzeIJ_?8&?i$zEo-p{%w*hk%ZOR5Lf8=aIE?SD zx8_t*Oe#dV^jRC4L)!9s7FWr!lak6*1+49;rI|bY&BrZ-QI!1bJA zqfY)iD#ZUd=@0h#zjsn1O6J%@bg2DDTb8?mRB%G#rJ=XL=P#{@c&8!9rxSS>c_Cwf zr4@etEnndV(V$q#cAk;#Ok&?JJZz;W1&ZD1NZn-zNm?27%u^$92%NQr?lSg$6J7UW z@`3P6iWrh z2($wf5V~kf2b=a7dQ(K(>T0XywJb=|0(nS7pz7!IjuhoNDarMvAXl2)VF=WjdtTuN zfT`w&;OIx(N`9XCkTDg8Sq?RHUBuXXA|}ffg5EzU=IA|?=`U0VO(44ak-TKXhTupn z&ep$hbc;jr_Kz6Rg%bO|J?!^emaJ)SjcN$fv*nKbu4T@>bV!_w%N78(OVAMXkB{FR zKVd7uQvRQYgBn4-njIdkycg8)|D%&$KL2?n%NT;qo z*0v({RXbNuX|zrCP6pf@BMzPHu!`Ny(oOAHoYrI8Nx=|7<`4qk+@i&6@XZ|hVEA4B z+*bh4CN|JVYEuqg$Z!4>itbC$%cnp1{8>US&(2*)HeC7W8=G1JLE~pqen4$+*{Lt6 z{jig3po|FFMl-1k9eM26GhHtFXzSc2sD_Yyjm( zOG~T<(W0}2WhHgYqf(}?s%U@zOoieql+1e$eI`1}A|G?me%)RI!lsj8RFV-(03|!i zyz#zL@{p5=_++~HdxkpJ)8!Lm*=(re$Lmao!dgkEgs5rNO6gxQSC-9|2J>Zw8Pj0S zl+Bto=1t?7Q!{reW>4wk#xn>cn`K}71eedL&E)^4`ri!sLWf^R{j0VA74H8J`h(;B z`R`7O&5$ZR);g*5l9T@QAwaojxA`ohIOG%1{twn|uLS`43?)C>DLy88zx{VhXtb^K z`v`_!a&y*P_0tX`*v5Eqs(}L&-ed-zJ$-QwI$N(|`CGr~E zO41tpZs}~w8-J5Jl@%J1+@3byNc3$jux?Z>JQGSNDA{z039gx^D=RlH{}273cHMKu=;6Go&9fclso?&48-d_|KCBePfB4Fu{6y4+hoW~lF@wr zoT^R56>f!RPw#YOCbSA=P{>9DqbPf+NS{s_nP`S6=El`J0cav9Bs#2oT%Oo;NnWUT z79w@1WHZMGx$8oH22y>u8h5R>d%C?c-xD2GJ@xKV+4qN_Eze!rNkuDg047}(0U~#a zDPKvs!L<8_gX3@8dFHMTt(0n#;H8AvyvKTZ)g+_eo1EwiR><0`k2h1I>|*K*p| zh*tXT>-WlaznyQ@K8Gw`n8{UHn&VfK8vT)PIe+|@9P*W>n*ILt?T_bIqw~w3&flM3 zoxUroTE%ISetms;`eAf^^YQBR$Mez6KQBv@0~-XYTYr0Tb$)j9@#>$WUryisTn?nG zpmfD*YXs`==l@&^=oT&7byffa{OseqcM|OAzb`KTe(_=S)6LE0=r!P9}Av>7=Kbxv6E~|JTpwSN|M+e|mjBx;(x4sSLVc z-`3rhOoW2W4UobcDYAU|0=nhwtdK)j6d%t~h#0%1WQ?*Z`;7DGNBbg~Dmocn{;4`q z6->r@LlN}ww!v?>uBviQr-LLWaISqjsk1&}FP)Cose3u6O@l5iW3p+jgunLFl&NZ% zOTNw?np`afVq*?7rs*X|X@b`#z>ael87oY+72lNWtTH!E>VpBSe9z0WIDa7F6(Kz1 zBAZL_oZQ_m%N*TEWCBGq&zjRPm%BSN?8v4_k5eQ7Ry45Mcg}CBtf<#486l)e4hmA z|KQ~4q~QOtzyH6RvP`WjS-NRBjb8=n6 z&-5q_fM;D^@1#O)zJ8cF(o@Fi`Uu3PIwhRA#22O}BE-(=M=p_s?ey+xt-8r&fryV_7%blTJK zoTWC0lF6xVb*;6VV#wUs>0ufj^WQyRHhxJSJ*xcX@xZu4O+@c*UzzcWLApb~0q zvd7fP|3?Q$`TO6!{rp2X))-w>IsfwiVBBE%5?@f;9|MAiRA47j36SG7LC819P zABV_kId88=*PKw)dIru&5Ref3a&`?oOj*mBV&0YiD)d{<_+PXu|1}S0)2{f({ABa6 zn*tKMQ5?z0VXXDaVRupMl{1F7tyc~Y#NUMCY3tSh-+BgqffSRNfs422tR)uK@5tpX z2YU#1Rdq^!Z#i@35)XC1hC{2R>;LNf^zHlejZ?wZ>i_+G{)}8ljLspds!fPD4 z$|h)5@fu{pSIzs*!5|;MN~KK1Oy<*!PzaPA5@-QMvK`G-WfBBH#^R?s=2__ULP90V z2BtEk%*3NgqFkkE7NHOc#~s7*`7FuTDPybZn|C-g8_aX2LPTVYYQ}tlvlPMXA znll7FCkm&nTeP?%)RX6?axhyR9S*kxLd5R~y~W{FybLE4GEQTc#}u^!h*Rg|4nP6K zzK((05ty?7M+NUB}Lish{@K^rK}*X`eP%W4W0 zQ4Kw_gOeQ$wh)|bUmmladR$CP%(B7@K}$YyfGx zTP4-D#lFL4c*5HN#(V}Cr;wxR!f8DN|0J=>(#r|B4apsVg5AnXnK%$)GvrDvz9KP4 z;ODD%$t6R5%dzzgP&}P+5XxN5$jT=TTo^v*Kt?1&>WU+YIe;9{IF#^TU=Hp`>?`|& zx(ay*vDy~}FtvZG#yJtqCMjEmq9Uq&j8J$jy4QLp^PZ4>2XtWd~#Gx9-q*LUsq`kI13LVp4HjIborqr5Y!FQEP;C~}sniDNOU6gjPDt(Ig* zBTKw$x52aI>LzC3PE<_=pF|jGwZ!ZbqO6#Z*wc~QlG&+$o7t(zn%-_4%Gh~whD+q- z>FqBaUvXLBL?zFdBn9$@)hLR6e-!C!SnX5)4lY>d4g?_}8P>Hf?3{B$H{^ANP_ui)73phNmG8rz06JMKB+w^O=)E8T!1}mk}&wM)AV* zGS5}*Z+kK^p<(N0o6x3hW*EA2*`aV#Ki z!g|_eiTs~>|9tp(bAIjcd%j*9b@uIZx$IX{*JXg;m2@ z{8mb`VVR3->2m&=sXZh08o?6)webNY#s~01bw|p_&W#quB-odL&5XI&*s1GQG-huN zWUU^TuI++d#3>j>vH>9^@7F}5asy}=!-tPvgKwDaM1lfSl-!PERX>K)~ z5B;9L`Oae2fBt{}!M~h4cgADw*Bb;7LVF5bKyC10W2!pR1L1%N;WEX zS^RO`w6?8oX#|X=w!sLb4d0aAq3|uG)4FCA$MnT z6-(aP4oOG)$RK7)S6wEby-m2DkWWl^q=^(r6REL}f?Kp`Af_10s$-c|OF3Ib-J&eKq++q#6o%fZ zAI;#0H~{_Q^?HAY#()x1t3v7jjH$P@o4Gom*uQ*@tPI+%kncqk_Qi1L^zuRr0nGUc zGSHSMl}>WbraZ7Rq02S!^10SlMu&>Iwh}#!g&w$wDwWm&H}bepx`d|nCV+(C_6_@A z>a351=_zmReyZDW67zp%IA)Oj9W4@?Cm6M@>V=Uh!hFcFP~8ztb-B+RS4g(iqqEg< z(T5~ri9hu4cPs_-Qk!?UiUC#rVfcxyKJY)*?YYZnmN=jWnj5FC4?_l zD3ZJUrdjjuXFOP>CkM;Xpe=WZwlt2XHX@l$&+>#>WzLE=9n)qhZ89}VWDhG$T(+u( zl9nt?y_}axR#2Eg?1T0{Nen#fNoRVEc*ZXQmw4^G=yVw3AP4GGZ7MbHrE9^Mr#tLT?>#j=6MyL0r3-P!cV$8o-*z@^RB zzZ}Z|t{DTg?*7-&VKM&8{`_}0)$Lcyhg``a%u>-NQWRFc$Pr`=V6M)lZA5VhT&UfJ6ZE)Y$Sbc#YG1UpaR9cUkaE~HeYV!P0P4JMQX2`#Jf z1nq)~`J#L-73w(|%_rM?DW$ek)vN+$PJyd~nC>Q^?fMvne1yG`ii%L#hPA+!fG@Q- zRZ*hElGO}$(MnR+MDdGdEm@XW(9YO*E83~F2QOM;3Y7UtNK z5C|Td%~zI2`+s^i)J5T(ELIc)>i7TSeEuh)672W?9Ta0gs$!GHV`DY#^KwIb*%j=z zmMPvRbrP^8(uJI2Yse03NDfIXD9nWfe=b@E@0Ejn3jhx@m&_6UC^{(78YzgQIN~^v zx7jgAfxc6t{71BfM&EF_Bpw54ZFOe_hHMB9^-tx`ufkJSH6n^2(v7+VLE&Ayvc*&1 zCoYu1G-SdU^L-p*J_POYf+MyvDhkvH8raoH0TWBNSBc?I2u6V6f1z!nHbXEP*+ADq z?dOPbieLbsD`ObBBn**^(~(E)xEe8iHDMHMU?cZ_q~NVOmI*qXaOfuyMK?f&{xOoU za-^pbE5(hYYUJLMyKoEC@@3>xL`Pl%Z+(JUIQ?{UbGZh^5_D#qM>bCMj}>V4)ffR* z-T$X#bsIp<{(sOL6!!mp{>L4aC%FGl$)jxkKN4%_*H_2I)4UuoB_nfXvu5u<)(S!Jj@~=EIdxCkA#w#M(r6WsqRr`T>~g2V*$pTE3MMTGzS&<+_HJp zo){4yC=mJtM_yWA_pHQ1NE=@Sw9VB@>{Tn2#IN4>?Cu%bY@u&e#D3K7*~W+s`c`e! z*ivWq8}z?z*~b1~XAY>_|4#;a{r~Xf8_A(sC-wbI3I^7kSSf(YSEKluiEB20zKpb87Q>*-lwaNeED@%o0W~e z-;U(8Rgno&1gkdUQ|n!mjr&@ef9{?FlYZ}0!Hlk(K}|9j_gt^#ko|4&`P^dcW|G-58C zqi|{;<=2P<|0HoZ1wWnv`v&k*Z_0y8J~MSk3juDVgKbC$$^;{sbgtT;aw#87uq@l5 z)XL6z-aA**kzk7h9ReA_9z?&5&DH?KcyB01Kyw+dI%jaOWe zZ_v8=a=qry=Strt5%A%(5zk(R6B6JAw2=>|n=$Iy3h^n*{q;3YDkg=PsxmT#R)sgV z%`esJLgZEbnkQyu`d|agY^-b7IxFohqk(}y8r(XLwXyp zCIHmwe}}!i|KCCHcpv|9C*=w5|9Xl&irV*Is_in3@4phX>OA{aG*iw|=n=Y+p>kt` zl*Yl1r4%zbtz~jc&o2!1sjkr8mH=4I#&O%C50JDF(FJ`fnx%)~)}e z<9z<-!-M0!|L0E1lVAT&ZRxME>Yvnt&y@|@+uyZ(>z>;I^CG}y2IU6iN2 z{?!zFN-W?;VpPWk6y8sH-J7!N`sXu3Lk@Ah)Ss3*`%kZ*U;hUOCwu$PPRbKp|H%}4 zq;-E|wQp9vc~o@_q>UBY$1NaU>=%MPRG1|CPQTicqVG;x0PD=wm6()SN}fJ{+Lwnd zEA#)RLZ4M?`2Rt#;Qu{1KHl4Zc2b@q|9?!O@5VGRduG={SZ-*VMju*goa3*o8wgFInuhItTe2%$%NOe~L6?BSNL_&s|yRui< z0rJ=wz&Fc1*;kC996>&-+Bq(*cj*@a;xkeiEZ}|ewuVa5_f&b=lx4#p(b{B^kk16* zZ6w5a9Qv%6k*jtJm&+GTFu6lxM%-J}EEiW1kvn#_F)HIqLBFX}Xb~^@>2m^(aE2hr=ld5Myw< z%3hZAOoMo89ZOT6Y(rX4dz--BuCV?9BruW-+)!#s`mRM5SR<}HYIpA_<{ahI+-%h2 ze`G=Ku+w|N@87trC;v5e{gtKO|1WRXev(qB{|$PD^?%gcum7EtC%gV1@!C&??srLuU!(X5q(@20?;4HoXQ2yiA!VY~ zw7ML*J=?y3+2nA$yL zucy;Ou?08;vJYFC{E8YL^5NoZUjkQ%k(j!OWg^2jqyr9rW>0uRd>wMpze`z9{?l9P zmi#~ZgQEY(;okpaC*{e?e+q-AB>`SbI1T(iRD&z}e`x62_y5q?{5AYP5-M%o|05yO zR{cL*;#F>l=ado(>>7_w*Ny!~%BOz0DAELzwf#mkA{+UQXjHc9H=^;{&~GGz*%tjq zZ0z=aBY*wUO#VZWPZq%nF29+wT>k4H9v|lYKl+D<`}p5GDS0^#MiJ}I`&wXon+$x3 zoc8&1g`72seP61Nz)`~4sv_KGLL7>G>_Vp6`UUziVvaR~&3n}-Lq2jjp{m&ca(DL5 z!ebdG=F@j27#(Zq@`}xLp@321`#7Bb9C?r<13!TG*D;->jQ7e0 zA>>oNMm74@7^Qnf^KlZz&-8xPk$95=(w|Ps#vmfzNPV8K&&fYw;MaV!q&>Y0X~`@M z3C{{<1*~*u)PBfDNU1qC*hn7j%uvjPPQzRZDTI*p$FeR_$(}p8xk$1IWv_EV%mS%CwzY(2d7oECN z_W!WP9ADBciV4Mhq0`ieFVoM=%QNvVX}2Mi!e|$Uq#7$6z$qFV4rv}^11DAvx;t)|w36kv$LHqOPgj0bwTQH7-k%uNQ_W6jS zDQ285)Cg7bY{D=nbOFA68J5@Ka0YM_1U-@yfI z+Y@sgo(g1!OBi}77wUj^mqc8PTJqnv{j%edaDu0qXR4ZhqmPZc>X($uEN(z3XLe%> zYZ&2=9 z|H^`veJdG`gq~FfIl(D0UpOwJd^Ev6G6p#t26Jafkoc#Yo6GA0^!x^s|DyOomW%-4 z5OWOux5$T!Yh_3pf+MR!geWFn^6H?Myz}uK?T6q|hX951B5OE3ySez~eDvY;{rUCf z>DjpjX)c!E50nJiv6*1xdsk?ZeX5^d%7HWTsFNrFg?8V4{BiW|{Fn20`3BXlQ6YJf z={qz>zGAZNQlLM4yn26nQx3Ic8}P|=svwUhga(jT0=~I;e?I!*;{4s)HQSJxWF(cW zra)<1*Qf6<-<@BLu1;?XBU0B4gF)mYIuaU4rZaQm#{qgTgr{n;*sQ4$nIlTEhss!Z zvL7+xBMUzkkJSV~;anxtFeMPJs(04*ry+E6)k`LRXSMw|yH}RuQM#=bhrV%(D8o(4 z8bXw>4`0b^%Ue)&+J&(_gAp8KA9IYDb9#B9wSMOO1Q}>k5_9B`2!(8hCtMxiv^SzY z9LJ%TnHpvE(6yFoE7ig=P0q?QTfKfbY^au`P*R1Yzg(bD>nLj|XtaQqFCR4z-^0je ztjpJ1aEb| z4VTLVHhgKHb(%8?sUmlv(vkBm<%J1Nl92FCgdP%!@rV8pa2lg!ZEnc(ies7^iIVlL zYUC99O02gtM>b}cn=hd}%qpV;q2NUc)!<|z1kHsL5)ZuuFDj}<#CuuwVgy5uUs_Ye zz^oKKs@l(J;lx9yrGTngd=^+^Hs1)ph-6KM#9JFX0cz{W$x+B-7;?M`mI`KLR9CQf zapLQ|kk+PdJ+!ynYFuq7rB=ojFcMQ{WDNf42jcN{<^-V*sVty6v>eBI-~-i0=YO*Z zu66LIOWpmSlY@Nzk6!QKaDV={i&8!1#h|kYxnKO4SLh-*y z$f18pywjKy=0YFQujfor;(G(>6!FC3QFdwy93A(rO7|{?}j7GK7#f-&>bq@~v$Is;7E(t^zJBJ5v28So#9=>^5 zkE2Emh8_^ij7k(WZk>n{PF&(U_F%200?Ss-YE zsnsyB+y~Y`!NMSwpRJ!}-&}9{gSPm--DD>$pX_COW1e6%_K|kR7IV@_?-ArP>i~Q8 z11L)c(!|ReDx_g%9j68B^QC9CXgK`X0-eT^p?Ah(!$-EhRqE zsyU4CkCepG5gu|K* zf*A={^6E>9=h#P6bk1Dp%b^?sDPgw&m=HR~o`=Hg1#`KtyZ8LnbMcO;nW{xR>93jb z+Y8|R5F8&J9oVit0S;4daWQg3@IGezDh^L&#&YyWj4AToQWDwQx@!3J-8*&D@s$0{ zP-3;tf%!nfE0y<7*34pAXt9WUCyOM=c7&mKIE?SJ041=~P)s%!N0E<&fDiq2Hg1nX z*2#S*J!F%=P!RFOTTIm?r9>qbk-w5t$PVzxU3dqncY1lDDvBA(I12eM67-o5abRuI zkIm()OQZc?FxQStLQaVv`7lIV&HvOpD&+qjob-?P`~NP=?l&cS9u=5v)irdE$tbCr zsKuMg>BUVC{Mv5+R@|+$lYDlE@-gE(IH7yk(tQ2TF}iCW^T95)_Wwfu&;HS1AOCA7 zWsUWJ=Esa9x*;1-(`lEBSZ(wHjF{T#LoXsYA!@an*7oA$u#{DQF6bK zKlPnLK`zbSd_wM;0V5Gq8FEL@cgPFG|+4-nmR z6sk;buR$9|5i4uLgD4;&Lz*iD{#nWy@dKe7>Cm`Y-Y*faYQ_r z93HRL)L1+$og0*dzmu`*kp5#e=xW-eM_I~YPpX<7U{oFZX^H{(wf#yWwL0mdh-FM^ zrNfzwpIQNHQBI4(wT>dqb41@boDjcs z)u8(bQEZk;LzsfoqL6Fep;>JibWUzjNRi;0taQn*DTp-Q|2HrI*6jZ!`Cog3!QTG2 zlk!;m|9<1w+%}Tj_TNVYsOj(5C=4v?(w4;nYj8c}BmL*fM1Badp{C8f0I{|Jv86$O zY*Axho?vM#|BcmQ-a2OBTK|vZlYIQo!SUYzb0=j@`|svQyHCgryu+j8Os~^3Ym|okU#MCS<^S71InJN|^$rJn{=bv5W&hvhH-DaiQwGQc ze2h?dEdYT-=jb&E5%K^h@@7V-<6$N~=!n)}ggbNSV^8vMa5qCCz#-#MM!^Jg48c#x z4~njJW%wrIYs@z@T<+*H(e`f-DX68Flpgdx(N}XRgqs25hz2;+o_rLc(4~t=xpd-C z-KIJBrsyWEW}*yUY3FYNjSQ_Dp?Z&2;N?})`fD5;i3yEd#vAc}ZOVS2`=18~y}bP2 zI~nZrf9#~>IcLHq&2;?=7-iM1%ZD-#?ZnwOKKv+eKO=7jS%j!`=c-7U`he2sr{#MiC^XC`! z2)``ZJS%>di(Y!}mIY{DzH^p+XfL<=U402qF+24(E9Yrdpr(B7Ot+KBw(DQkHDQ^! z8x;fqJ2-8=X&Gc&--5k4Q!zTL0)1z1Vm6GATNxR*dAph5xJBw^qus9;+WxS#Uv`Wj z&%-LF*2oN|6yO?2ZdIS!Vq2-4^Vr+yS6fz*|8z9DmBqli^Phu)|L-?lGMA>%xGPk!^LW z(t@T_TvTa#R?XDpq+5T%$u$??g=DDe{U135GgUZ^?Use~QT0n<_08xt_y*l$#+jgl zhMB?W1^OeYBD!HXnjNC7?STdgRXe$NBf8tB)UVzI)!i zeZ#u0+P#=<%F&@OT*$eP99`o=Xqa6X;qJWOODc zVQyr3R8em|NM&qo0PMYMd*e3JC^%nNzXC_jJl*ZnqAtF5bT((#<8~6y^u@33WOm*> zSv5pL5@Hfy1E6fB*Qr-tXCeeNA+mO*I_7HE4r>qYM5_go{Vls9VTnAHUikXO@FT0Cf)Sh;S zNWk)5GUOx3kwHJRx+>~_ju02T<%UrooOCW`m1PWm00S9+j zOn{gm4c-;L1Fp~rF(4?I2odsryB(9S?L&dMXg2^DQ3gCDAojV_z^-g7uI)-~7;2P_z%Y1T`2S(Ica-D*hrQ16j{k3?&?#a*oPCdd)CbLGL%?y&68844kr0@S z<+63rMZ5X`m^5= zn9+#EJO#LZ#06p?WSA;GVqP?|t&b!hZZynG#N@8UP)IoziZPlAtr?OMxJ z>NXmCdv8(5kP8L!0OWvI2h(W2e^uAoQa#CKolqX==nk z^|vX^j?*(Wx{jjBhivZ^+a?@9Pm%x=Nuox14;w?sQRcZMOrzlvTuP4`Ser3yxddlM zu>pWj$M4V-`F+X!02@MAzX^GGo*R`t@GmLq0v-*OgaSs42Bl(fL;WZtHjKo? zP*N}`(0JAdkWexUXv7u5p-*Rl6xUQOGr0zZS-5~M8XNU*N|mXS%sXmr2*e2V2S$$N zrqhfDNK8;`;+EWzG< zIUn^mwTV$1T*D$lVe+_?2y`zlp_ueR)9R`ItH!$16-^s0$&xW?QG)Cx*y}i*zqCO8 zm6fdgFHjIFZLK|+AU{NmJ0e_L6<8qucaDw@a`ON2!QtUf{@+IV@}<2G&Iykg0*Ofl zU@oh^PL}w4o~v%%=lpWRUbLJOa+oT6xtnOl%J+m0gn0LWYSLf#%V&e6|nU;dCsE--}63~M}2}wR2BHsv+)nMRw%+MGL z)DpC%W?3IJrJyWD5pA>6j6uCK&y1n>%NG#O&=S7mfQN?$i~LyWgCYKb(I`yh+Ln}o zMmRO>8j*+7h$Z5%`qG1;K#ZpkgkX3W2^2trM~I8`)dUjHx9dtd4u+VA$Q@$hVKOd# zmp)YbEpbu$U{I!Zq zB{uLXQhA6AOw(b0zcvezYeZh!q(@&6&@ zsHK-nD}dozo4_LZuXmj1|0l->Cp-SXjgmVUG8|rw`+FE>_`A)V6T50lPL!p&v<4|F zhCX=de2;y^ogaKU1Wi5XczeJ3$~om46X1Y9048#kgC2OUqSRMes@A_Tb!4z}V;3fXxPStUBHuh%h-)M$ccG8TxQL_T z5tIn%ht!K}YBUzXP3_l?OBtfvacNL&!N~fib`J0u2|X4JL4k^GC>ecL1R7G$OAdvG z>QJZ-%9Wh4WJ0AIr=`7Ro}1Ch{AJZ$gp4|O%eSglM*!p5MZA#Wc*3A*GItU|jK}0i z|7fFo!IJA^(}Fxw;s*NdG%L>SX1=Ugx;e*~x#~CNX!(#AjPqboF$m=wj;>PBL|G^e9~T2@lE{*i~phRpvp?EiWH z@8hGB?r!~WqdcwsU(T|e`M>^Z&n{>QYG?i5S^sy||D{S5|2Gb!1h+!Ip7nn*|3B&F z`TxmbXLtW+E2Z3dLb31E8&Yyxdy~+bTXGLZZwr^yyEZH8Qfqca$uQ($E16kKGknSU zBrNFr^zM@3DfZDAopTrZP+wdz4woaY36d)p?pXD`$s#>j14RS0tXCwzNiirlHn7zf!7+kpW-D|9{ zW7~55rU%86x$DT$v1FbR$+H-w>VoprE>{?`o4@>QMY?RBAX)}l%G{A}aTQ}n>}vGz zu*~|O&;MiB``_qrjXhw|`A_$#m)HM$hr9FNtrUC345fUSu8x1wVU=?43V#hX9e~`e zQvjM1>k1-{$)h`~oERn|iXiln96kVhP`m zEv^+*i;KP!l%-sy$D^d+moLeNoxpQa*KP3d&@Zhb;8@c?E{II~*3TH*tMhl~r`P9$ z52x?Xt=9mk`+*A6jB95WXbk1z`sU)Jf^mI$dR7H!@np%v{r=xZJe4)4e_sTe4Mswq9qpM|l707S2+rDZWZ-+F9hy!3eiUnX^4CbSyR2OrQBu|KT^ z_3JM6vbDe_JWr)&JK$;EBbpFjoGp`)wJe-hOy-d6s=}dGXe| zfSlF)wW|K&eZ+;**FR8lMX7j^*Z)nuSf_t6NB_@*e4(F0GPaG3$`L;0v;n;DgX5#4 zgQL7XV|{Q8LGL5+XR>3;^-{^2DM>QhZ410eHnSJ;6K%41v7*koE6=CQ=l|>5e*acO z|L^7X|L*be!S4RwR?15Je{GXvGP|C{+?ck$f~ipli!eu7EhCw?U{bp#7~`q8Hk<(8 zBeweIG(-#v%36|oDxyN|Z@tx9H3xhxOeFQ`>iEY2O;-5cm;yFvHeO>=uV6B^TU*6k zobUIVGTkcOUVNStOC%%8hS>8Ext?)X_!&3l{9#W<5K^L$E&C(_ku4u-kt&g>6h%Kr zm?7^iqv070;Sl>+;F!SL?o@GNlouTv8MV2x#bt%KHBO^8LZQqN)|_*zkWsnFk(WQ~ z^5`A8gUmaYblApiA_5047|pS_*`=T^$<=Re8Z zc%%~`hRn&$29A6xPIuNk%gIt8F1yp5TBkW1IAuxbKTwSg;%G>_gO`;LUjE|eE~_59 zY~~y#cWm;Jd=If7u}8hfQnmkQC(3#u02b{3or8S*r(Wl`;u}W5g2?pCezH z7)^bt;hf)x45_>7$r0C=TQsvEn9!pwJSLQ(*C4i%_Q6|<_y;P^?=cq-HuBe*b|9H0 zj>W&x;X8?PrvEBHr@5nRjCNX@Q*YZT4ho!rY>dPuWugzdN1bmw>M14yu_^TBGhL4% zMI21VNzb%l@SUa^_+>DV!!o#yhKLa)5Fdop8zkD!Af!wTWT#>Y8oJsNcZ*P%h$&-q z-v=+8{g&>L#5O(}jO!~zJVtXLHOmoDwFfVq|M{v}7w?4fc}y7!edxwQp(dRffaIHH zh*L(5Ic>zB6b!8EuAVrAx5@1AXe%gbAzei26pj;FSY4KsgJJmVDvQltS{LNCRwN}r z70~+Enky{7lGHkx2oYMLa!XdsvyaWVjj~|>HwP-~9Re?s|GOvo^WT$`o&9e+rBuSt z9h%v^sM?cfSw8gCJ>QkT%~}6bjPAB}|NF2I|Mj@H)Bm?pp7#E?oMjuj|1Cl7?tky@ zf3Mi-=WrRk8tKPd|5^Tjb$CfVOb zEYa~s<1~4v!>oBgr@&FE07K~B!ZG5REP!B$31l-Xdl#5u2q2gsKhR%0jmBQwidq5S zO8eTVfOeqK*xLgt4JmkwLPR`7)BPbCDfnd^T0B=HxwY9<{&fWL2`)5flC=f zuJC8C!Hh;Ah`2~!=RQlalqD4~85{a|7UJL~M+ju_Vm4kQ%1XX^<$#+B<^XdrL@tat z0ulu))*v7Vd9wW>0&ohk4~M>N2TjpWy0t$8!wCDH8m4R)sP=tSD5y+s(03Y* zi;?QQN$nORCBWI$Ta74B`>racJU6L@5vwp9umZ>ihIgR!59c*6%kOpU%}^ zDG@b=TpENvk`qqlne6HhUh-G6rs}BdxawAFtjY98I{?_#8FJ~E;NKBwHv523ZJt27 zx)f|c^L=71cnkStNFno@lB97iyQXEr(S}kb7C}Fpz;5%CoPwvGCwaP@#42x8qoLDB zDHk`c2qP$vvWm)x7eE5XaUQ(n;Mj{dMi3xA0b;^vG@bxR0D@dCE;%8*7)QCH_V)Hb z)q+W}HZzSfK!se^mx-A%Gea8m;FBlgRy1OfQ})@V zL|_u3gkvn~zZ&wS>j^a+&}eiW$(jI+O*`?(OI~nEz2v7_lXfPcB+;+7`05e4gG4Bj zsljv-=tTBb?N89ZR_{#wc0o0AB`hh{e^PjA>cq`qlAB2hw>vlK?BXtQ{bJ9WS89&O zi#wnF&Kk>4AYy);^vICFN`>2ReERgMVe+$Cu2>SOk5j}L_7He@u#?v1YAMvMsw!jK zmoHZCJ;$KssDzsj52{ItzQjzk0WNu$<_h{2yGBtB{U;ljPp|dwOsk(>tLgHoqRCHS zh~#h>3RI0&vUQYONksUE!N1cr>PlD z%Q*o_ZPS=5q3Cl2eU+A9Q7B~8i_{^f1AgK9(5yiBSE1dDDaR#EWiZCIN4~bokpdMMg}`Y`V>X=f)^A@ zJt3vSS+2S{przx!=q&wupKFn9lHgCDK0UQ+zLk=-|G+S8F$BE;ZPEs`!2WY|a@@`5 ze?QpW|KCo@*?$_1j}ZgEsK3*N9@|9QuM+))fjb7na_f(A?bgDZGLg?L1JG-LiR(w6 zQaVWN;Ri<8M@B1>oI$ZjV+go6DHr0C1aKh$^f@(v5brnk!T$a)N;^uiPE_<)`}=*# z%`_8H0<+?jTAT(W*^*JRX{57WO2u0P)y!`J(^D;+g3l3lZ-L@>uWcrrVQW#0NW4|p z++K5^AT|Fey*1@{3AcU?LahWcG}87SjnoP}Hh?qDV&xkIjXfc2O=#@z$MeL}85dd- z_V=}(X}wlf1IR2pLYWC6-J@b(G+RZyD4Gh22q5p#Ed+vs;VgulYeR-**fTUdv*&F& z5n~dSkawq&|7lh7Kbc0pzprPyJ%KK=D^5)GdQ$UUTQH&F>-LPT&W){s)*qaLbs!2oD6|H+z)-NjLg1M5gc<|8f^NRNM*j2`i^lg3=n(>Q)9N&2I4*iNH&cpfEZ ziPO0Dl(D0;#J)2|c+SLUwd>i}PSpM23`98@=Rs1F6=eflx&+Vr#3eZYg^up?gK<=f zJ=V)U&eqJsnG-X}c%s*CC|7lUOWCkOro!zT>k6;oT=xA~x$~4>jphQ1h_~eX%yrr@ zzKPQ7W}fHnsbt>9FeTgSl|XybsRZ?=lY2?1hxDt1?m_0A-3l*h zH6z@xq>+Q}VW+w`#kY1l*>_1hepzR_NAtRqzSZHHu24Y5+$Ch!%TF_PA!FXhszUaw zNi@t<(Z-FpTC2P=F%ayi%pP@b5pytYY5*alBkWtjnq&{h8JI~B1cs(qvoY&!{7_d3 z5T9uEM|Z?PwI8WA?`Q8b9`A+Q=>=w`iw=?S{`}^2@b<&?;OzAB=BKN3%fA)mgXNn0 zF6z}d!wWze>qyt=eD0#A!YoAd7?ymWB45Tm%3CYtFeT09*_Pd&jxv|&=!Yd;f0Lm~ zv0NwchKYNpAXdlT$kfV&-%yVRm|(Gad=%JvNa?B>%*q4&83Zn=_clp~`VW;3wK%b> z>!y7z;|MD>m5U@@CPm1fZ$DgLtP^F$7CO`@WvQEO>C%tJm~5=QFa9m*s zI!C7xS<#X%*P)SwTuCAMGBf7rULAQP?2_ACR4yul!Z}|b`~ipwknko2>(lW&G(~|9RBO#eeS}9q#UbZKv4Iwf#n{Zzv<7jv1Aa-G2w`vl z9s5X~3iuRyts(RwaS>~2OCMs~d zWd$u(p}Y@#OrrbJw;`ib>>=J7PnjJ?DY*d0op~4YN?{sBrvTFm&1CtOw5K+d_`ns@ z_CiKj@(t6Wc3YaMlo2!=cCpuhVQ9r@aSnP;r{N(T1y?;xF4{o?Xo!djY!$~|SLf@Q zD}{6@f9k0AGjqHwrCG}*ypKdV(MlGIpEQ-r7ssM=Y-f_Q_0rmkROxS z$L$5zqJ-0!(B!bD-)@hwm_$Rx6*ULaN(FXhAJgORJ4aWPqJcVGCnEoiq;mkdK&&k$ zC_phw<8rFIZ5)jCgMm-SbRcU^5cHgoj2pLTc1M|~lp!7Ms%6w6J2HZNNk$BE!6H{g z3^f9X(~!|EfC7kpqXV@hru_fbOnLmbw4ZT58n#B3Y@)42L|as$ z71gK{2j`ksbAtRp4?S-rYMGj(-LGCb`U{jf`@iMFvtAnu_W#3!!$SV2qvPHFzm;M; zvGqYyjeN5)ihRHPO=B_VdZ_c27|T6V9or~G1tY#9p> zg|CzoIi~@l1gY-v#E&a>p~KupSkT5E@ThwJ8bEM)rO}fO-yz?n0dg98e_|4+f!Y|F ziuh)|rmoR6c2ZMOIn2#6br=Ys>msh)m=!R&zclX9aKI=P1DXu2Qu!KtjXiL!Z)|Z5 zE5HGEE&7~Y8E>9{MOHr3sJK+~03% z=PlzM9(#fgOpI-nq+_JwjhN#%Lgj4vVvY!@Xa7BbL}2qk3x9)DJlCI_lPKN?zr1+y zt1%U&kM`BGNoag7V2B5)l~*bu+=V_S1J&!aO?sZV8$pzo)NEO zBegoN8-$VX4?+`czj^B4!5MF6-|BQlvDH`kp2PxpV(1#=Z6`h*kK?3JJ{=FVho@A4 z(7k9Tk9~dK*2H8)^;5~L1|y7oFa4(1=^VE@-Bzb}(>>~U4*Q*>|L&ahI~~)1WuIjO zIh*^S*;P^0sD}ngC{{E7&1xUSNb9S+5=0WhP1n?enJR_pQxo6KJYbkIEM^1Ohg?VF zO|9`hb|Kfvqf*0U=I-?*MvrI&qYiO)Tx8~6*4@90u64_%sg!Pbd1SB&|5@Q zKx#ZDn2ZN12(Dy4TIW+)ZIv;p*XgK?5avcnVS2^Sb?t9;H0YSE$J@ji4FW3JgJI~3 z@4|qRu~urN!ls2ir;&Q&?15{wt;~{b#sm<#P@8p3wZx@by9=uiOY{RRQYOY^%z1=( z`>=a>yr=$lX&_l{>+suyqr-#FK~L+;!jJRul(~zUDF9N;WMwvlCUsAmv@#y-r-{PN`saJ2dOG_hTQhlgL4I5b3QTqP|+rkC4($tR=Ij~^a>Rkwa) zIgugg%>bt= zB3#83Fn|4b4^B=B`TtH1cK#n*DPO*{_rVkgeRV@jiY!vl`Yw=UaVMw`_S+8+jfSk& zIKL02Ivig|jqlHzu#T$YmoF_Hr4Sk6&X}~72X9k_+Ba2{B4@AE(ra~pNU4Xo;P^oO ziG%BCG{X0w*=pvp`)Cx;R9p`LlNLsi@6W6tCol{Z@=oL5NW)h3g=|4~Bn`MIHG1%` zG`yhdvXajA{dJ`pYGZ;@@Lw9W_U(sjSyx4j36cBCXv2g%Lm^DD?T1sbFL||1lrEZFIOQN0WY<2_rBhD29n*Xy2nuF%jQ~E+F z93yN(ttP5tdJ&xZs*6L)ky3L&vP#jNRo|tAV-GRpE$VIT^jSKcQe%meX*8}{x1O3n zb3W2)w3FiBvZ&K49el0yXgzgN7gZ(Q!8moO8f4`GYYY?Rlfcn=k-|AO^;&fFcvjSj zHS~7|6IDAgd01|^Swg0Iu61*!C~WSvJRLY{x47 zD1=P3=qR-f6h=9Y=umH*^Hgq?wyMn$b%wL}ZE{V#G?8ineHDi$6P5*!(#zY4@d3Ql z-BI$fb7Mp?1@;x-lh|Aw+o>0=Xv~w4wnjZJUE9TL;RT~e)(c+oenT{-Hh^X`eWNms zgKq|}!8csKE17FW__0wi=ZOCeFWhOd8n$j>;jh3;LPcF@ zNw=$@y?SN$LQw`ZQOpO@9$7TCDmDv!F3Nv))p_#S+l1@cAsUs56etsEY##-;XjVf^ zi7l&+WmYZaY!!8jvhbXW#cnf5yi-4%zza{tgWRqjaGPW&Vpzy`|mE)d9u+ z!Tz+6h|9;|%bEsmMu zb&oS<`jE&9k6P#KeX$UlIn*y@V7WRagfCVolDpJ|yhQgi9xQQ0o(v6|YKLel<9KQ# zk|KcZ3A4L3M z{1R}9*UrmUiz5MY(7$sW=amEgjfIJ`sY6V^)<%pN#T@Z<1YjyuvL^?eV-?g%hqHnz zmxYdg<>Ao?F+}p;Pcc;RHAWe_NPJAlQKz_AveT|W`^Q=1cm(DQPgXenN`?pBhdy?( z@Mi!M4{LiX(XqL*u#!NA%Z*v7sBW*qY8Gi0acw@CF5Sx8-6iYR1VS+0=jBmQik8K8 zb0q*7vs$xRX*DxhZ)=_ZxKL+sSR%=w{vi`JO9~6S(kC;^GBvxB4d}p zl2q1}hPLz^!vPNut$5xQQbU&S@7WZTs%NFG_=&|ejfHTi0l@sNtvJx%5DAzi04Bd7 zS0p$l7hD|2vAM=m5AcFgZ~d#W3}Cn#16Xwb>*(+#zy5o>^WW{1$6UYLTDCEACcmq8 zVErS3*4_v2DHnhyJF?1cf`ibXWxba{O9~@61aTPnTQoDy(2yY=AzUR;8|A)Jl6_)^ zbOX@;4$uH6f*fetXP-^b%%8Y6OVJ)yZ;7jdIRg@^PWYvRRw2~}pqWHzUmMlvwXlCrY741~o zgXgtkRzWj0t5!fSm|wF{P3$E(3v=vA3ItEh<||9B{Xab$YOBP~ONs%D_y1h{k6urz z1iSrz3nexnRk6w9v9X@^dAVVJZd4;vlq6U!kuKB}TS0bML2`&=mCongD4a@P`BB!K!Leaqy0xR(KDKt)Z-wnt?#Tr!u#OR{M7#Z zA9VGKMr4shy3v;)7`$s%ws`9M)K%G<0~Am;i@%Qu7Jbkh&IIC1qoP3#U<|t&DFp|U zKIl|p_#=WL;P`j6Nz^6?h65YuN~rx5a={P`0CWYODpx&%RO+2PV#n2pnX3td$N(F- z_X7=Y*|AK}5mZ1w37E15D(v$>!OD@Ig}f9ufvS;vOYg`AsO4iWq!c*t5_qc<%);r% zo14oOD3+iz5hAp4VxO0w*;iu(Sa$y()8%ad3-VDCS>{0XRgigmb;%FWIBzzw4TM=m8E&vNP#zAOtIj~N5K1?*92*X>h)0xqE7TBg$@^3)UVhqFw-7LAHK z@Jz0@WW}hP@lV%*59nTiAI?@?F7~hxbT4EVx3g5f8hK?`Hd~gJ|McFzS^H1-_#iL; z9Ukw_f45Seq5Ky|>DayqsQqOwO!Q4l99$sionBr5BkHJxzGhd-Z3AYHskXBSFKP| zzk1)ZyBE`D1AVI^_LFwcHb$(`w`!xthB~v`p#QRE6Z`)nbHJkg|D>1K{|`@2j(7Y2 zHp*AB|38J7Z+jAXPkVW>NB~z9GTTIQ89csg^E(z7US|r;@4XH|GiV|D)55+zk8C;|KB@2?(F9#q->HL~Wm`d|Wy z=i5%%i!Ki6d-LYAI+Ejp_LkvFrtyj^@-crfVN~I@ZSy=nOfVppIcZ2#m%1G+Rq`wPx0&;&b-H&t zh1i#j>e2cL;}*8l(Z{yBFT4MLjv%{@mJ3@fvy#L=p=Xe+YaVzB+?*C?rJ&D@) zU%Krwjqkq_v=({xEor8lBH~fDmZ5TOgOtI+j-?cFI9|x)=Ac6;X>ATALdjBSnQ0&= zX3m_jJIS=mvizTia`_G^6?JZY>9TE3q=hUuyFk!<=6jF=cu<^|Jx|fd;RMv_MBM2jlyUV7tnY==XD>KW!Jx$P(}pA zi>3awEVBP}y7~2gaB#A-|7@i^!}Xs`u_s#hH&*-cs*fL49RnF-h4FCVPAzlI0CthM+)R?eqU@^C2)F*0GB(Y;ze)z3~BvfvwWMaRxA6 z=gT6HP=KM|kh>xY;&12Epc03F%mm_qqhhcgEb7K1HYn*#odXGLV+I~T*-Vh5`uMk|y6VvMp{;!(CM>bvzrD6T$2*N9DhB$n?0*B@@L2Rl*m zPg$0g|E7qE`Y-d2C|9H}gH&myDnsLNTe@IWDbt=@$VK z6IvN8;C=FT0hN^RsrIrd%Z5S2mC2+apGm-*NQm(?^jR$<*TN}WE??Ba}5&M42b8}u{8C`CZzSWw+Y?5aYf3Fi-;Kxu7l`QNruo~``%bgsX7(QjF=-|lnw`L)Yx>%Z2upQJ3(|9YLm`akOI*8f(@vt9pB zc zX~bN_Gm+tI(gBm7_%ogmUx!@uS1GH>e`ZVFkpD-wSM>il-1&cOr94~tPh;@BB*1G0 zr-uKBZg5He4+DMk{vQULKZpNELZyxSe~7yo-JB`?RpFy!rN*9dHHlYuXh)4qJEkh4aS?<@5YI9fPcR)kwmh(n=| zUC4D?KSMu4+_7eG{9ZT8k&j$KnQk_K!kxUc@R)~5{OP+AjE)U-b;V{p)4&+@eN4tb zg&q_rh9AKD>xhj}A9T|vKanKNWc*wx#(QOhkn*WnqXvCzjMBZL{y53vXL`TvNW4h_ znNLS$V-Qkrpg+&o7xX_c@E3eDr#-U^8Oe+gDzbuE0V~rPy&v)c(rS(kHdIGD6BKc& z({PtTwFL?mS%O`*Qb?J|%)eYK@;&$ie2%C*t*h<-kvjE%71D6s3 zF+t2yf>b+w(ERcx;Z&f>XI!9Q;Gq$Wd@*2XjJaSlJwlZ{n{q5Dn}LUiet8`M$Kc^1 zo$?7`E~$^*S=CrsqzF|-@CPucf##`y2WPx#Ps~+#Do`0NA@Nc!)B?>m4TTZ4)W1#p zWy_^xgvXg@x|(@oj*Z&-my*jYZa|sfc4HcA7~+r zJB^W%>P9O_OewVy%JI+`v2Q!ycIIvdKsl*lf;hiqbcp&^qY{@Nkgy*CAT{tgBW?b> zL&E{1ROo$BFdSS*qY=Ib&2|%jhllnAL0?RM&w^HcD;bW2o>c}p$tkgzIWA&iFv32H z4RSUN?oN;-@sBq*m)8a8`3)xjMe&0y83Diq3k?0Y$cM9QZAj{aBdbD)7^YtG>Y$Un z^YIkzhTutu0Fh~tHJqN^T>N}K_;C9E{QC0r?A(GhmCNsYMuY6wj4<-OD>TYJHP0{A zz{T>YlPCa%cHe#cVesz!=ks^@2KBB{A$ijAJ2XYUX0pvvpx=MIdVhLT4z*+(@acH0 zArD5B1yEE1zPWgRKKTCP{N39X+fbQg6qT%|Kxtdor|&P{onH;EPHze$vZxsjgV0B8 zAT^LoXQtGT0`y)APt{^^yru?piWtKlDr4cve#EJdEc|#h)Dr-asZOR5mq50v-&xzA zfzZxXFPZqQ<@Vp~URjPu>9$%N`r0j`3^yrj2r;obd@ZldZ$Z~-7RL4rhH!{|EHL8E z>E(sd`nmHX!_a1|^VeH)u#^teEt-`qzj#N@yeM>RGmC6a zKbDi8*II#kDcC4%YB9vHmr_6#a>X@VE)&@Bm3`K!&m@$J+=5z1&bO2oCJadk73&B+ zG?e2H{XP&ZLi5^Oljjx3G&d3@>s!~zDfE?CZ)T3H%`VqpLV1`~MhD8k%Mz-=(MSrK zGlx(Qy#g;Qs)f{hRrO*3iNLR{sS?Ai6g{fi&uHP)L#L&Hs#$y%SZy|63%`(NO@`E4 z89NDTM1V=orlOR z^Y$v=W91hx#Dl4>CO_22h(A(>f2Tx1|B`yAk)Yg#K4M?bnWDn?2C^{{iN&Mr)D)<5 zmE6hc(wlZ;5fe#0-UOvViHC9}S!Wx@LIotzZb|HR1ux(9r4}4D(h|XbX*#=Z=)e%1X+wmx6{U)M~Jr% z4!g&D>Tj0@vWu<5gEzgylWz~-yjqN-K@1WPNM^Fjs`?;ee%W@fCsPiV+3G)@Mq;8v z;;p{jx905dTag18@-RcL`046`_ZuyHp_b5R%peikJHHQLBxnQrKD|37vul@z$k-+4 zuj189t@R)B@DcU@-qGQ4LH|G5<$u^p$*o@<7u{h)=sF<}&r_-0Uc&0NT*gwbSF&U( zxto=IMSb)StYUVpv64d`)?BoV`pBr}FvLGF8ijN4Y{Y8%l|D#Y9xEOVe?zV?5`+eJ zopDUG^nUGBnP-GGskj~TX=$jH5YKc>yTmop16B2vezzPJnG;zF*i%9&7BkfbM!W%} z)IKy7B900a)7a$H!%OAmq9AEczpW4~mT(oXzGQfceKbbr+=adx%05sMb_0MBWkc+F zh+NOOD}2+v7yB>dJFaJ{5%HA2X2x$XfcJfHd~|eRyY>W_q~79kyTIaxgpyW#Dy;C)_SQc6=;@-+439=pG=p81} zeHNesc1q-A<53v;NDBDSPiN!iC}f@7x6(s4^$P`|n7zeJPf|v8ViEN#IfZNikKU0x z$h_0b3tdspP%aP=KP%8@KE#2wNk280uP(Lrf5}{1E+v9dKlC9%8_oaJIV$A;?wxdx zcl-Y~%Jw%Udma^-ZPhh&f$1QrnW)9<%IU>T5B$<>{#x9vjFWtJhw?EOTR5S6+){u2 zPcgcyAM?R33+?}f{GZ*U-Y)*vR>}(N|IClLKx|Dmpr_L|7qQ;x0~m6>(-SYGmLNEWV624^aAkq3zG1tL1r+iTE-VaUsx@E{5(;mD9CHMerRv&nldpg^O@ z=LHT~ub0pq2xBrX!)B5k9*5L}$>H%zO%3J4(z(GX`Hc>Bhs+<#LD$nJJ<8G!drH-8 zfmqeCpQadqUz+<0spUx*hCE|RD;>^c{PYS~iE>61Uf7taSJFlfV9}&l22Ryl46G#h zOc}JaS{l)44l#0#V1d{hM^NgQt{QY7B8KB-QWK`+w1^19I}EEWgD&VTA`D5c$xD~~ zih@Y({eKMu;DY_XB>!ut*W20uwo;yI|KDx=hTDdU+x~S#fCc^i8ij#*UD~i%U=6N^ zd}RJyn#hkKHY{j!CqS$$Kx}BxpIX$|m1kIL%YQ?Cn74`;Dn#zunGJe*Jfkj&}ZETPf@5e`~XW zCtJO?5PgV+o$o5!TUSlUS|I zvU-eCQFXQTaZu`)zcsY@^5x}XgkP0xo)tgKMK3dV%K|jd-#N=Zw3plBU40HvIXlfZ ztLAA{pr(B7Ot+KBwyR&(jl(htH!KJMc5vE!(<;cexdnT3rekzg1^Uk3#H<+~w=yzr z{dP0Kaf{T;M!R1vwEbaezw8)6o`-cztwB7PN`R{&xmA5?i*2QH&QourUu{`N{xi|! zmKFmSo&OvZ{C|7Blim5xR>~szFE%MYdoggw1y(Ax*1s{qpq8<{v|Q$GF8_bGb8?W+ z|Ghi^-BQ^z`}kOZmp&rkrBCT?6oTfwgP%;Xele7g!#>gM#KaC z?|_G0VZGo;#4qP2jck`>i)`v!l@>IU;-X5^vudU$C)4^%L9c}bFC{}=@Bhdln5iOI zWVbA(kE&l9t8WIc!8hn0bHODY49pBhFVW|uit1VhllUelXkNvCon5`<05Svu%(StGPbqYB!L?gh8)0N-h3> zhlVYwn6?s6+NET`Me^TqC(r+TCr7*cpIa$)qL!D+hiA#P>7rt8VFVlr-@sf}Tc$S=AqTK^}V-2IR4 z@$qi`Z>QvJ=Pne`r{j1P0fGyC^kCYasMr-&%(`L~%KN~_B)YfWnt3H(yNC%q!pQ3b z^R&F4#U<2iZ0ST{<&~LUe8%t|&tfxi^BfC?Ve+%9;sG{1#9f9%eZY4LK1bNS1#&6~ z@K1=wh=CgoE0&h@33SA@)P#UkgD`1Pf`Eqt>NEhjk-`+_Dwt--s28cE!{BoSebs*l zT%i$SK+wdVe|LB1{HEG7sLQ^A5oN$b0%DP&e{J)36w(OsK)%w7Le%^BBa0E_g$ zLj0%hNq2Yudpjj$bc#L1`an;^hD(V+_i>7rW+M~g9DI3bEP|n~Y(aF}&3WDOV5_wkP~bdL{xq<@;`Kjf(flux1tl?K*| zqXacH@%uV`tx0v5u(fu88KVq&tqiMZr7WlcfPmwKxdE`J@_kLfAVrz;d4UmV_2fBX#;s}Uy@+aYW+%W2cZbx$P(f~Pq zo%9N2X`$$=o9lz4A8;f2Y31EiLk(RQasHml$#R9D_iu&;dJk0yA>BcZNdWH$l4f!; z9LdGm_#KD0n8>%EBgAIf5#!s#Znt6Nw|?$eSr4IgJfpr#j46sLC-gYT* zQ7Cvjn}8H@j>n`GQm-ZViZv3Hy@6yl8-1;11#OM0+lzHPTM# zMTv-OrH0+!#GW(vGE=Mup>r~@?J8}}u6d$#Ri%PBZQNo?(mCa9dvjYe{al+1=NhTO zh|9g2mLYe`3s=4U72kD$}8`R?;b9rKpp&QuH2==q&6NP4*ylt3Xr}nYUJ3T!4XM#K z&hJA=JY}d?DPQSGJ4UDjtwupZjg9ZxZLO8Q)%t=y2m2raC5nM%ssw)k!6M><;{)|4 z4z8oo2;YNdtB9+{?@UEf0WfJ}6#4!vJt_b&3>D^1aX%et710S}S;%4uATfH_vtKwL@$#Kbs= z=x11fJM8;lh(N?8o*Y1hyur4Tw5eBM$!y9Sf0H_u6>5>(o;Keo^ldG0(WqK@CX~=n zGDp8Du9>GxBbcs|*57$E2TixT%si|5JGcI8@_)-md->C#MfShmQ9k}(Prlyq|1FfV zES7}~mh+u|iz|F(zh4-JnOhC<=~OHeO%TIE9Sqn2jjM91!>Y%{M(yh=*_#kbw0&nG zvIv!UWth(``XnN>C7dqmR_(4W?4D^ae<4m5jy>c;mc*KCWAYnvMK%{4(6>zjBqk`* zspDJ*LzKx`SFEJ3qcppRz2k42dFHMUt+Z;AxsUYaOa3ZIdDTCFog_IYQ^x}ebiQ=S zrV-0%vU-;pWSUo%@d%*L`Ihs?f5{h$dVy7cSfWYR~PPI{V|n_4ma|N80t>OX^joL-*~E>CZMEQ2oDce+5WBY*JlV9&_n z8*^0-w9DC)2^Kc*l`MAo~gFtn{u7CB)OSxAr8lSre}RRaLh`HWb*N4Ua3S% zpxZHan&k4hxja?O_E{-1fufmb#c62eI4aD$iVeEVN5esRDpfgiSTod>4|K1!C!cPi z6;9no{uZ_@andE_X7LzSu3f1rHTA!>GC(fS{|=6hit(QgcKY8|N^KUo{w2|`N>6;$ zxTs$hB{m%%wW9M&CDg0|?{N~FeO)8BW>U|}&OV!5o?q2)>{5pQSyF~(l7w1mLBGN@ zpmpWHsrz{O|Bnmjzn#PG?)-NvWkprcut`OTU?ok@hE{S26n&nFBlgyD`X}~vG z&Ax7AJ5uK(#$|)f>T5~)W6*h2lJfgrd^Z*cM%d!YmE^zGbt-UrdEtN?s$?;V4Znk7 zh{+hxNT_;d_JARDZxQicgFEF#0$@Dj6g4~p&sjDwslL^<(r%Iiu*nIrkw^R1OB@}W8;XqKJ z$6CkPA4b?$@uNcM-oi2BPGe7pI57O313p2%55_(nY7ZJr#;@h#g91;HI%TzM6IXZSm7tAFDMlW|-A6aVB>(oO-%-6#sd2>XaP_8oo~Hujw% zylw0|B9MPmhR2Ql|F5wJeufOwh=Yr_=e*&VRD}%(dkD65bw+<{I8*LY54FFBL#w&# z|LXko?fY{l@YZW%q5j|P=HtKgcKZKzN-WYf8mHh&&xJTx9OTFYlqku~$bD9H039(U z6C8!Aa4L>w5*mo|6;=jMFr$(3L1uE_hs2AMX#x*(!SFB=$O8d(8I5BoIgQ5u2K)OT zs6hSweQ+~D5-IH3Xv6}kjmO;tyOTH&OX^ZRqRa}*;((txQhoa+8}Q}Vm-B+NyaFC| zBV}h)Z3zlIq_ah!xM3R?*=t1vmE=UCFr$%;hkC(xu}gPlS9WFV<^K-=0RR6UcXeU_ GLIMB?Xju>d literal 0 HcmV?d00001 diff --git a/assets/rancher-kiali-server/rancher-kiali-server-1.32.100-rc01.tgz b/assets/rancher-kiali-server/rancher-kiali-server-1.32.100-rc01.tgz new file mode 100755 index 0000000000000000000000000000000000000000..72b84337e6968181ac6cb2e7c20b1fbd6a860f9e GIT binary patch literal 10204 zcmV<2CnMM&iwG0|00000|0w_~VMtOiV@ORlOnEsqVl!4SWK%V1T2nbTPgYhoO;>Dc zVQyr3R8em|NM&qo0PKBxm)kb7=lr|+6j(a<#Lilj)X$9W$=U5`JBjc3(YL#kIkR(S zc_6YRAtnJD0M)H={N4B9!G|bPq#mtqPlP}076}vz1)%DOLILEM`cvTDj|7LLD}c{{ z_b#WHOLvZ=@K3u){eHiHc5XcKcW6k zYHvu1keL6ezja;Z#(gCTQ_3Wkgi$f5GsWty(fI56S*EOKMcB9K!^L~mB4Vr8JnP#l4Xu@6IJ zXm^Q_gmuMSNQkP-a0mel=&G{S0`1_K{0dwUMu%v2)WLC_{~Wl-M{d6pfbcnqrGEHV zRTvS0Fhwi|iUdoz4=CpBH}EAIGmaE#;sc66Oc5KYpLj$K zH1=D8-Y7A-ohef?Nb8&sIZZ}N_B~y-`L{!S)y6av$9JyDmFu!9w5W`Lv>CWtQk>R6@D9Ag;KN31o zFX@|Vw{+6*7Y^Wuqi_~X_1G;z_Da}Rn94dkr@f1GfM}p9}G7*@aOJj)D#wV{DF z500`sVoJu+K{%09BqYZYCUdv*4E>!YXo_c`49rK$?hsb$7O^psBm#6d#S+a~!qGKL zB%oie-=aGbhG+z61U^m#be-P+0mLDjE89j*`#!`#Z&dR-&r}vQXe1&M zCGiUvy%{6HB48AB^8}hIE*VPV087hLfnmuy&rrbh^Op#tt82ras`w5i zcEA#8A5&9%BB0PsA5trg>;NF65OPs!nBPUtci$;2j)QAYG z^kNngUk!tc@D9&~v-nnk&p|5w6mt?!asaNlpKuVu1Byo>1a=}J6tc+#xM@bnCf=Cw z2urm9f_v#?k3*P&n%0DlnR%*|l{Y3326>sIe*di7A9VXiw}aDR|76%d{lES5VZU$N zkE1vQ?y1o{M9x4xRsG}%2*H<(r{mwwb}waG_p&Atfy4op*yc2ynJ)_Sry(9em_6Wx zaU$oQA7UXq15zEw^g~E|EQV;Hf2APRPCPBqG`}?}C|#XY)SSMN^Ej+$T389{3AAzbYf=no(6P3d#AA`AuTF6`u(NVwOSCWfBa^f!!uk^Xe z{pbFlRXbC)o|=hE7DY^{2dmJv-o+846SJsM3pRt&-OeOrBODsdccab9JTo(Xn5b3M z8*QvpsUgX+Pv}G`t1+4Af)xt_U6J|M)qjWtMDJv9a`sIB?XyU!-0sPrk55mI`^QIS zy)2C=5i*PDS4QVw!-NRQ=XMC7oHLb~kFakF#Ug&43e0r&VxW2*#h=0ueb@W)rPEQ_ zINpr=s5h z{jN|C_0id}{*y#E$#_iek<)dMr3ExV8H<-3)QTHtHH?!moTE<(4#}7(3>3$jdAIX7 zFtl}kscKLS5vj*PujtWVlM!$V5`<~8M(0AWfc4VQI1}^&|G8b(zIuP7@+y3!Rwpmq z&YLl^PJcs0t?@9S!ny2>{I5Ud)pc6p$LT692|TzbvWBw(F2mu}8; zSFyd&*hK^KyIv0|8|M5k2RWXz_K<#~7aU^(LNlE$9nDUQdc;EA#1RvqmpLe#rEpis z?=vb$033p*)`o2IRu!onPPwzhU8pq8+BTmaKr0HFWwe{~-z`X|TiN+$(PP%BO-O{;#Er7E{`kc_L5)3U2=-J)*n&O{Z?pP8vw`2-*8MPfWGlw zqHlzHS25O>>8DOXL&gvyV@1I}$RFhuXRnr6`k|n#fB%2~A--{nZ=Zi7iYod$2RZI{ zPVv$IR*#$)iuB`5J1)Q&80{8E*^rw0jYu)Kk*3~gGAc_O<1$sVGxUe+CU!dod$+pz8 zX4g@B@uJuYEg9rMst58G6=Yh-=q$B)8UGctuEJ-pGOefZN!lFkB1PIon)*l4N0_&O zDXC}GEx1)HHCs*IWh}fR<8re(rolxRPx1RCLW8r-T7L&4#2IT`LfQXPS8ruAOL@?8 z`^q^MF=(#_->WJvacm-n2nhG$>Wu{f!u=Tw!fWJ3H+cyGf#^_(OM3c|WFIFD;j<@2qm(J@%Q_ zbq~{LW|JuQ%XZuBy*Go@0gH?WfoZhctN5#oG(T% zqpkuYBt{1R=oP9BhQ=H;%!x6V>Be_nP9yuw4e3W{_yb}Q$$%VkihG|9a>_fdj%{m> z#umU$?>n_bF2;}>93l!!w6TW5CKfryLLef|-gJ>sLXnScxUdncj)>Qp7aQTJHYoV@ zjUN@<#ik{8{Z`kX8Phi`%0j=Fgr-C~0SXG(1%~g)#`sHxQq2h(dsTiUY`_shpzc<-yDp5%Z>DC;A;P}p| zt??oZnXgPLiXdWqo|aE2kwfH+<`Tr(tQb-rPHEROrRfklMEzP0e+C>QLH-51WNivK z_KHL|V(ph$NDeqc*q3CcL-i>5dOcWT?5v(Kdo;mIEHTf&_YA#t`!ZukGKoWd;u3`1 zh86zF)3i#W=dq~dO+r0$uh<>kfwV#*q(XsSkkQ**Un; zn+>-A^6D3)&ndRiJ~3xL2;up0;tB8>4aB0RuF%UW;mL%DM;?2?{dBp|uBKk`y&y5?fU_B+PsTr91Kz{E zL_b|_I$et0Lg8MjChljdd^LFGkanBe<3D57AHx5$bpPMc;P~{g|GSs;1o2;bOUM2p zpoy1xL+v#OIUH;NdKXu3kcB#gPEcx?s5XYc>;>VNcsbc6V^?7mrbI|K;W%n% z8uVsUon5$2UskvI$Ap@d{zJ5U!o0Di|F9BBYpD~$kEQnovx@zXcv5dw^Vc=a3A=-%53O&yS5jceI$spE?U$7#s9#XBu-@(!o0rOF2W_hp_M^Mn20NBT6Xv84e&o`l8VGw$EnwLS4G9 z&e}@f?FKpR6f$8BxXut?6yCKl+&4OGwW;|&i}WQ`I}m{(CBIHNMEHIOB8c$)lWhDp z@NGl;KWK0LTf~2y56brc^ym=(v6uAJ?f>8_wEkYfyf&bKgPA&*sXvODdSEE*mCEiD z5^q}fttp0t#B20(TDK|HTz7MCYf81+c)8acQd-rjU0&i{qC%#g8aR?GT;o}+5 zNpUN`0S^3~C3J#*xFEk8AbJ#P{ZkoM$iF&;gVgNBX04_3@M|^)|S(%A+!@K(O&;k7Qk;CeH6HH{dZcv|7mb~SpV%OJwg3% z2HGR}{NJ+xTwS|01olCl@82+MPpf-VOoOl(l-+c2z?_@6#o8dphWgggO1AQvBl0b3 zPfKoA{p*=o@3I($c+yH|ui^<5IYrG2@nkziJze8|it2cM%agg2LJd`YGlg9WZ|$2G z>1Ki@vCd9IwsdLRz{*8_P5XAU|Fli>E@qg7N>M#n8*y60ej57FUibF)|5Jkb$7B-# z(6s(L=`WrCJ3l?#|G1a*1ns{aXpge&`)^Zs)r#-GGq#!{`_^<*&VUAtZ{?`m+973m zDBh)%2s~+2ax2)OjCOa&5@mEPw(Kxa1GD5#IP7E=Q+xd{Vl{C`jLG&Vzf5Y-|NXQ6 z()q8W!QuYDy`(3o|0@RCBP|ARG$-gUjLDTJzzPPTq<5;0u{|jTwCVg`2L?9H|I@S6 z<^BId{O4ZMlb`=jZR&3@>z~wwFQtv@{vREk9sECgNl$S8X9Mk#=KXD< z{&d!-kLtF8th2(#xJ4{T!lla|YFrWncTn$1v1ca>1e@H}wVYIWN}j%cI;4k9Yv}*= zKwlv>=>OyXQvCPe^z`8W*-Ltg`u{OO-)&lX9o}0|`-W9dfY2Yy^L!3iLeP5u|Hc+X zwqP5-cw?RGczL%$84AZrZq%-X0rRe`B;}2?6Jfw}MBDP0{7H zzd~{I9=ZWO3qh{m0AUL5uLTFF_-~oo{9T4y<~3h(j~5y&a4y)58e_O?MvI`-5=*;IWEgT)(*NmIU5gm>{l zjK`7BW?$rL9KzN3q75f^FcQrF2<^Vbwamz!xZIkRQ7zDK8x*?Cmo9o!z4BR@N-a36 zL+V>{cU>Y|&EWyy{Sni;_)mw~kJbwVZp42_M@#V^XNUNYy`(3L|I&f>v=HEH%hhTO znDTDV=kPY@&m4zQq>F{xY5dCis_kPlV8KDaL5Mp1kx8JCuc<{b(16ehia-cFS;v-T zEwdz^TEp^BpX>sy=dI1??iQ>+fCy6Lg11C1S=%jS!3}WbQJZ_miIhev4_{`M<`o zpDZ=4|Bm`g^Z)q#F#q?Gp6vX8#A81-YriYT!iI&PV%p0-`Q5PM`$esVcJRr>Le=JQ z?J)}{AW0LS_tq)(`ga^VJciR{=-t=ef)>z=HDa!Ba_n3<3BPn?KJ+w zXF;t&e9bxIsF>r?<+^p;NcGUKh9Ye^**I>*GO|_Nh-GD`aU+(mE#pQOINM>|NRhik z+{nLwYQldIhio3L9rC-7R^z|H$=OLc{-b|N4c$N-%l!q3$0(bC%(@K*`njBK8RW1nd0UAlKmY=VMCb}^;s)qkr|~-E&{V9 zu54qBJro|8WloW7thaWikO;M=5kAM-1WKM1fZbxIm~pu<{z|o|_vm-@DPa89Z zE1Ja#<3!HwXKGZ*yjc43QoYOSZAoRRx0kx4o+}dJ33zc5hHBl$K^Ek#-(4kPcw^oa z^%lo;0_zg&=4!)j;CA7G(N0xv9rbUj1leEytiD&&Z{kPvwRjByf5kHdrr$>*kr zYIQafL^3`{U%m{h^GG~FU%uo+J`>Cp3yD9k>#Kq&Vx1BFjx1})xd`v@TsXynxrt6i z`U{ts2DujMBB#e<+0%v1zfSRG*JpH0CJWC@Hv7hI8}-aDjm`?%fN?2`l^L#aOuFh- z_M*^hS2Zfjs;X2ZM+&j6Q1Z>{G-XCDH@Z>gN@>kdNr$G4{ki|={z_wjbdVaMAjB1C zBN!GcRlNKJviJxgwE|z!)AqkR7nniCJ+YKFkXCWpI_;YOYx|iEdZA4ef!}j@9pbfU%xF^XskvJ@??{@FoV!2 zS*Mcdj~}kzUEEevtuO;2n@kL4Z_IdvWi8>`H}771KfZbW_SJ@U=r74=DHW>T=h&t`QcrNmWI_<>vGa zURzy*$>S{b?In)!h=fEE5bnj*8@uWk?$1~thqFY2%VMBnO2*P`;5b`JACD3mEDVh* zdDvVlS1a}4m}h(C3#Q&a9JXARL6JTYk}$Wu zlF&=!E;eiAa!qA0VMRij+y?ZpSoJ>+he+}SR@J$s&Rg!&QcqOOZC8b#lJ?iRTScS6y zE-DGttN2A?t<`)h{$jT1GGxKV+$mB!XHNG*nL{ecHe4E-tyx{e-z8aSzYAF~>V=0z zlUvVgkxHePaSe{tknvK7e_lX6zFF8oXku!SP!n6O>pt*?YQz5DG{#$O{MpoW{^$I- z^!<;)+4<4wVgGL*seZ_-t`{-*RncD6Hdd9uG4W<5n<{9w5r1Z!{EJbE!z&hCB$5dq zhrqv{Jw?s$E#?!Dna87Q*A(e}mD0}X+D5z6q(ri=$=N+h)y0~j7!C8E&m!D}-h{|$ zGID(u^*$ye;1mk##?;dzLL?x1$0vicXZmlSMXHJ2ljHA?PR{>)^8Jfu9xY>-21uzi zu35Cabz{yX^I7N?J8PpQu&y;7?QY&Ay=T8DkcHTRRprWD4w0j`6P(JPT91Q5_`n7% z6gbH7bKz%dH#Zyp$Wi5;HkPn@uvgi}vcPx}f(^!2V=_hWF_zQ92KM?JP=zIs72cww zLOW(Q30f!=U%6MCw>4iw6n>WQL4*BgIFZwBR{)LpzkgJ=|3~MC_`kiRZ9QEj%ddx# zr?Yzr539_*8B!%$*3^HvNaWO9iMP4A@2;@$d%*!50>Z(Uzg)i&!%nw2Q7hy#;h0Jj zoj*i4k*tHmklkI-`HjzFuztzavv~8=F#lr_Klu9p==9`lY5jk8`2NFQQfdC0d(mA! z!oC}e_;rrji&I#?R?}Fm>ou0lk-MGA*DQp;5PfIY7Be{(amz`|SqOG%j$`r@XGy$* z&rZ5bzcw3b>vJWN(Qn{Oiy#cKn}xu{!n)rCRhAWDODXP0d?=TN8uHKl8YJ>_2RQ{?-Uxt`O1ta~~TE0Ft*ng!~ zyFR0mvoH=Zg$MZlQ~z}7``?4J{`tZF?<4KsC>2N3lCrHkhAs*7vYgqncw3ylZ1m7S z9Os|Q*2)ISFIuRO2)TzHx`$0|=KqYq-MV)^6jP)Bf9d<5{gc7r{;$2H4d(x4m?2SPN^6SBDZe2QX<`4jb^tcm|K;z$4$cRIga29Oqp!SGvc z8*6R*$AJJ1?fn|Tz^W$g7#0*dH-HfApKA;GAz(v8od*E1F@V@nr$08-IHV_-THwEt z*~Z)44cr+2aduw*{@3925dXQCw4wiZ`>ow4o)9ggm%KoOxrVtorHnh}hChA>(Vt*hcUgRhC) z&T+Y?!$iA3J!Gg>9#VSH^F&|Gp%9sNm;@dXY9skL0QLDiHX)san$t9|g9+T`+0t7E zuWj(RqQ-`W6QR~d8}j-nY4b6Ttzbf{knslnZ=Ki=dj9kHxPQKM{&R5n{>NTYS#xG; zG99j8fugKCb-C5`E$PS~fy9fM^cy-UUggtW|AwOCr8cF5blJ_k%KT}qnH`%fzFN*} z?uh0fWKj&52I#py;H!gM%i87+M&9^SKwrFQ%B628#Q9w=mVRyiq8`imgnJ2`;;@_W zuuA#m6`?O*hP_^O4#lv!EjGKW)v3zI8IyHKTOWp{Vf9-pi_f2*H#7XA!g$vFtcG58 z>{eaSyxMYB6)aA-W~;t}s2ZKt%<6GkcTrP0_d>I?n{78gtealTB>i{^02D8$Emy5C z*|w)(Z!gUqopl#|FP_9~c|UIL&A9FBUAP=~S$d1N-EVfa{YhoJigyGB0Wo)Kd1+^A z0M`P!)fFwmwo07y*k<&rP3`cXy+>|C7}&J`bG#J)I~bfD_J8)0n($xhQhf3-@Sp`Y zN)7YhI$xk`y)Ip!2fP0M|Db<k#!VgGke>6x|T6N#ROK+*G%v5!fNoK+h^4sr_n zCys)$j`QLL>Z7jq@+q3%j9EehH2eVt#FvE^0%ZDf>V%&E!(HT#K+x|Lob zXYO*cwLh2aMk?|O8Jc|mqr~7s7Ri%h%?f?g{W4sAf)xyL12c`Y+z~hYzCFbcJXE|_*Nk+*BzpQ%Db4v%e>2AfjT;BvxBq$gV&)+o W(jh&1`u_m{0RR7Wz{LFkOaTCDc zVQyr3R8em|NM&qo0PI#xYvVi+&e^|W=zF#*H(xKlm8OTX+hxf@?-O|%Ya>fS8fV*o zzsOF%6S@#+DfqbNPsbyWM@Rk#w2?84?3hK140V_)HX1=0V9K`|S7o>Nv=Mrp6m&il-`6@hBm9 zkN@-e*(?6fXEQnQ|09s+`3p{?*L25Z(<+M1|1oL6w#YWxRwZ1tkzKQ-=-QxYLAToK zj-3rLR>+t%q^EY{tY#OqT~`?EmBZ9UPe#!-oX{?do>V%v4zBgj&po;HcXk2=&}VY} z=(c#czS}iA^0z}C-*x29%bPZ!*`H+R5Vc*m2E$&L3?M3(1nNgh%cG)X+bL9+X1;rc zZGpzuSoD`Bc2y-LCG8FD0@_cc9DVpl|9(#}f#pKQWAItf`|Bt|b zhiC9PEc-1`>0c1IMh5+6# literal 0 HcmV?d00001 diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/Chart.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/Chart.yaml new file mode 100755 index 000000000..8c9e24f29 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/Chart.yaml @@ -0,0 +1,21 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/ui-component: istio +apiVersion: v1 +appVersion: 1.8.4 +description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. +icon: https://charts.rancher.io/assets/logos/istio.svg +keywords: +- networking +- infrastructure +name: rancher-istio +version: 1.8.400-rc02 diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/README.md b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/README.md new file mode 100755 index 000000000..199e45312 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/README.md @@ -0,0 +1,69 @@ +# Rancher Istio Installers + +A Rancher created chart that packages the istioctl binary to install via a helm chart. + +# Installation Requirements + +## Chart Dependencies +- rancher-kiali-server-crd chart + +# Uninstallation Requirements +To ensure rancher-istio uninstalls correctly, you must uninstall rancher-istio prior to uninstalling chart dependencies (see installation requirements for chart dependencies). This is because all definitions need to be available in order to properly build the rancher-istio objects for removal. + +If you remove dependent CRD charts prior to removing rancher-istio, you may encounter the following error:: + +`Error: uninstallation completed with 1 error(s): unable to build kubernetes objects for delete: unable to recognize "": no matches for kind "MonitoringDashboard" in version "monitoring.kiali.io/v1alpha1"` + +# Addons + +## Kiali + +Kiali allows you to view and manage your istio-based service mesh through an easy to use dashboard. + +#### Dependencies +- rancher-monitoring chart or other Prometheus installation + +This dependecy installs the required CRDs for installing Kiali. Since Kiali is bundled in with Istio in this chart, if you do not have these dependencies installed, your Istio installation will fail. If you do not plan on using Kiali, set `kiali.enabled=false` when installing Istio for a succesful installation. + +> **Note:** The following configuration options assume you have installed the dependecies for Kiali. Please ensure you have Promtheus in your cluster before proceeding. + +The Monitoring app sets `prometheus.prometheusSpec.ignoreNamespaceSelectors=false` which means all namespaces will be scraped by Prometheus by default. This ensures you can view traffic, metrics and graphs for resources deployed in other namespaces. + +To limit scraping to specific namespaces, set `prometheus.prometheusSpec.ignoreNamespaceSelectors=true` and add one of the following configurations to ensure you can continue to view traffic, metrics and graphs for your deployed resources. + +1. Add a Service Monitor or Pod Monitor in the namespace with the targets you want to scrape. +1. Add an additionalScrapeConfig to your rancher-monitoring instance to scrape all targets in all namespaces. + +#### External Services + +##### Prometheus +The `kiali.external_services.prometheus` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-prometheus.{{ .Values.namespaceOverride }}.svc:{{ prometheus.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `prometheus.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Grafana +The `kiali.external_services.grafana` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-grafana.{{ .Values.namespaceOverride }}.svc:{{ grafana.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `grafana.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Tracing +The `kiali.external_services.tracing` url and `.Values.tracing.contextPath` is set in the rancher-istio values.yaml: +``` +http://tracing.{{ .Values.namespaceOverride }}.svc:{{ .Values.service.externalPort }}/{{ .Values.tracing.contextPath }} +``` +The url depends on the default values for `namespaceOverride`, and `.Values.service.externalPort` being set in your rancher-tracing or other tracing instance. + +## Jaeger + +Jaeger allows you to trace and monitor distributed microservices. + +> **Note:** This addon is using the all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io/docs/1.21/getting-started/) documentation to determine which installation you will need for your production needs. + +# Installation +``` +helm install rancher-istio . --create-namespace -n istio-system +``` \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/app-readme.md b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/app-readme.md new file mode 100755 index 000000000..0e42df083 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/app-readme.md @@ -0,0 +1,45 @@ +# Rancher Istio + +Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a handy helm chart, including an overlay file option to allow complex customization. It also includes: +* **[Kiali](https://kiali.io/)**: Used for graphing traffic flow throughout the mesh +* **[Jaeger](https://www.jaegertracing.io/)**: A quick start, all-in-one installation used for tracing distributed systemm. This is not production qualified, please refer to jaeger documentation to determine which installation you may need instead. + +### Dependencies + +**Rancher Monitoring or other Prometheus installation** + +The Prometheus CRDs are required for installing Kiali which is enabled by default. If you do not have Prometheus installed your Istio installation will fail. If you do not plan on using Kiali, set `kiali.enabled=false` to bypass this requirement. + +### Customization + +**Rancher Monitoring** + +The Rancher Monitoring app sets `prometheus.prometheusSpec.ignoreNamespaceSelectors=false` which means all namespaces will be scraped by Prometheus by default. This ensures you can view traffic, metrics and graphs for resources deployed in other namespaces. + +To limit scraping to specific namespaces, set `prometheus.prometheusSpec.ignoreNamespaceSelectors=true` and add one of the following configurations to ensure you can continue to view traffic, metrics and graphs for your deployed resources. + +1. Add a Service Monitor or Pod Monitor in the namespace with the targets you want to scrape. +1. Add an additionalScrapeConfig to your rancher-monitoring instance to scrape all targets in all namespaces. + +**Custom Prometheus Installation with Kiali** + +To use a custom Monitoring installation, set the `kiali.external_services.prometheus` url in the values.yaml. This url depends on the values for `nameOverride`, `namespaceOverride`, and `prometheus.service.port` in your rancher-monitoring or other monitoring instance: +``` +http://{{ .Values.nameOverride }}-prometheus.{{ .Values.namespaceOverride }}.svc:{{ prometheus.service.port }} +``` +**Custom Grafana Installation with Kiali** + +To use a custom Grafana installation, set the `kiali.external_services.grafana` url in the values.yaml. This url depends on the values for `nameOverride`, `namespaceOverride`, and `granfa.service.port` in your rancher-monitoring or other grafana instance: +``` +http://{{ .Values.nameOverride }}-grafana.{{ .Values.namespaceOverride }}.svc:{{ grafana.service.port }} +``` +**Custom Tracing Installation with Kiali** + +To use a custom Tracing installation, set the `kiali.external_services.tracing` url and update the `.Values.tracing.contextPath` in the rancher-istio values.yaml. + +This url depends on the values for `namespaceOverride`, and `.Values.service.externalPort` in your rancher-tracing or other tracing instance.: +``` +http://tracing.{{ .Values.namespaceOverride }}.svc:{{ .Values.service.externalPort }}/{{ .Values.tracing.contextPath }} +``` + +For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/istio/v2.5/). diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/Chart.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/Chart.yaml new file mode 100755 index 000000000..9b6fdf385 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/Chart.yaml @@ -0,0 +1,31 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=match + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1 + catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1 + catalog.rancher.io/namespace: cattle-istio-system + catalog.rancher.io/release-name: rancher-kiali-server +apiVersion: v2 +appVersion: v1.32.0 +description: Kiali is an open source project for service mesh observability, refer + to https://www.kiali.io for details. This is installed as sub-chart with customized + values in Rancher's Istio. +home: https://github.com/kiali/kiali +icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png +keywords: +- istio +- kiali +- networking +- infrastructure +maintainers: +- email: kiali-users@googlegroups.com + name: Kiali + url: https://kiali.io +name: kiali +sources: +- https://github.com/kiali/kiali +- https://github.com/kiali/kiali-ui +- https://github.com/kiali/kiali-operator +- https://github.com/kiali/helm-charts +version: 1.32.1 diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/NOTES.txt b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/NOTES.txt new file mode 100755 index 000000000..751019401 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/NOTES.txt @@ -0,0 +1,5 @@ +Welcome to Kiali! For more details on Kiali, see: https://kiali.io + +The Kiali Server [{{ .Chart.AppVersion }}] has been installed in namespace [{{ .Release.Namespace }}]. It will be ready soon. + +(Helm: Chart=[{{ .Chart.Name }}], Release=[{{ .Release.Name }}], Version=[{{ .Chart.Version }}]) diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/_helpers.tpl b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/_helpers.tpl new file mode 100755 index 000000000..dd33bbe48 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/_helpers.tpl @@ -0,0 +1,192 @@ +{{/* vim: set filetype=mustache: */}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "kiali-server.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "kiali-server.fullname" -}} +{{- if .Values.fullnameOverride }} + {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} + {{- $name := default .Chart.Name .Values.nameOverride }} + {{- printf "%s" $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "kiali-server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Identifies the log_level with the old verbose_mode and the new log_level considered. +*/}} +{{- define "kiali-server.logLevel" -}} +{{- if .Values.deployment.verbose_mode -}} +{{- .Values.deployment.verbose_mode -}} +{{- else -}} +{{- .Values.deployment.logger.log_level -}} +{{- end -}} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "kiali-server.labels" -}} +helm.sh/chart: {{ include "kiali-server.chart" . }} +app: {{ include "kiali-server.name" . }} +{{ include "kiali-server.selectorLabels" . }} +version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +app.kubernetes.io/part-of: "kiali" +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "kiali-server.selectorLabels" -}} +app.kubernetes.io/name: {{ include "kiali-server.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Used to determine if a custom dashboard (defined in .Template.Name) should be deployed. +*/}} +{{- define "kiali-server.isDashboardEnabled" -}} +{{- if .Values.external_services.custom_dashboards.enabled }} + {{- $includere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.includes }} + {{- if $s }} + {{- if $includere }} + {{- $includere = printf "%s|^%s$" $includere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $includere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- $excludere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.excludes }} + {{- if $s }} + {{- if $excludere }} + {{- $excludere = printf "%s|^%s$" $excludere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $excludere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- if (and (mustRegexMatch (default "no-matches" $includere) (base .Template.Name)) (not (mustRegexMatch (default "no-matches" $excludere) (base .Template.Name)))) }} + {{- print "enabled" }} + {{- else }} + {{- print "" }} + {{- end }} +{{- else }} + {{- print "" }} +{{- end }} +{{- end }} + +{{/* +Determine the default login token signing key. +*/}} +{{- define "kiali-server.login_token.signing_key" -}} +{{- if .Values.login_token.signing_key }} + {{- .Values.login_token.signing_key }} +{{- else }} + {{- randAlphaNum 16 }} +{{- end }} +{{- end }} + +{{/* +Determine the default web root. +*/}} +{{- define "kiali-server.server.web_root" -}} +{{- if .Values.server.web_root }} + {{- .Values.server.web_root | trimSuffix "/" }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/" }} + {{- else }} + {{- "/kiali" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity cert file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.cert_file" -}} +{{- if hasKey .Values.identity "cert_file" }} + {{- .Values.identity.cert_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.crt" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity private key file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.private_key_file" -}} +{{- if hasKey .Values.identity "private_key_file" }} + {{- .Values.identity.private_key_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.key" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the istio namespace - default is where Kiali is installed. +*/}} +{{- define "kiali-server.istio_namespace" -}} +{{- if .Values.istio_namespace }} + {{- .Values.istio_namespace }} +{{- else }} + {{- .Release.Namespace }} +{{- end }} +{{- end }} + +{{/* +Determine the auth strategy to use - default is "token" on Kubernetes and "openshift" on OpenShift. +*/}} +{{- define "kiali-server.auth.strategy" -}} +{{- if .Values.auth.strategy }} + {{- if (and (eq .Values.auth.strategy "openshift") (not .Values.kiali_route_url)) }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or use a different auth strategy via the --set auth.strategy=... option." }} + {{- end }} + {{- .Values.auth.strategy }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- if not .Values.kiali_route_url }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or explicitly indicate another auth strategy you want via the --set auth.strategy=... option." }} + {{- end }} + {{- "openshift" }} + {{- else }} + {{- "token" }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/cabundle.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/cabundle.yaml new file mode 100755 index 000000000..7462b95a7 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/cabundle.yaml @@ -0,0 +1,13 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }}-cabundle + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + service.beta.openshift.io/inject-cabundle: "true" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/configmap.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/configmap.yaml new file mode 100755 index 000000000..b1bf53173 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/configmap.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + config.yaml: | + {{- /* Most of .Values is simply the ConfigMap - strip out the keys that are not part of the ConfigMap */}} + {{- $cm := omit .Values "nameOverride" "fullnameOverride" "kiali_route_url" }} + {{- /* The helm chart defines namespace for us, but pass it to the ConfigMap in case the server needs it */}} + {{- $_ := set $cm.deployment "namespace" .Release.Namespace }} + {{- /* Some values of the ConfigMap are generated, but might not be identical, from .Values */}} + {{- $_ := set $cm "istio_namespace" (include "kiali-server.istio_namespace" .) }} + {{- $_ := set $cm.auth "strategy" (include "kiali-server.auth.strategy" .) }} + {{- $_ := set $cm.auth.openshift "client_id_prefix" (include "kiali-server.fullname" .) }} + {{- $_ := set $cm.identity "cert_file" (include "kiali-server.identity.cert_file" .) }} + {{- $_ := set $cm.identity "private_key_file" (include "kiali-server.identity.private_key_file" .) }} + {{- $_ := set $cm.login_token "signing_key" (include "kiali-server.login_token.signing_key" .) }} + {{- $_ := set $cm.server "web_root" (include "kiali-server.server.web_root" .) }} + {{- toYaml $cm | nindent 4 }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/envoy.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/envoy.yaml new file mode 100755 index 000000000..85b402017 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/envoy.yaml @@ -0,0 +1,56 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: envoy + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Envoy Metrics + discoverOn: "envoy_server_uptime" + items: + - chart: + name: "Pods uptime" + spans: 4 + metricName: "envoy_server_uptime" + dataType: "raw" + - chart: + name: "Allocated memory" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_allocated" + dataType: "raw" + min: 0 + - chart: + name: "Heap size" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_heap_size" + dataType: "raw" + min: 0 + - chart: + name: "Upstream active connections" + spans: 6 + metricName: "envoy_cluster_upstream_cx_active" + dataType: "raw" + - chart: + name: "Upstream total requests" + spans: 6 + metricName: "envoy_cluster_upstream_rq_total" + unit: "rps" + dataType: "rate" + - chart: + name: "Downstream active connections" + spans: 6 + metricName: "envoy_listener_downstream_cx_active" + dataType: "raw" + - chart: + name: "Downstream HTTP requests" + spans: 6 + metricName: "envoy_listener_http_downstream_rq" + unit: "rps" + dataType: "rate" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/go.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/go.yaml new file mode 100755 index 000000000..2d2f42a93 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/go.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: go + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Go Metrics + runtime: Go + discoverOn: "go_info" + items: + - chart: + name: "CPU ratio" + spans: 6 + metricName: "process_cpu_seconds_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "RSS Memory" + unit: "bytes" + spans: 6 + metricName: "process_resident_memory_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Goroutines" + spans: 6 + metricName: "go_goroutines" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Heap allocation rate" + unit: "bytes/s" + spans: 6 + metricName: "go_memstats_alloc_bytes_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "GC rate" + spans: 6 + metricName: "go_gc_duration_seconds_count" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Next GC" + unit: "bytes" + spans: 6 + metricName: "go_memstats_next_gc_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/kiali.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/kiali.yaml new file mode 100755 index 000000000..b1f011b4f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/kiali.yaml @@ -0,0 +1,44 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: kiali + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Kiali Internal Metrics + items: + - chart: + name: "API processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_api_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "route" + displayName: "Route" + - chart: + name: "Functions processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_go_function_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" + - chart: + name: "Failures" + spans: 12 + metricName: "kiali_go_function_failures_total" + dataType: "raw" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml new file mode 100755 index 000000000..2e1ed5cff --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml @@ -0,0 +1,43 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Pool Metrics + discoverOn: "jvm_buffer_total_capacity_bytes" + items: + - chart: + name: "Pool buffer memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer capacity" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_total_capacity_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer count" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_count" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml new file mode 100755 index 000000000..d64596882 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml @@ -0,0 +1,65 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live" + items: + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon" + dataType: "raw" + - chart: + name: "Loaded classes" + spans: 4 + metricName: "jvm_classes_loaded" + dataType: "raw" + + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml new file mode 100755 index 000000000..76e8d0a4a --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.1-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live_threads" + items: + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live_threads" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon_threads" + dataType: "raw" + - chart: + name: "Threads states" + spans: 4 + metricName: "jvm_threads_states_threads" + dataType: "raw" + aggregations: + - label: "state" + displayName: "State" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml new file mode 100755 index 000000000..1d4951196 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-1.1 + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:thread_count" + items: + - chart: + name: "Current loaded classes" + spans: 6 + metricName: "base:classloader_current_loaded_class_count" + dataType: "raw" + - chart: + name: "Unloaded classes" + spans: 6 + metricName: "base:classloader_total_unloaded_class_count" + dataType: "raw" + - chart: + name: "Thread count" + spans: 4 + metricName: "base:thread_count" + dataType: "raw" + - chart: + name: "Thread max count" + spans: 4 + metricName: "base:thread_max_count" + dataType: "raw" + - chart: + name: "Thread daemon count" + spans: 4 + metricName: "base:thread_daemon_count" + dataType: "raw" + - chart: + name: "Committed heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_committed_heap_bytes" + dataType: "raw" + - chart: + name: "Max heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_max_heap_bytes" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_used_heap_bytes" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml new file mode 100755 index 000000000..57ddc60ef --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml @@ -0,0 +1,38 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-x.y + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:gc_complete_scavenger_count" + items: + - chart: + name: "Young GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_young_generation_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Young GC count" + spans: 3 + metricName: "base:gc_young_generation_scavenger_count" + dataType: "raw" + - chart: + name: "Total GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_complete_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Total GC count" + spans: 3 + metricName: "base:gc_complete_scavenger_count" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/nodejs.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/nodejs.yaml new file mode 100755 index 000000000..1ffe0aa10 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/nodejs.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: nodejs + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Node.js + title: Node.js Metrics + discoverOn: "nodejs_active_handles_total" + items: + - chart: + name: "Active handles" + spans: 4 + metricName: "nodejs_active_handles_total" + dataType: "raw" + - chart: + name: "Active requests" + spans: 4 + metricName: "nodejs_active_requests_total" + dataType: "raw" + - chart: + name: "Event loop lag" + unit: "seconds" + spans: 4 + metricName: "nodejs_eventloop_lag_seconds" + dataType: "raw" + - chart: + name: "Total heap size" + unit: "bytes" + spans: 12 + metricName: "nodejs_heap_space_size_total_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Used heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_used_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Available heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_available_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/quarkus.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/quarkus.yaml new file mode 100755 index 000000000..cef5f3dce --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/quarkus.yaml @@ -0,0 +1,33 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: quarkus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Quarkus Metrics + runtime: Quarkus + items: + - chart: + name: "Thread count" + spans: 4 + metricName: "vendor:thread_count" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_heap_usage_bytes" + dataType: "raw" + - chart: + name: "Used non-heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_non_heap_usage_bytes" + dataType: "raw" + - include: "microprofile-x.y" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml new file mode 100755 index 000000000..42d87d890 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Pool Metrics + items: + - include: "micrometer-1.0.6-jvm-pool" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml new file mode 100755 index 000000000..ced3acdd9 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Metrics + items: + - include: "micrometer-1.0.6-jvm" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml new file mode 100755 index 000000000..c07016aa2 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: Tomcat Metrics + items: + - include: "tomcat" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/thorntail.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/thorntail.yaml new file mode 100755 index 000000000..6bd85e6f5 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/thorntail.yaml @@ -0,0 +1,22 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: thorntail + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Thorntail + title: Thorntail Metrics + discoverOn: "vendor:loaded_modules" + items: + - include: "microprofile-1.1" + - chart: + name: "Loaded modules" + spans: 6 + metricName: "vendor:loaded_modules" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/tomcat.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/tomcat.yaml new file mode 100755 index 000000000..9a803342f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/tomcat.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Tomcat + title: Tomcat Metrics + discoverOn: "tomcat_sessions_created_total" + items: + - chart: + name: "Sessions created" + spans: 4 + metricName: "tomcat_sessions_created_total" + dataType: "raw" + - chart: + name: "Active sessions" + spans: 4 + metricName: "tomcat_sessions_active_current" + dataType: "raw" + - chart: + name: "Sessions rejected" + spans: 4 + metricName: "tomcat_sessions_rejected_total" + dataType: "raw" + + - chart: + name: "Bytes sent" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_sent_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Bytes received" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_received_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + + - chart: + name: "Global errors" + spans: 6 + metricName: "tomcat_global_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Servlet errors" + spans: 6 + metricName: "tomcat_servlet_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-client.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-client.yaml new file mode 100755 index 000000000..2d591d6b0 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-client.yaml @@ -0,0 +1,60 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-client + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Client Metrics + discoverOn: "vertx_http_client_connections" + items: + - chart: + name: "Client response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_client_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_client_requestCount_total" + dataType: "rate" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client active connections" + spans: 6 + metricName: "vertx_http_client_connections" + dataType: "raw" + - chart: + name: "Client active websockets" + spans: 6 + metricName: "vertx_http_client_wsConnections" + dataType: "raw" + - chart: + name: "Client bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesSent" + dataType: "histogram" + - chart: + name: "Client bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml new file mode 100755 index 000000000..65f9ee2ec --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-eventbus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Eventbus Metrics + discoverOn: "vertx_eventbus_handlers" + items: + - chart: + name: "Event bus handlers" + spans: 6 + metricName: "vertx_eventbus_handlers" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus pending messages" + spans: 6 + metricName: "vertx_eventbus_pending" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus processing time" + unit: "seconds" + spans: 6 + metricName: "vertx_eventbus_processingTime_seconds" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes read" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesRead" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes written" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesWritten" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml new file mode 100755 index 000000000..2663186f3 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: JVM Metrics + items: + - include: "micrometer-1.1-jvm" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml new file mode 100755 index 000000000..f6af921b3 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Pools Metrics + discoverOn: "vertx_pool_ratio" + items: + - chart: + name: "Usage duration" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_usage_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Usage ratio" + spans: 6 + metricName: "vertx_pool_ratio" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Queue size" + spans: 6 + metricName: "vertx_pool_queue_size" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Time in queue" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_queue_delay_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Resources used" + spans: 6 + metricName: "vertx_pool_inUse" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-server.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-server.yaml new file mode 100755 index 000000000..de6b89df9 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/dashboards/vertx-server.yaml @@ -0,0 +1,62 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-server + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Server Metrics + discoverOn: "vertx_http_server_connections" + items: + - chart: + name: "Server response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_server_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_server_requestCount_total" + dataType: "rate" + aggregations: + - label: "code" + displayName: "Error code" + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server active connections" + spans: 6 + metricName: "vertx_http_server_connections" + dataType: "raw" + - chart: + name: "Server active websockets" + spans: 6 + metricName: "vertx_http_server_wsConnections" + dataType: "raw" + - chart: + name: "Server bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesSent" + dataType: "histogram" + - chart: + name: "Server bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/deployment.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/deployment.yaml new file mode 100755 index 000000000..100c57922 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/deployment.yaml @@ -0,0 +1,174 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.deployment.replicas }} + selector: + matchLabels: + {{- include "kiali-server.selectorLabels" . | nindent 6 }} + strategy: + rollingUpdate: + maxSurge: 1 + maxUnavailable: 1 + type: RollingUpdate + template: + metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 8 }} + {{- if .Values.deployment.pod_labels }} + {{- toYaml .Values.deployment.pod_labels | nindent 8 }} + {{- end }} + annotations: + {{- if .Values.server.metrics_enabled }} + prometheus.io/scrape: "true" + prometheus.io/port: {{ .Values.server.metrics_port | quote }} + {{- else }} + prometheus.io/scrape: "false" + prometheus.io/port: "" + {{- end }} + kiali.io/runtimes: go,kiali + {{- if .Values.deployment.pod_annotations }} + {{- toYaml .Values.deployment.pod_annotations | nindent 8 }} + {{- end }} + spec: + serviceAccountName: {{ include "kiali-server.fullname" . }} + {{- if .Values.deployment.priority_class_name }} + priorityClassName: {{ .Values.deployment.priority_class_name | quote }} + {{- end }} + {{- if .Values.deployment.image_pull_secrets }} + imagePullSecrets: + {{- range .Values.deployment.image_pull_secrets }} + - name: {{ . }} + {{- end }} + {{- end }} + containers: + - image: "{{ template "system_default_registry" . }}{{ .Values.deployment.repository }}:{{ .Values.deployment.tag }}" + imagePullPolicy: {{ .Values.deployment.image_pull_policy | default "Always" }} + name: {{ include "kiali-server.fullname" . }} + command: + - "/opt/kiali/kiali" + - "-config" + - "/kiali-configuration/config.yaml" + ports: + - name: api-port + containerPort: {{ .Values.server.port | default 20001 }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + containerPort: {{ .Values.server.metrics_port | default 9090 }} + {{- end }} + readinessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + livenessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + env: + - name: ACTIVE_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: LOG_LEVEL + value: "{{ include "kiali-server.logLevel" . }}" + - name: LOG_FORMAT + value: "{{ .Values.deployment.logger.log_format }}" + - name: LOG_TIME_FIELD_FORMAT + value: "{{ .Values.deployment.logger.time_field_format }}" + - name: LOG_SAMPLER_RATE + value: "{{ .Values.deployment.logger.sampler_rate }}" + volumeMounts: + {{- if .Values.web_root_override }} + - name: kiali-console + subPath: env.js + mountPath: /opt/kiali/console/env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + mountPath: "/kiali-configuration" + - name: {{ include "kiali-server.fullname" . }}-cert + mountPath: "/kiali-cert" + - name: {{ include "kiali-server.fullname" . }}-secret + mountPath: "/kiali-secret" + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + mountPath: "/kiali-cabundle" + {{- end }} + {{- if .Values.deployment.resources }} + resources: + {{- toYaml .Values.deployment.resources | nindent 10 }} + {{- end }} + volumes: + {{- if .Values.web_root_override }} + - name: kiali-console + configMap: + name: kiali-console + items: + - key: env.js + path: env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + configMap: + name: {{ include "kiali-server.fullname" . }} + - name: {{ include "kiali-server.fullname" . }}-cert + secret: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + secretName: {{ include "kiali-server.fullname" . }}-cert-secret + {{- else }} + secretName: istio.{{ include "kiali-server.fullname" . }}-service-account + {{- end }} + {{- if not (include "kiali-server.identity.cert_file" .) }} + optional: true + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-secret + secret: + secretName: {{ .Values.deployment.secret_name }} + optional: true + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + configMap: + name: {{ include "kiali-server.fullname" . }}-cabundle + {{- end }} + {{- if or (.Values.deployment.affinity.node) (or (.Values.deployment.pod) (.Values.deployment.pod_anti)) }} + affinity: + {{- if .Values.deployment.affinity.node }} + nodeAffinity: + {{- toYaml .Values.deployment.affinity.node | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod }} + podAffinity: + {{- toYaml .Values.deployment.affinity.pod | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod_anti }} + podAntiAffinity: + {{- toYaml .Values.deployment.affinity.pod_anti | nindent 10 }} + {{- end }} + {{- end }} + {{- if .Values.deployment.tolerations }} + tolerations: + {{- toYaml .Values.deployment.tolerations | nindent 8 }} + {{- end }} + {{- if .Values.deployment.node_selector }} + nodeSelector: + {{- toYaml .Values.deployment.node_selector | nindent 8 }} + {{- end }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/hpa.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/hpa.yaml new file mode 100755 index 000000000..934c4c1e9 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/hpa.yaml @@ -0,0 +1,17 @@ +{{- if .Values.deployment.hpa.spec }} +--- +apiVersion: {{ .Values.deployment.hpa.api_version }} +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "kiali-server.fullname" . }} + {{- toYaml .Values.deployment.hpa.spec | nindent 2 }} +... +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/ingress.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/ingress.yaml new file mode 100755 index 000000000..e4c98db1b --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/ingress.yaml @@ -0,0 +1,40 @@ +{{- if not (.Capabilities.APIVersions.Has "route.openshift.io/v1") }} +{{- if .Values.deployment.ingress_enabled }} +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }} + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- else }} + # For ingress-nginx versions older than 0.20.0 use secure-backends. + # (see: https://github.com/kubernetes/ingress-nginx/issues/3416#issuecomment-438247948) + # For ingress-nginx versions 0.20.0 and later use backend-protocol. + {{- if (include "kiali-server.identity.cert_file" .) }} + nginx.ingress.kubernetes.io/secure-backends: "true" + nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + {{- else }} + nginx.ingress.kubernetes.io/secure-backends: "false" + nginx.ingress.kubernetes.io/backend-protocol: "HTTP" + {{- end }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + rules: + - http: + paths: + - path: {{ include "kiali-server.server.web_root" . }} + backend: + serviceName: {{ include "kiali-server.fullname" . }} + servicePort: {{ .Values.server.port }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/oauth.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/oauth.yaml new file mode 100755 index 000000000..a178bb85e --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/oauth.yaml @@ -0,0 +1,17 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.kiali_route_url }} +--- +apiVersion: oauth.openshift.io/v1 +kind: OAuthClient +metadata: + name: {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +redirectURIs: +- {{ .Values.kiali_route_url }} +grantMethod: auto +allowAnyScope: true +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/psp.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/psp.yaml new file mode 100755 index 000000000..f891892cc --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/psp.yaml @@ -0,0 +1,67 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-psp +subjects: + - kind: ServiceAccount + name: kiali +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "kiali-server.fullname" . }}-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-controlplane.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-controlplane.yaml new file mode 100755 index 000000000..a22c76756 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-controlplane.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - secrets + verbs: + - list +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-viewer.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-viewer.yaml new file mode 100755 index 000000000..9fdd9fd1d --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role-viewer.yaml @@ -0,0 +1,97 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }}-viewer + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - get + - list + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - get + - list +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role.yaml new file mode 100755 index 000000000..8444bc753 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/role.yaml @@ -0,0 +1,108 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - patch + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - patch + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - patch + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - patch + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding-controlplane.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding-controlplane.yaml new file mode 100755 index 000000000..5a0015836 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding-controlplane.yaml @@ -0,0 +1,17 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-controlplane +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding.yaml new file mode 100755 index 000000000..1eaabd65f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/rolebinding.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + {{- if .Values.deployment.view_only_mode }} + name: {{ include "kiali-server.fullname" . }}-viewer + {{- else }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/route.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/route.yaml new file mode 100755 index 000000000..27940dc96 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/route.yaml @@ -0,0 +1,30 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.deployment.ingress_enabled }} +# As of OpenShift 4.5, need to use --disable-openapi-validation when installing via Helm +--- +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }}} + annotations: + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + tls: + termination: reencrypt + insecureEdgeTerminationPolicy: Redirect + to: + kind: Service + targetPort: {{ .Values.server.port }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/service.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/service.yaml new file mode 100755 index 000000000..9ccf4f388 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/service.yaml @@ -0,0 +1,47 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + service.beta.openshift.io/serving-cert-secret-name: {{ include "kiali-server.fullname" . }}-cert-secret + {{- end }} + kiali.io/api-spec: https://kiali.io/api + kiali.io/api-type: rest + {{- if and (not (empty .Values.server.web_fqdn)) (not (empty .Values.server.web_schema)) }} + {{- if empty .Values.server.web_port }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}{{ default "" .Values.server.web_root }} + {{- else }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}:{{ .Values.server.web_port }}{{(default "" .Values.server.web_root) }} + {{- end }} + {{- end }} + {{- if .Values.deployment.service_annotations }} + {{- toYaml .Values.deployment.service_annotations | nindent 4 }} + {{- end }} +spec: + {{- if .Values.deployment.service_type }} + type: {{ .Values.deployment.service_type }} + {{- end }} + ports: + {{- if (include "kiali-server.identity.cert_file" .) }} + - name: tcp + {{- else }} + - name: http + {{- end }} + protocol: TCP + port: {{ .Values.server.port }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + protocol: TCP + port: {{ .Values.server.metrics_port }} + {{- end }} + selector: + {{- include "kiali-server.selectorLabels" . | nindent 4 }} + {{- if .Values.deployment.additional_service_yaml }} + {{- toYaml .Values.deployment.additional_service_yaml | nindent 2 }} + {{- end }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/serviceaccount.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/serviceaccount.yaml new file mode 100755 index 000000000..9151b6f6a --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/serviceaccount.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +... diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/validate-install-crd.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/validate-install-crd.yaml new file mode 100755 index 000000000..b42eeb266 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/validate-install-crd.yaml @@ -0,0 +1,14 @@ +#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} +# {{- $found := dict -}} +# {{- set $found "monitoring.kiali.io/v1alpha1/MonitoringDashboard" false -}} +# {{- range .Capabilities.APIVersions -}} +# {{- if hasKey $found (toString .) -}} +# {{- set $found (toString .) true -}} +# {{- end -}} +# {{- end -}} +# {{- range $_, $exists := $found -}} +# {{- if (eq $exists false) -}} +# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} +# {{- end -}} +# {{- end -}} +#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/web-root-configmap.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/web-root-configmap.yaml new file mode 100755 index 000000000..970d4e4f5 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/templates/web-root-configmap.yaml @@ -0,0 +1,12 @@ +{{- if .Values.web_root_override }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: kiali-console + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + env.js: | + window.WEB_ROOT='/k8s/clusters/{{ .Values.global.cattle.clusterId }}/api/v1/namespaces/{{ .Release.Namespace }}/services/http:kiali:20001/proxy/kiali'; +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/values.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/values.yaml new file mode 100755 index 000000000..aada4e09a --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/kiali/values.yaml @@ -0,0 +1,93 @@ +nameOverride: "kiali" +fullnameOverride: "kiali" + +# This is required for "openshift" auth strategy. +# You have to know ahead of time what your Route URL will be because +# right now the helm chart can't figure this out at runtime (it would +# need to wait for the Kiali Route to be deployed and for OpenShift +# to start it up). If someone knows how to update this helm chart to +# do this, a PR would be welcome. +kiali_route_url: "" + +# rancher specific override that allows proxy access to kiali url +web_root_override: true + +# +# Settings that mimic the Kiali CR which are placed in the ConfigMap. +# Note that only those values used by the Helm Chart will be here. +# + +istio_namespace: "" # default is where Kiali is installed + +auth: + openid: {} + openshift: {} + strategy: "" + +deployment: + # This only limits what Kiali will attempt to see, but Kiali Service Account has permissions to see everything. + # For more control over what the Kial Service Account can see, use the Kiali Operator + accessible_namespaces: + - "**" + additional_service_yaml: {} + affinity: + node: {} + pod: {} + pod_anti: {} + custom_dashboards: + excludes: [''] + includes: ['*'] + hpa: + api_version: "autoscaling/v2beta2" + spec: {} + repository: rancher/mirrored-kiali-kiali + image_pull_policy: "Always" + image_pull_secrets: [] + tag: v1.32.0 + ingress_enabled: true + logger: + log_format: "text" + log_level: "info" + time_field_format: "2006-01-02T15:04:05Z07:00" + sampler_rate: "1" + node_selector: {} + override_ingress_yaml: + metadata: {} + pod_annotations: {} + pod_labels: {} + priority_class_name: "" + replicas: 1 + resources: {} + secret_name: "kiali" + service_annotations: {} + service_type: "" + tolerations: [] + version_label: v1.32.0 + view_only_mode: false + +external_services: + custom_dashboards: + enabled: true + +identity: {} + #cert_file: + #private_key_file: + +login_token: + signing_key: "" + +server: + port: 20001 + metrics_enabled: true + metrics_port: 9090 + web_root: "" + +# Common settings used among istio subcharts. +global: + # Specify rancher clusterId of external tracing config + # https://github.com/istio/istio.io/issues/4146#issuecomment-493543032 + cattle: + systemDefaultRegistry: "" + clusterId: + rbac: + pspEnabled: false diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/.helmignore b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/.helmignore new file mode 100755 index 000000000..0e8a0eb36 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/Chart.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/Chart.yaml new file mode 100755 index 000000000..6e368616d --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/Chart.yaml @@ -0,0 +1,12 @@ +annotations: + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.rancher.io/certified: rancher + catalog.rancher.io/namespace: istio-system + catalog.rancher.io/release-name: rancher-tracing +apiVersion: v1 +appVersion: 1.20.0 +description: A quick start Jaeger Tracing installation using the all-in-one demo. + This is not production qualified. Refer to https://www.jaegertracing.io/ for details. +name: tracing +version: 1.20.1 diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/README.md b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/README.md new file mode 100755 index 000000000..25534c628 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/README.md @@ -0,0 +1,5 @@ +# Jaeger + +A Rancher chart based on the Jaeger all-in-one quick installation option. This chart will allow you to trace and monitor distributed microservices. + +> **Note:** The basic all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io) documentation to determine which installation you will need for your production needs. diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_affinity.tpl b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_affinity.tpl new file mode 100755 index 000000000..bf6a9aee5 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_affinity.tpl @@ -0,0 +1,92 @@ +{{/* affinity - https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ */}} +{{- define "nodeAffinity" }} + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityRequiredDuringScheduling" . }} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityPreferredDuringScheduling" . }} +{{- end }} + +{{- define "nodeAffinityRequiredDuringScheduling" }} + nodeSelectorTerms: + - matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - {{ $key | quote }} + {{- end }} + {{- end }} + {{- $nodeSelector := default .Values.global.defaultNodeSelector .Values.nodeSelector -}} + {{- range $key, $val := $nodeSelector }} + - key: {{ $key }} + operator: In + values: + - {{ $val | quote }} + {{- end }} +{{- end }} + +{{- define "nodeAffinityPreferredDuringScheduling" }} + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - weight: {{ $val | int }} + preference: + matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + - {{ $key | quote }} + {{- end }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinity" }} +{{- if or .Values.podAntiAffinityLabelSelector .Values.podAntiAffinityTermLabelSelector}} + podAntiAffinity: + {{- if .Values.podAntiAffinityLabelSelector }} + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityRequiredDuringScheduling" . }} + {{- end }} + {{- if or .Values.podAntiAffinityTermLabelSelector}} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityPreferredDuringScheduling" . }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "podAntiAffinityRequiredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityLabelSelector }} + - labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinityPreferredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityTermLabelSelector }} + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + weight: 100 + {{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_helpers.tpl b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_helpers.tpl new file mode 100755 index 000000000..56cfa7335 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/_helpers.tpl @@ -0,0 +1,32 @@ +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "tracing.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "tracing.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/deployment.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/deployment.yaml new file mode 100755 index 000000000..25bb67fd3 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/deployment.yaml @@ -0,0 +1,86 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + selector: + matchLabels: + app: {{ .Values.provider }} + template: + metadata: + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} + annotations: + sidecar.istio.io/inject: "false" + prometheus.io/scrape: "true" + prometheus.io/port: "14269" +{{- if .Values.jaeger.podAnnotations }} +{{ toYaml .Values.jaeger.podAnnotations | indent 8 }} +{{- end }} + spec: + containers: + - name: jaeger + image: "{{ template "system_default_registry" . }}{{ .Values.jaeger.repository }}:{{ .Values.jaeger.tag }}" + imagePullPolicy: {{ .Values.global.imagePullPolicy }} + env: + {{- if eq .Values.jaeger.spanStorageType "badger" }} + - name: BADGER_EPHEMERAL + value: "false" + - name: SPAN_STORAGE_TYPE + value: "badger" + - name: BADGER_DIRECTORY_VALUE + value: "/badger/data" + - name: BADGER_DIRECTORY_KEY + value: "/badger/key" + {{- end }} + - name: COLLECTOR_ZIPKIN_HTTP_PORT + value: "9411" + - name: MEMORY_MAX_TRACES + value: "{{ .Values.jaeger.memory.max_traces }}" + - name: QUERY_BASE_PATH + value: {{ if .Values.contextPath }} {{ .Values.contextPath }} {{ else }} /{{ .Values.provider }} {{ end }} + livenessProbe: + httpGet: + path: / + port: 14269 + readinessProbe: + httpGet: + path: / + port: 14269 +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumeMounts: + - name: data + mountPath: /badger +{{- end }} + resources: +{{- if .Values.jaeger.resources }} +{{ toYaml .Values.jaeger.resources | indent 12 }} +{{- else }} +{{ toYaml .Values.global.defaultResources | indent 12 }} +{{- end }} + affinity: + {{- include "nodeAffinity" . | indent 6 }} + {{- include "podAntiAffinity" . | indent 6 }} + {{- if .Values.global.rbac.pspEnabled }} + securityContext: + runAsNonRoot: true + runAsUser: 1000 + serviceAccountName: {{ include "tracing.fullname" . }} + {{- end }} +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumes: + - name: data +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} + persistentVolumeClaim: + claimName: istio-jaeger-pvc +{{- else }} + emptyDir: {} +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/psp.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/psp.yaml new file mode 100755 index 000000000..44b230492 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/psp.yaml @@ -0,0 +1,86 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "tracing.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ include "tracing.fullname" . }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "tracing.fullname" . }} + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - emptyDir + - secret + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/pvc.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/pvc.yaml new file mode 100755 index 000000000..9b4c55e4f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/pvc.yaml @@ -0,0 +1,16 @@ +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: istio-jaeger-pvc + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} +spec: + storageClassName: {{ .Values.jaeger.storageClassName }} + accessModes: + - {{ .Values.jaeger.accessMode }} + resources: + requests: + storage: {{.Values.jaeger.persistentVolumeClaim.storage }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/service.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/service.yaml new file mode 100755 index 000000000..4210a9b5f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/templates/service.yaml @@ -0,0 +1,63 @@ +apiVersion: v1 +kind: Service +metadata: + name: tracing + namespace: {{ .Release.Namespace }} + annotations: + {{- range $key, $val := .Values.service.annotations }} + {{ $key }}: {{ $val | quote }} + {{- end }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: {{ .Values.service.type }} + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.service.externalPort }} + protocol: TCP + targetPort: 16686 + selector: + app: {{ .Values.provider }} +--- +# Jaeger implements the Zipkin API. To support swapping out the tracing backend, we use a Service named Zipkin. +apiVersion: v1 +kind: Service +metadata: + name: zipkin + namespace: {{ .Release.Namespace }} + labels: + name: zipkin + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.zipkin.queryPort }} + targetPort: {{ .Values.zipkin.queryPort }} + selector: + app: {{ .Values.provider }} +--- +apiVersion: v1 +kind: Service +metadata: + name: jaeger-collector + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: ClusterIP + ports: + - name: jaeger-collector-http + port: 14268 + targetPort: 14268 + protocol: TCP + - name: jaeger-collector-grpc + port: 14250 + targetPort: 14250 + protocol: TCP + selector: + app: {{ .Values.provider }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/values.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/values.yaml new file mode 100755 index 000000000..18ff81c3c --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/charts/tracing/values.yaml @@ -0,0 +1,44 @@ +provider: jaeger +contextPath: "" +nodeSelector: {} +podAntiAffinityLabelSelector: [] +podAntiAffinityTermLabelSelector: [] +nameOverride: "" +fullnameOverride: "" + +global: + cattle: + systemDefaultRegistry: "" + defaultResources: {} + imagePullPolicy: IfNotPresent + imagePullSecrets: [] + arch: + amd64: 2 + s390x: 2 + ppc64le: 2 + defaultNodeSelector: {} + rbac: + pspEnabled: false + +jaeger: + repository: rancher/mirrored-jaegertracing-all-in-one + tag: 1.20.0 + # spanStorageType value can be "memory" and "badger" for all-in-one image + spanStorageType: badger + resources: + requests: + cpu: 10m + persistentVolumeClaim: + enabled: false + storage: 5Gi + storageClassName: "" + accessMode: ReadWriteMany + memory: + max_traces: 50000 +zipkin: + queryPort: 9411 +service: + annotations: {} + name: http-query + type: ClusterIP + externalPort: 16686 diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/configs/istio-base.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/configs/istio-base.yaml new file mode 100755 index 000000000..7ff972e2d --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/configs/istio-base.yaml @@ -0,0 +1,89 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + addonComponents: + istiocoredns: + enabled: {{ .Values.istiocoredns.enabled }} + components: + base: + enabled: {{ .Values.base.enabled }} + cni: + enabled: {{ .Values.cni.enabled }} + egressGateways: + - enabled: {{ .Values.egressGateways.enabled }} + name: istio-egressgateway + ingressGateways: + - enabled: {{ .Values.ingressGateways.enabled }} + name: istio-ingressgateway + k8s: + service: + ports: + - name: status-port + port: 15021 + targetPort: 15021 + - name: http2 + port: 80 + targetPort: 8080 + nodePort: 31380 + - name: https + port: 443 + targetPort: 8443 + nodePort: 31390 + - name: tcp + port: 31400 + targetPort: 31400 + nodePort: 31400 + - name: tls + port: 15443 + targetPort: 15443 + istiodRemote: + enabled: {{ .Values.istiodRemote.enabled }} + pilot: + enabled: {{ .Values.pilot.enabled }} + hub: {{ .Values.systemDefaultRegistry | default "docker.io" }} + profile: default + tag: {{ .Values.tag }} + revision: {{ .Values.revision }} + meshConfig: + defaultConfig: + proxyMetadata: + {{- if .Values.dns.enabled }} + ISTIO_META_DNS_CAPTURE: "true" + {{- end }} + values: + gateways: + istio-egressgateway: + name: istio-egressgateway + type: {{ .Values.egressGateways.type }} + istio-ingressgateway: + name: istio-ingressgateway + type: {{ .Values.ingressGateways.type }} + global: + istioNamespace: {{ template "istio.namespace" . }} + proxy: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy.repository }}:{{ .Values.global.proxy.tag }} + proxy_init: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy_init.repository }}:{{ .Values.global.proxy_init.tag }} + {{- if .Values.global.defaultPodDisruptionBudget.enabled }} + defaultPodDisruptionBudget: + enabled: {{ .Values.global.defaultPodDisruptionBudget.enabled }} + {{- end }} + istiocoredns: + coreDNSImage: {{ template "system_default_registry" . }}{{ .Values.istiocoredns.image.repository }} + coreDNSPluginImage: {{ template "system_default_registry" . }}{{ .Values.istiocoredns.pluginImage.repository }}:{{ .Values.istiocoredns.pluginImage.tag }} + coreDNSTag: {{ .Values.istiocoredns.image.tag }} + {{- if .Values.pilot.enabled }} + pilot: + image: {{ template "system_default_registry" . }}{{ .Values.pilot.repository }}:{{ .Values.pilot.tag }} + {{- end }} + telemetry: + enabled: {{ .Values.telemetry.enabled }} + v2: + enabled: {{ .Values.telemetry.v2.enabled }} + {{- if .Values.cni.enabled }} + cni: + image: {{ template "system_default_registry" . }}{{ .Values.cni.repository }}:{{ .Values.cni.tag }} + excludeNamespaces: + {{- toYaml .Values.cni.excludeNamespaces | nindent 8 }} + logLevel: {{ .Values.cni.logLevel }} + {{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/requirements.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/requirements.yaml new file mode 100755 index 000000000..b60745780 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/requirements.yaml @@ -0,0 +1,17 @@ +dependencies: +- name: kiali + version: "" + repository: file://./charts/kiali + condition: kiali.enabled + tags: [] + enabled: false + importvalues: [] + alias: "" +- name: tracing + version: "" + repository: file://./charts/tracing + condition: tracing.enabled + tags: [] + enabled: false + importvalues: [] + alias: "" diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/samples/overlay-example.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/samples/overlay-example.yaml new file mode 100755 index 000000000..5cf3cf3b0 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/samples/overlay-example.yaml @@ -0,0 +1,37 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + components: + ingressGateways: + - enabled: true + name: ilb-gateway + namespace: user-ingressgateway-ns + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal + - enabled: true + name: other-gateway + namespace: cattle-istio-system + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/_helpers.tpl b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/_helpers.tpl new file mode 100755 index 000000000..3f7af953a --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/_helpers.tpl @@ -0,0 +1,12 @@ +{{/* Ensure namespace is set the same everywhere */}} +{{- define "istio.namespace" -}} + {{- .Release.Namespace | default "istio-system" -}} +{{- end -}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/admin-role.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/admin-role.yaml new file mode 100755 index 000000000..ad1313c4f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/admin-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-admin: "true" + name: istio-admin + namespace: {{ template "istio.namespace" . }} +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/base-config-map.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/base-config-map.yaml new file mode 100755 index 000000000..5323917bc --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/base-config-map.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-base + namespace: {{ template "istio.namespace" . }} +data: +{{ tpl (.Files.Glob "configs/*").AsConfig . | indent 2 }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrole.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrole.yaml new file mode 100755 index 000000000..a93b3df95 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrole.yaml @@ -0,0 +1,120 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: istio-installer +rules: +# istio groups +- apiGroups: + - authentication.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - config.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - install.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - networking.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - rbac.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - security.istio.io + resources: + - '*' + verbs: + - '*' +# k8s groups +- apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - '*' +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions.apiextensions.k8s.io + - customresourcedefinitions + verbs: + - '*' +- apiGroups: + - apps + - extensions + resources: + - daemonsets + - deployments + - deployments/finalizers + - ingresses + - replicasets + - statefulsets + verbs: + - '*' +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - '*' +- apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - get + - create +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - roles + - rolebindings + verbs: + - '*' +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - namespaces + - pods + - pods/exec + - persistentvolumeclaims + - secrets + - services + - serviceaccounts + verbs: + - '*' +- apiGroups: + - policy + resourceNames: + - istio-installer + resources: + - podsecuritypolicies + verbs: + - use diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrolebinding.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrolebinding.yaml new file mode 100755 index 000000000..9d74a0434 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/clusterrolebinding.yaml @@ -0,0 +1,12 @@ +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: istio-installer +subjects: +- kind: ServiceAccount + name: istio-installer + namespace: {{ template "istio.namespace" . }} +roleRef: + kind: ClusterRole + name: istio-installer + apiGroup: rbac.authorization.k8s.io diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/edit-role.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/edit-role.yaml new file mode 100755 index 000000000..d1059d58d --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/edit-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-edit: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-edit +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-cni-psp.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-cni-psp.yaml new file mode 100755 index 000000000..5b94c8503 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-cni-psp.yaml @@ -0,0 +1,51 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: true + fsGroup: + rule: RunAsAny + hostNetwork: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - configMap + - emptyDir + - hostPath +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: psp-istio-cni +subjects: + - kind: ServiceAccount + name: istio-cni +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - psp-istio-cni + resources: + - podsecuritypolicies + verbs: + - use +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-job.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-job.yaml new file mode 100755 index 000000000..9a13f5698 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-job.yaml @@ -0,0 +1,50 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-installer + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": post-install,post-upgrade + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +spec: + backoffLimit: 1 + template: + spec: + containers: + - name: istioctl-installer + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + - name: FORCE_INSTALL + value: {{ .Values.forceInstall | default "false" | quote }} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/run.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{- end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{- end }} + serviceAccountName: istio-installer + {{- if .Values.global.rbac.pspEnabled }} + securityContext: + runAsUser: 101 + runAsGroup: 101 + {{- end }} + restartPolicy: Never diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-psp.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-psp.yaml new file mode 100755 index 000000000..f0b5ee565 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-install-psp.yaml @@ -0,0 +1,30 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} +spec: + privileged: false + hostNetwork: false + hostIPC: false + hostPID: false + runAsUser: + rule: 'MustRunAsNonRoot' + seLinux: + rule: 'RunAsAny' + supplementalGroups: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + fsGroup: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + readOnlyRootFilesystem: false + volumes: + - 'configMap' + - 'secret' +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-psp.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-psp.yaml new file mode 100755 index 000000000..b3758b74f --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-psp.yaml @@ -0,0 +1,81 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: istio-psp +subjects: + - kind: ServiceAccount + name: istio-egressgateway-service-account + - kind: ServiceAccount + name: istio-ingressgateway-service-account + - kind: ServiceAccount + name: istio-mixer-service-account + - kind: ServiceAccount + name: istio-operator-authproxy + - kind: ServiceAccount + name: istiod-service-account + - kind: ServiceAccount + name: istio-sidecar-injector-service-account + - kind: ServiceAccount + name: istiocoredns-service-account + - kind: ServiceAccount + name: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - istio-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-uninstall-job.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-uninstall-job.yaml new file mode 100755 index 000000000..a7f156325 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/istio-uninstall-job.yaml @@ -0,0 +1,45 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-uninstaller + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": hook-succeeded +spec: + template: + spec: + containers: + - name: istioctl-uninstaller + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/uninstall_istio_system.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{ end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{ end }} + serviceAccountName: istio-installer + securityContext: + runAsUser: 101 + runAsGroup: 101 + restartPolicy: OnFailure diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/overlay-config-map.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/overlay-config-map.yaml new file mode 100755 index 000000000..287d26b2c --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/overlay-config-map.yaml @@ -0,0 +1,9 @@ +{{- if .Values.overlayFile }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-overlay + namespace: {{ template "istio.namespace" . }} +data: + overlay-config.yaml: {{ toYaml .Values.overlayFile | indent 2 }} +{{- end }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/service-monitors.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/service-monitors.yaml new file mode 100755 index 000000000..c3d60c4fc --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/service-monitors.yaml @@ -0,0 +1,51 @@ +{{- if .Values.kiali.enabled }} +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: envoy-stats-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-proxies +spec: + selector: + matchExpressions: + - {key: istio-prometheus-ignore, operator: DoesNotExist} + namespaceSelector: + any: true + jobLabel: envoy-stats + endpoints: + - path: /stats/prometheus + targetPort: 15090 + interval: 15s + relabelings: + - sourceLabels: [__meta_kubernetes_pod_container_port_name] + action: keep + regex: '.*-envoy-prom' + - action: labeldrop + regex: "__meta_kubernetes_pod_label_(.+)" + - sourceLabels: [__meta_kubernetes_namespace] + action: replace + targetLabel: namespace + - sourceLabels: [__meta_kubernetes_pod_name] + action: replace + targetLabel: pod_name +--- +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: istio-component-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-components +spec: + jobLabel: istio + targetLabels: [app] + selector: + matchExpressions: + - {key: istio, operator: In, values: [pilot]} + namespaceSelector: + any: true + endpoints: + - port: http-monitoring + interval: 15s +{{- end -}} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/serviceaccount.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/serviceaccount.yaml new file mode 100755 index 000000000..82b6cbb7e --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/view-role.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/view-role.yaml new file mode 100755 index 000000000..5947d3eba --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/templates/view-role.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-view: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-view +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: ["get", "watch", "list"] + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: ["get", "watch", "list"] diff --git a/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/values.yaml b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/values.yaml new file mode 100755 index 000000000..a641abdc1 --- /dev/null +++ b/charts/rancher-istio-1.8/rancher-istio/1.8.400-rc02/values.yaml @@ -0,0 +1,95 @@ +overlayFile: "" +tag: 1.8.4 +##Setting forceInstall: true will remove the check for istio version < 1.6.x and will not analyze your install cluster prior to install +forceInstall: false + +installer: + repository: rancher/istio-installer + tag: 1.8.4-rancher1 + +##Deprecated as of 1.8, native support provided by enabling `dns.enabled=true` +istiocoredns: + enabled: false + image: + repository: rancher/mirrored-coredns-coredns + tag: 1.6.2 + pluginImage: + repository: rancher/mirrored-istio-coredns-plugin + tag: 0.2-istio-1.1 + +##Native support for dns added in 1.8 +dns: + enabled: false + +base: + enabled: true + +cni: + enabled: false + repository: rancher/mirrored-istio-install-cni + tag: 1.8.4 + logLevel: info + excludeNamespaces: + - istio-system + - kube-system + +egressGateways: + enabled: false + type: NodePort + +ingressGateways: + enabled: true + type: NodePort + +istiodRemote: + enabled: false + +pilot: + enabled: true + repository: rancher/mirrored-istio-pilot + tag: 1.8.4 + +telemetry: + enabled: true + v2: + enabled: true + +global: + cattle: + systemDefaultRegistry: "" + proxy: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.8.4 + proxy_init: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.8.4 + defaultPodDisruptionBudget: + enabled: true + rbac: + pspEnabled: false + +# Kiali subchart from rancher-kiali-server +kiali: + enabled: true + auth: + strategy: anonymous + deployment: + ingress_enabled: false + repository: rancher/mirrored-kiali-kiali + tag: v1.32.0 + external_services: + prometheus: + custom_metrics_url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + tracing: + in_cluster_url: "http://tracing.istio-system.svc:16686/jaeger" + grafana: + in_cluster_url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + +tracing: + enabled: false + contextPath: "/jaeger" + jaeger: + repository: rancher/mirrored-jaegertracing-all-in-one + tag: 1.20.0 diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/Chart.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/Chart.yaml new file mode 100755 index 000000000..d96ffa53d --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/Chart.yaml @@ -0,0 +1,21 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/ui-component: istio +apiVersion: v1 +appVersion: 1.9.2 +description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. +icon: https://charts.rancher.io/assets/logos/istio.svg +keywords: +- networking +- infrastructure +name: rancher-istio +version: 1.9.200-rc02 diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/README.md b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/README.md new file mode 100755 index 000000000..199e45312 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/README.md @@ -0,0 +1,69 @@ +# Rancher Istio Installers + +A Rancher created chart that packages the istioctl binary to install via a helm chart. + +# Installation Requirements + +## Chart Dependencies +- rancher-kiali-server-crd chart + +# Uninstallation Requirements +To ensure rancher-istio uninstalls correctly, you must uninstall rancher-istio prior to uninstalling chart dependencies (see installation requirements for chart dependencies). This is because all definitions need to be available in order to properly build the rancher-istio objects for removal. + +If you remove dependent CRD charts prior to removing rancher-istio, you may encounter the following error:: + +`Error: uninstallation completed with 1 error(s): unable to build kubernetes objects for delete: unable to recognize "": no matches for kind "MonitoringDashboard" in version "monitoring.kiali.io/v1alpha1"` + +# Addons + +## Kiali + +Kiali allows you to view and manage your istio-based service mesh through an easy to use dashboard. + +#### Dependencies +- rancher-monitoring chart or other Prometheus installation + +This dependecy installs the required CRDs for installing Kiali. Since Kiali is bundled in with Istio in this chart, if you do not have these dependencies installed, your Istio installation will fail. If you do not plan on using Kiali, set `kiali.enabled=false` when installing Istio for a succesful installation. + +> **Note:** The following configuration options assume you have installed the dependecies for Kiali. Please ensure you have Promtheus in your cluster before proceeding. + +The Monitoring app sets `prometheus.prometheusSpec.ignoreNamespaceSelectors=false` which means all namespaces will be scraped by Prometheus by default. This ensures you can view traffic, metrics and graphs for resources deployed in other namespaces. + +To limit scraping to specific namespaces, set `prometheus.prometheusSpec.ignoreNamespaceSelectors=true` and add one of the following configurations to ensure you can continue to view traffic, metrics and graphs for your deployed resources. + +1. Add a Service Monitor or Pod Monitor in the namespace with the targets you want to scrape. +1. Add an additionalScrapeConfig to your rancher-monitoring instance to scrape all targets in all namespaces. + +#### External Services + +##### Prometheus +The `kiali.external_services.prometheus` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-prometheus.{{ .Values.namespaceOverride }}.svc:{{ prometheus.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `prometheus.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Grafana +The `kiali.external_services.grafana` url is set in the values.yaml: +``` +http://{{ .Values.nameOverride }}-grafana.{{ .Values.namespaceOverride }}.svc:{{ grafana.service.port }} +``` +The url depends on the default values for `nameOverride`, `namespaceOverride`, and `grafana.service.port` being set in your rancher-monitoring or other monitoring instance. + +##### Tracing +The `kiali.external_services.tracing` url and `.Values.tracing.contextPath` is set in the rancher-istio values.yaml: +``` +http://tracing.{{ .Values.namespaceOverride }}.svc:{{ .Values.service.externalPort }}/{{ .Values.tracing.contextPath }} +``` +The url depends on the default values for `namespaceOverride`, and `.Values.service.externalPort` being set in your rancher-tracing or other tracing instance. + +## Jaeger + +Jaeger allows you to trace and monitor distributed microservices. + +> **Note:** This addon is using the all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io/docs/1.21/getting-started/) documentation to determine which installation you will need for your production needs. + +# Installation +``` +helm install rancher-istio . --create-namespace -n istio-system +``` \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/app-readme.md b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/app-readme.md new file mode 100755 index 000000000..0e42df083 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/app-readme.md @@ -0,0 +1,45 @@ +# Rancher Istio + +Our [Istio](https://istio.io/) installer wraps the istioctl binary commands in a handy helm chart, including an overlay file option to allow complex customization. It also includes: +* **[Kiali](https://kiali.io/)**: Used for graphing traffic flow throughout the mesh +* **[Jaeger](https://www.jaegertracing.io/)**: A quick start, all-in-one installation used for tracing distributed systemm. This is not production qualified, please refer to jaeger documentation to determine which installation you may need instead. + +### Dependencies + +**Rancher Monitoring or other Prometheus installation** + +The Prometheus CRDs are required for installing Kiali which is enabled by default. If you do not have Prometheus installed your Istio installation will fail. If you do not plan on using Kiali, set `kiali.enabled=false` to bypass this requirement. + +### Customization + +**Rancher Monitoring** + +The Rancher Monitoring app sets `prometheus.prometheusSpec.ignoreNamespaceSelectors=false` which means all namespaces will be scraped by Prometheus by default. This ensures you can view traffic, metrics and graphs for resources deployed in other namespaces. + +To limit scraping to specific namespaces, set `prometheus.prometheusSpec.ignoreNamespaceSelectors=true` and add one of the following configurations to ensure you can continue to view traffic, metrics and graphs for your deployed resources. + +1. Add a Service Monitor or Pod Monitor in the namespace with the targets you want to scrape. +1. Add an additionalScrapeConfig to your rancher-monitoring instance to scrape all targets in all namespaces. + +**Custom Prometheus Installation with Kiali** + +To use a custom Monitoring installation, set the `kiali.external_services.prometheus` url in the values.yaml. This url depends on the values for `nameOverride`, `namespaceOverride`, and `prometheus.service.port` in your rancher-monitoring or other monitoring instance: +``` +http://{{ .Values.nameOverride }}-prometheus.{{ .Values.namespaceOverride }}.svc:{{ prometheus.service.port }} +``` +**Custom Grafana Installation with Kiali** + +To use a custom Grafana installation, set the `kiali.external_services.grafana` url in the values.yaml. This url depends on the values for `nameOverride`, `namespaceOverride`, and `granfa.service.port` in your rancher-monitoring or other grafana instance: +``` +http://{{ .Values.nameOverride }}-grafana.{{ .Values.namespaceOverride }}.svc:{{ grafana.service.port }} +``` +**Custom Tracing Installation with Kiali** + +To use a custom Tracing installation, set the `kiali.external_services.tracing` url and update the `.Values.tracing.contextPath` in the rancher-istio values.yaml. + +This url depends on the values for `namespaceOverride`, and `.Values.service.externalPort` in your rancher-tracing or other tracing instance.: +``` +http://tracing.{{ .Values.namespaceOverride }}.svc:{{ .Values.service.externalPort }}/{{ .Values.tracing.contextPath }} +``` + +For more information on how to use the feature, refer to our [docs](https://rancher.com/docs/rancher/v2.x/en/istio/v2.5/). diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/Chart.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/Chart.yaml new file mode 100755 index 000000000..9b6fdf385 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/Chart.yaml @@ -0,0 +1,31 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=match + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1 + catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1 + catalog.rancher.io/namespace: cattle-istio-system + catalog.rancher.io/release-name: rancher-kiali-server +apiVersion: v2 +appVersion: v1.32.0 +description: Kiali is an open source project for service mesh observability, refer + to https://www.kiali.io for details. This is installed as sub-chart with customized + values in Rancher's Istio. +home: https://github.com/kiali/kiali +icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png +keywords: +- istio +- kiali +- networking +- infrastructure +maintainers: +- email: kiali-users@googlegroups.com + name: Kiali + url: https://kiali.io +name: kiali +sources: +- https://github.com/kiali/kiali +- https://github.com/kiali/kiali-ui +- https://github.com/kiali/kiali-operator +- https://github.com/kiali/helm-charts +version: 1.32.1 diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/NOTES.txt b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/NOTES.txt new file mode 100755 index 000000000..751019401 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/NOTES.txt @@ -0,0 +1,5 @@ +Welcome to Kiali! For more details on Kiali, see: https://kiali.io + +The Kiali Server [{{ .Chart.AppVersion }}] has been installed in namespace [{{ .Release.Namespace }}]. It will be ready soon. + +(Helm: Chart=[{{ .Chart.Name }}], Release=[{{ .Release.Name }}], Version=[{{ .Chart.Version }}]) diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/_helpers.tpl b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/_helpers.tpl new file mode 100755 index 000000000..dd33bbe48 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/_helpers.tpl @@ -0,0 +1,192 @@ +{{/* vim: set filetype=mustache: */}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "kiali-server.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "kiali-server.fullname" -}} +{{- if .Values.fullnameOverride }} + {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} + {{- $name := default .Chart.Name .Values.nameOverride }} + {{- printf "%s" $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "kiali-server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Identifies the log_level with the old verbose_mode and the new log_level considered. +*/}} +{{- define "kiali-server.logLevel" -}} +{{- if .Values.deployment.verbose_mode -}} +{{- .Values.deployment.verbose_mode -}} +{{- else -}} +{{- .Values.deployment.logger.log_level -}} +{{- end -}} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "kiali-server.labels" -}} +helm.sh/chart: {{ include "kiali-server.chart" . }} +app: {{ include "kiali-server.name" . }} +{{ include "kiali-server.selectorLabels" . }} +version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +app.kubernetes.io/part-of: "kiali" +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "kiali-server.selectorLabels" -}} +app.kubernetes.io/name: {{ include "kiali-server.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Used to determine if a custom dashboard (defined in .Template.Name) should be deployed. +*/}} +{{- define "kiali-server.isDashboardEnabled" -}} +{{- if .Values.external_services.custom_dashboards.enabled }} + {{- $includere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.includes }} + {{- if $s }} + {{- if $includere }} + {{- $includere = printf "%s|^%s$" $includere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $includere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- $excludere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.excludes }} + {{- if $s }} + {{- if $excludere }} + {{- $excludere = printf "%s|^%s$" $excludere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $excludere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- if (and (mustRegexMatch (default "no-matches" $includere) (base .Template.Name)) (not (mustRegexMatch (default "no-matches" $excludere) (base .Template.Name)))) }} + {{- print "enabled" }} + {{- else }} + {{- print "" }} + {{- end }} +{{- else }} + {{- print "" }} +{{- end }} +{{- end }} + +{{/* +Determine the default login token signing key. +*/}} +{{- define "kiali-server.login_token.signing_key" -}} +{{- if .Values.login_token.signing_key }} + {{- .Values.login_token.signing_key }} +{{- else }} + {{- randAlphaNum 16 }} +{{- end }} +{{- end }} + +{{/* +Determine the default web root. +*/}} +{{- define "kiali-server.server.web_root" -}} +{{- if .Values.server.web_root }} + {{- .Values.server.web_root | trimSuffix "/" }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/" }} + {{- else }} + {{- "/kiali" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity cert file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.cert_file" -}} +{{- if hasKey .Values.identity "cert_file" }} + {{- .Values.identity.cert_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.crt" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity private key file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.private_key_file" -}} +{{- if hasKey .Values.identity "private_key_file" }} + {{- .Values.identity.private_key_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.key" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the istio namespace - default is where Kiali is installed. +*/}} +{{- define "kiali-server.istio_namespace" -}} +{{- if .Values.istio_namespace }} + {{- .Values.istio_namespace }} +{{- else }} + {{- .Release.Namespace }} +{{- end }} +{{- end }} + +{{/* +Determine the auth strategy to use - default is "token" on Kubernetes and "openshift" on OpenShift. +*/}} +{{- define "kiali-server.auth.strategy" -}} +{{- if .Values.auth.strategy }} + {{- if (and (eq .Values.auth.strategy "openshift") (not .Values.kiali_route_url)) }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or use a different auth strategy via the --set auth.strategy=... option." }} + {{- end }} + {{- .Values.auth.strategy }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- if not .Values.kiali_route_url }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or explicitly indicate another auth strategy you want via the --set auth.strategy=... option." }} + {{- end }} + {{- "openshift" }} + {{- else }} + {{- "token" }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/cabundle.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/cabundle.yaml new file mode 100755 index 000000000..7462b95a7 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/cabundle.yaml @@ -0,0 +1,13 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }}-cabundle + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + service.beta.openshift.io/inject-cabundle: "true" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/configmap.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/configmap.yaml new file mode 100755 index 000000000..b1bf53173 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/configmap.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + config.yaml: | + {{- /* Most of .Values is simply the ConfigMap - strip out the keys that are not part of the ConfigMap */}} + {{- $cm := omit .Values "nameOverride" "fullnameOverride" "kiali_route_url" }} + {{- /* The helm chart defines namespace for us, but pass it to the ConfigMap in case the server needs it */}} + {{- $_ := set $cm.deployment "namespace" .Release.Namespace }} + {{- /* Some values of the ConfigMap are generated, but might not be identical, from .Values */}} + {{- $_ := set $cm "istio_namespace" (include "kiali-server.istio_namespace" .) }} + {{- $_ := set $cm.auth "strategy" (include "kiali-server.auth.strategy" .) }} + {{- $_ := set $cm.auth.openshift "client_id_prefix" (include "kiali-server.fullname" .) }} + {{- $_ := set $cm.identity "cert_file" (include "kiali-server.identity.cert_file" .) }} + {{- $_ := set $cm.identity "private_key_file" (include "kiali-server.identity.private_key_file" .) }} + {{- $_ := set $cm.login_token "signing_key" (include "kiali-server.login_token.signing_key" .) }} + {{- $_ := set $cm.server "web_root" (include "kiali-server.server.web_root" .) }} + {{- toYaml $cm | nindent 4 }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/envoy.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/envoy.yaml new file mode 100755 index 000000000..85b402017 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/envoy.yaml @@ -0,0 +1,56 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: envoy + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Envoy Metrics + discoverOn: "envoy_server_uptime" + items: + - chart: + name: "Pods uptime" + spans: 4 + metricName: "envoy_server_uptime" + dataType: "raw" + - chart: + name: "Allocated memory" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_allocated" + dataType: "raw" + min: 0 + - chart: + name: "Heap size" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_heap_size" + dataType: "raw" + min: 0 + - chart: + name: "Upstream active connections" + spans: 6 + metricName: "envoy_cluster_upstream_cx_active" + dataType: "raw" + - chart: + name: "Upstream total requests" + spans: 6 + metricName: "envoy_cluster_upstream_rq_total" + unit: "rps" + dataType: "rate" + - chart: + name: "Downstream active connections" + spans: 6 + metricName: "envoy_listener_downstream_cx_active" + dataType: "raw" + - chart: + name: "Downstream HTTP requests" + spans: 6 + metricName: "envoy_listener_http_downstream_rq" + unit: "rps" + dataType: "rate" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/go.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/go.yaml new file mode 100755 index 000000000..2d2f42a93 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/go.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: go + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Go Metrics + runtime: Go + discoverOn: "go_info" + items: + - chart: + name: "CPU ratio" + spans: 6 + metricName: "process_cpu_seconds_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "RSS Memory" + unit: "bytes" + spans: 6 + metricName: "process_resident_memory_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Goroutines" + spans: 6 + metricName: "go_goroutines" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Heap allocation rate" + unit: "bytes/s" + spans: 6 + metricName: "go_memstats_alloc_bytes_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "GC rate" + spans: 6 + metricName: "go_gc_duration_seconds_count" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Next GC" + unit: "bytes" + spans: 6 + metricName: "go_memstats_next_gc_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/kiali.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/kiali.yaml new file mode 100755 index 000000000..b1f011b4f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/kiali.yaml @@ -0,0 +1,44 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: kiali + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Kiali Internal Metrics + items: + - chart: + name: "API processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_api_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "route" + displayName: "Route" + - chart: + name: "Functions processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_go_function_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" + - chart: + name: "Failures" + spans: 12 + metricName: "kiali_go_function_failures_total" + dataType: "raw" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml new file mode 100755 index 000000000..2e1ed5cff --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml @@ -0,0 +1,43 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Pool Metrics + discoverOn: "jvm_buffer_total_capacity_bytes" + items: + - chart: + name: "Pool buffer memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer capacity" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_total_capacity_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer count" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_count" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml new file mode 100755 index 000000000..d64596882 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.0.6-jvm.yaml @@ -0,0 +1,65 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live" + items: + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon" + dataType: "raw" + - chart: + name: "Loaded classes" + spans: 4 + metricName: "jvm_classes_loaded" + dataType: "raw" + + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml new file mode 100755 index 000000000..76e8d0a4a --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/micrometer-1.1-jvm.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.1-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live_threads" + items: + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live_threads" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon_threads" + dataType: "raw" + - chart: + name: "Threads states" + spans: 4 + metricName: "jvm_threads_states_threads" + dataType: "raw" + aggregations: + - label: "state" + displayName: "State" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml new file mode 100755 index 000000000..1d4951196 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-1.1.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-1.1 + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:thread_count" + items: + - chart: + name: "Current loaded classes" + spans: 6 + metricName: "base:classloader_current_loaded_class_count" + dataType: "raw" + - chart: + name: "Unloaded classes" + spans: 6 + metricName: "base:classloader_total_unloaded_class_count" + dataType: "raw" + - chart: + name: "Thread count" + spans: 4 + metricName: "base:thread_count" + dataType: "raw" + - chart: + name: "Thread max count" + spans: 4 + metricName: "base:thread_max_count" + dataType: "raw" + - chart: + name: "Thread daemon count" + spans: 4 + metricName: "base:thread_daemon_count" + dataType: "raw" + - chart: + name: "Committed heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_committed_heap_bytes" + dataType: "raw" + - chart: + name: "Max heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_max_heap_bytes" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_used_heap_bytes" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml new file mode 100755 index 000000000..57ddc60ef --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/microprofile-x.y.yaml @@ -0,0 +1,38 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-x.y + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:gc_complete_scavenger_count" + items: + - chart: + name: "Young GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_young_generation_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Young GC count" + spans: 3 + metricName: "base:gc_young_generation_scavenger_count" + dataType: "raw" + - chart: + name: "Total GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_complete_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Total GC count" + spans: 3 + metricName: "base:gc_complete_scavenger_count" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/nodejs.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/nodejs.yaml new file mode 100755 index 000000000..1ffe0aa10 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/nodejs.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: nodejs + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Node.js + title: Node.js Metrics + discoverOn: "nodejs_active_handles_total" + items: + - chart: + name: "Active handles" + spans: 4 + metricName: "nodejs_active_handles_total" + dataType: "raw" + - chart: + name: "Active requests" + spans: 4 + metricName: "nodejs_active_requests_total" + dataType: "raw" + - chart: + name: "Event loop lag" + unit: "seconds" + spans: 4 + metricName: "nodejs_eventloop_lag_seconds" + dataType: "raw" + - chart: + name: "Total heap size" + unit: "bytes" + spans: 12 + metricName: "nodejs_heap_space_size_total_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Used heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_used_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Available heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_available_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/quarkus.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/quarkus.yaml new file mode 100755 index 000000000..cef5f3dce --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/quarkus.yaml @@ -0,0 +1,33 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: quarkus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Quarkus Metrics + runtime: Quarkus + items: + - chart: + name: "Thread count" + spans: 4 + metricName: "vendor:thread_count" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_heap_usage_bytes" + dataType: "raw" + - chart: + name: "Used non-heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_non_heap_usage_bytes" + dataType: "raw" + - include: "microprofile-x.y" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml new file mode 100755 index 000000000..42d87d890 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm-pool.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Pool Metrics + items: + - include: "micrometer-1.0.6-jvm-pool" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml new file mode 100755 index 000000000..ced3acdd9 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Metrics + items: + - include: "micrometer-1.0.6-jvm" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml new file mode 100755 index 000000000..c07016aa2 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/springboot-tomcat.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: Tomcat Metrics + items: + - include: "tomcat" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/thorntail.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/thorntail.yaml new file mode 100755 index 000000000..6bd85e6f5 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/thorntail.yaml @@ -0,0 +1,22 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: thorntail + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Thorntail + title: Thorntail Metrics + discoverOn: "vendor:loaded_modules" + items: + - include: "microprofile-1.1" + - chart: + name: "Loaded modules" + spans: 6 + metricName: "vendor:loaded_modules" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/tomcat.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/tomcat.yaml new file mode 100755 index 000000000..9a803342f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/tomcat.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Tomcat + title: Tomcat Metrics + discoverOn: "tomcat_sessions_created_total" + items: + - chart: + name: "Sessions created" + spans: 4 + metricName: "tomcat_sessions_created_total" + dataType: "raw" + - chart: + name: "Active sessions" + spans: 4 + metricName: "tomcat_sessions_active_current" + dataType: "raw" + - chart: + name: "Sessions rejected" + spans: 4 + metricName: "tomcat_sessions_rejected_total" + dataType: "raw" + + - chart: + name: "Bytes sent" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_sent_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Bytes received" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_received_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + + - chart: + name: "Global errors" + spans: 6 + metricName: "tomcat_global_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Servlet errors" + spans: 6 + metricName: "tomcat_servlet_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-client.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-client.yaml new file mode 100755 index 000000000..2d591d6b0 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-client.yaml @@ -0,0 +1,60 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-client + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Client Metrics + discoverOn: "vertx_http_client_connections" + items: + - chart: + name: "Client response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_client_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_client_requestCount_total" + dataType: "rate" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client active connections" + spans: 6 + metricName: "vertx_http_client_connections" + dataType: "raw" + - chart: + name: "Client active websockets" + spans: 6 + metricName: "vertx_http_client_wsConnections" + dataType: "raw" + - chart: + name: "Client bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesSent" + dataType: "histogram" + - chart: + name: "Client bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml new file mode 100755 index 000000000..65f9ee2ec --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-eventbus.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-eventbus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Eventbus Metrics + discoverOn: "vertx_eventbus_handlers" + items: + - chart: + name: "Event bus handlers" + spans: 6 + metricName: "vertx_eventbus_handlers" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus pending messages" + spans: 6 + metricName: "vertx_eventbus_pending" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus processing time" + unit: "seconds" + spans: 6 + metricName: "vertx_eventbus_processingTime_seconds" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes read" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesRead" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes written" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesWritten" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml new file mode 100755 index 000000000..2663186f3 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: JVM Metrics + items: + - include: "micrometer-1.1-jvm" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml new file mode 100755 index 000000000..f6af921b3 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-pool.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Pools Metrics + discoverOn: "vertx_pool_ratio" + items: + - chart: + name: "Usage duration" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_usage_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Usage ratio" + spans: 6 + metricName: "vertx_pool_ratio" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Queue size" + spans: 6 + metricName: "vertx_pool_queue_size" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Time in queue" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_queue_delay_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Resources used" + spans: 6 + metricName: "vertx_pool_inUse" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-server.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-server.yaml new file mode 100755 index 000000000..de6b89df9 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/dashboards/vertx-server.yaml @@ -0,0 +1,62 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-server + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Server Metrics + discoverOn: "vertx_http_server_connections" + items: + - chart: + name: "Server response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_server_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_server_requestCount_total" + dataType: "rate" + aggregations: + - label: "code" + displayName: "Error code" + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server active connections" + spans: 6 + metricName: "vertx_http_server_connections" + dataType: "raw" + - chart: + name: "Server active websockets" + spans: 6 + metricName: "vertx_http_server_wsConnections" + dataType: "raw" + - chart: + name: "Server bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesSent" + dataType: "histogram" + - chart: + name: "Server bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/deployment.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/deployment.yaml new file mode 100755 index 000000000..100c57922 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/deployment.yaml @@ -0,0 +1,174 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.deployment.replicas }} + selector: + matchLabels: + {{- include "kiali-server.selectorLabels" . | nindent 6 }} + strategy: + rollingUpdate: + maxSurge: 1 + maxUnavailable: 1 + type: RollingUpdate + template: + metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 8 }} + {{- if .Values.deployment.pod_labels }} + {{- toYaml .Values.deployment.pod_labels | nindent 8 }} + {{- end }} + annotations: + {{- if .Values.server.metrics_enabled }} + prometheus.io/scrape: "true" + prometheus.io/port: {{ .Values.server.metrics_port | quote }} + {{- else }} + prometheus.io/scrape: "false" + prometheus.io/port: "" + {{- end }} + kiali.io/runtimes: go,kiali + {{- if .Values.deployment.pod_annotations }} + {{- toYaml .Values.deployment.pod_annotations | nindent 8 }} + {{- end }} + spec: + serviceAccountName: {{ include "kiali-server.fullname" . }} + {{- if .Values.deployment.priority_class_name }} + priorityClassName: {{ .Values.deployment.priority_class_name | quote }} + {{- end }} + {{- if .Values.deployment.image_pull_secrets }} + imagePullSecrets: + {{- range .Values.deployment.image_pull_secrets }} + - name: {{ . }} + {{- end }} + {{- end }} + containers: + - image: "{{ template "system_default_registry" . }}{{ .Values.deployment.repository }}:{{ .Values.deployment.tag }}" + imagePullPolicy: {{ .Values.deployment.image_pull_policy | default "Always" }} + name: {{ include "kiali-server.fullname" . }} + command: + - "/opt/kiali/kiali" + - "-config" + - "/kiali-configuration/config.yaml" + ports: + - name: api-port + containerPort: {{ .Values.server.port | default 20001 }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + containerPort: {{ .Values.server.metrics_port | default 9090 }} + {{- end }} + readinessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + livenessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + env: + - name: ACTIVE_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: LOG_LEVEL + value: "{{ include "kiali-server.logLevel" . }}" + - name: LOG_FORMAT + value: "{{ .Values.deployment.logger.log_format }}" + - name: LOG_TIME_FIELD_FORMAT + value: "{{ .Values.deployment.logger.time_field_format }}" + - name: LOG_SAMPLER_RATE + value: "{{ .Values.deployment.logger.sampler_rate }}" + volumeMounts: + {{- if .Values.web_root_override }} + - name: kiali-console + subPath: env.js + mountPath: /opt/kiali/console/env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + mountPath: "/kiali-configuration" + - name: {{ include "kiali-server.fullname" . }}-cert + mountPath: "/kiali-cert" + - name: {{ include "kiali-server.fullname" . }}-secret + mountPath: "/kiali-secret" + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + mountPath: "/kiali-cabundle" + {{- end }} + {{- if .Values.deployment.resources }} + resources: + {{- toYaml .Values.deployment.resources | nindent 10 }} + {{- end }} + volumes: + {{- if .Values.web_root_override }} + - name: kiali-console + configMap: + name: kiali-console + items: + - key: env.js + path: env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + configMap: + name: {{ include "kiali-server.fullname" . }} + - name: {{ include "kiali-server.fullname" . }}-cert + secret: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + secretName: {{ include "kiali-server.fullname" . }}-cert-secret + {{- else }} + secretName: istio.{{ include "kiali-server.fullname" . }}-service-account + {{- end }} + {{- if not (include "kiali-server.identity.cert_file" .) }} + optional: true + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-secret + secret: + secretName: {{ .Values.deployment.secret_name }} + optional: true + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + configMap: + name: {{ include "kiali-server.fullname" . }}-cabundle + {{- end }} + {{- if or (.Values.deployment.affinity.node) (or (.Values.deployment.pod) (.Values.deployment.pod_anti)) }} + affinity: + {{- if .Values.deployment.affinity.node }} + nodeAffinity: + {{- toYaml .Values.deployment.affinity.node | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod }} + podAffinity: + {{- toYaml .Values.deployment.affinity.pod | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod_anti }} + podAntiAffinity: + {{- toYaml .Values.deployment.affinity.pod_anti | nindent 10 }} + {{- end }} + {{- end }} + {{- if .Values.deployment.tolerations }} + tolerations: + {{- toYaml .Values.deployment.tolerations | nindent 8 }} + {{- end }} + {{- if .Values.deployment.node_selector }} + nodeSelector: + {{- toYaml .Values.deployment.node_selector | nindent 8 }} + {{- end }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/hpa.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/hpa.yaml new file mode 100755 index 000000000..934c4c1e9 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/hpa.yaml @@ -0,0 +1,17 @@ +{{- if .Values.deployment.hpa.spec }} +--- +apiVersion: {{ .Values.deployment.hpa.api_version }} +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "kiali-server.fullname" . }} + {{- toYaml .Values.deployment.hpa.spec | nindent 2 }} +... +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/ingress.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/ingress.yaml new file mode 100755 index 000000000..e4c98db1b --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/ingress.yaml @@ -0,0 +1,40 @@ +{{- if not (.Capabilities.APIVersions.Has "route.openshift.io/v1") }} +{{- if .Values.deployment.ingress_enabled }} +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }} + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- else }} + # For ingress-nginx versions older than 0.20.0 use secure-backends. + # (see: https://github.com/kubernetes/ingress-nginx/issues/3416#issuecomment-438247948) + # For ingress-nginx versions 0.20.0 and later use backend-protocol. + {{- if (include "kiali-server.identity.cert_file" .) }} + nginx.ingress.kubernetes.io/secure-backends: "true" + nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + {{- else }} + nginx.ingress.kubernetes.io/secure-backends: "false" + nginx.ingress.kubernetes.io/backend-protocol: "HTTP" + {{- end }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + rules: + - http: + paths: + - path: {{ include "kiali-server.server.web_root" . }} + backend: + serviceName: {{ include "kiali-server.fullname" . }} + servicePort: {{ .Values.server.port }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/oauth.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/oauth.yaml new file mode 100755 index 000000000..a178bb85e --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/oauth.yaml @@ -0,0 +1,17 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.kiali_route_url }} +--- +apiVersion: oauth.openshift.io/v1 +kind: OAuthClient +metadata: + name: {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +redirectURIs: +- {{ .Values.kiali_route_url }} +grantMethod: auto +allowAnyScope: true +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/psp.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/psp.yaml new file mode 100755 index 000000000..f891892cc --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/psp.yaml @@ -0,0 +1,67 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-psp +subjects: + - kind: ServiceAccount + name: kiali +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "kiali-server.fullname" . }}-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-controlplane.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-controlplane.yaml new file mode 100755 index 000000000..a22c76756 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-controlplane.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - secrets + verbs: + - list +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-viewer.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-viewer.yaml new file mode 100755 index 000000000..9fdd9fd1d --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role-viewer.yaml @@ -0,0 +1,97 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }}-viewer + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - get + - list + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - get + - list +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role.yaml new file mode 100755 index 000000000..8444bc753 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/role.yaml @@ -0,0 +1,108 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - patch + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - patch + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - patch + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - patch + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding-controlplane.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding-controlplane.yaml new file mode 100755 index 000000000..5a0015836 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding-controlplane.yaml @@ -0,0 +1,17 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-controlplane +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding.yaml new file mode 100755 index 000000000..1eaabd65f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/rolebinding.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + {{- if .Values.deployment.view_only_mode }} + name: {{ include "kiali-server.fullname" . }}-viewer + {{- else }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/route.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/route.yaml new file mode 100755 index 000000000..27940dc96 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/route.yaml @@ -0,0 +1,30 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.deployment.ingress_enabled }} +# As of OpenShift 4.5, need to use --disable-openapi-validation when installing via Helm +--- +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }}} + annotations: + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + tls: + termination: reencrypt + insecureEdgeTerminationPolicy: Redirect + to: + kind: Service + targetPort: {{ .Values.server.port }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/service.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/service.yaml new file mode 100755 index 000000000..9ccf4f388 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/service.yaml @@ -0,0 +1,47 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + service.beta.openshift.io/serving-cert-secret-name: {{ include "kiali-server.fullname" . }}-cert-secret + {{- end }} + kiali.io/api-spec: https://kiali.io/api + kiali.io/api-type: rest + {{- if and (not (empty .Values.server.web_fqdn)) (not (empty .Values.server.web_schema)) }} + {{- if empty .Values.server.web_port }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}{{ default "" .Values.server.web_root }} + {{- else }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}:{{ .Values.server.web_port }}{{(default "" .Values.server.web_root) }} + {{- end }} + {{- end }} + {{- if .Values.deployment.service_annotations }} + {{- toYaml .Values.deployment.service_annotations | nindent 4 }} + {{- end }} +spec: + {{- if .Values.deployment.service_type }} + type: {{ .Values.deployment.service_type }} + {{- end }} + ports: + {{- if (include "kiali-server.identity.cert_file" .) }} + - name: tcp + {{- else }} + - name: http + {{- end }} + protocol: TCP + port: {{ .Values.server.port }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + protocol: TCP + port: {{ .Values.server.metrics_port }} + {{- end }} + selector: + {{- include "kiali-server.selectorLabels" . | nindent 4 }} + {{- if .Values.deployment.additional_service_yaml }} + {{- toYaml .Values.deployment.additional_service_yaml | nindent 2 }} + {{- end }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/serviceaccount.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/serviceaccount.yaml new file mode 100755 index 000000000..9151b6f6a --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/serviceaccount.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +... diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/validate-install-crd.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/validate-install-crd.yaml new file mode 100755 index 000000000..b42eeb266 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/validate-install-crd.yaml @@ -0,0 +1,14 @@ +#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} +# {{- $found := dict -}} +# {{- set $found "monitoring.kiali.io/v1alpha1/MonitoringDashboard" false -}} +# {{- range .Capabilities.APIVersions -}} +# {{- if hasKey $found (toString .) -}} +# {{- set $found (toString .) true -}} +# {{- end -}} +# {{- end -}} +# {{- range $_, $exists := $found -}} +# {{- if (eq $exists false) -}} +# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} +# {{- end -}} +# {{- end -}} +#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/web-root-configmap.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/web-root-configmap.yaml new file mode 100755 index 000000000..970d4e4f5 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/templates/web-root-configmap.yaml @@ -0,0 +1,12 @@ +{{- if .Values.web_root_override }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: kiali-console + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + env.js: | + window.WEB_ROOT='/k8s/clusters/{{ .Values.global.cattle.clusterId }}/api/v1/namespaces/{{ .Release.Namespace }}/services/http:kiali:20001/proxy/kiali'; +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/values.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/values.yaml new file mode 100755 index 000000000..aada4e09a --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/kiali/values.yaml @@ -0,0 +1,93 @@ +nameOverride: "kiali" +fullnameOverride: "kiali" + +# This is required for "openshift" auth strategy. +# You have to know ahead of time what your Route URL will be because +# right now the helm chart can't figure this out at runtime (it would +# need to wait for the Kiali Route to be deployed and for OpenShift +# to start it up). If someone knows how to update this helm chart to +# do this, a PR would be welcome. +kiali_route_url: "" + +# rancher specific override that allows proxy access to kiali url +web_root_override: true + +# +# Settings that mimic the Kiali CR which are placed in the ConfigMap. +# Note that only those values used by the Helm Chart will be here. +# + +istio_namespace: "" # default is where Kiali is installed + +auth: + openid: {} + openshift: {} + strategy: "" + +deployment: + # This only limits what Kiali will attempt to see, but Kiali Service Account has permissions to see everything. + # For more control over what the Kial Service Account can see, use the Kiali Operator + accessible_namespaces: + - "**" + additional_service_yaml: {} + affinity: + node: {} + pod: {} + pod_anti: {} + custom_dashboards: + excludes: [''] + includes: ['*'] + hpa: + api_version: "autoscaling/v2beta2" + spec: {} + repository: rancher/mirrored-kiali-kiali + image_pull_policy: "Always" + image_pull_secrets: [] + tag: v1.32.0 + ingress_enabled: true + logger: + log_format: "text" + log_level: "info" + time_field_format: "2006-01-02T15:04:05Z07:00" + sampler_rate: "1" + node_selector: {} + override_ingress_yaml: + metadata: {} + pod_annotations: {} + pod_labels: {} + priority_class_name: "" + replicas: 1 + resources: {} + secret_name: "kiali" + service_annotations: {} + service_type: "" + tolerations: [] + version_label: v1.32.0 + view_only_mode: false + +external_services: + custom_dashboards: + enabled: true + +identity: {} + #cert_file: + #private_key_file: + +login_token: + signing_key: "" + +server: + port: 20001 + metrics_enabled: true + metrics_port: 9090 + web_root: "" + +# Common settings used among istio subcharts. +global: + # Specify rancher clusterId of external tracing config + # https://github.com/istio/istio.io/issues/4146#issuecomment-493543032 + cattle: + systemDefaultRegistry: "" + clusterId: + rbac: + pspEnabled: false diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/.helmignore b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/.helmignore new file mode 100755 index 000000000..0e8a0eb36 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/.helmignore @@ -0,0 +1,23 @@ +# Patterns to ignore when building packages. +# This supports shell glob matching, relative path matching, and +# negation (prefixed with !). Only one pattern per line. +.DS_Store +# Common VCS dirs +.git/ +.gitignore +.bzr/ +.bzrignore +.hg/ +.hgignore +.svn/ +# Common backup files +*.swp +*.bak +*.tmp +*.orig +*~ +# Various IDEs +.project +.idea/ +*.tmproj +.vscode/ diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/Chart.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/Chart.yaml new file mode 100755 index 000000000..6e368616d --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/Chart.yaml @@ -0,0 +1,12 @@ +annotations: + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.rancher.io/certified: rancher + catalog.rancher.io/namespace: istio-system + catalog.rancher.io/release-name: rancher-tracing +apiVersion: v1 +appVersion: 1.20.0 +description: A quick start Jaeger Tracing installation using the all-in-one demo. + This is not production qualified. Refer to https://www.jaegertracing.io/ for details. +name: tracing +version: 1.20.1 diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/README.md b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/README.md new file mode 100755 index 000000000..25534c628 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/README.md @@ -0,0 +1,5 @@ +# Jaeger + +A Rancher chart based on the Jaeger all-in-one quick installation option. This chart will allow you to trace and monitor distributed microservices. + +> **Note:** The basic all-in-one Jaeger installation which is not qualified for production. Use the [Jaeger Tracing](https://www.jaegertracing.io) documentation to determine which installation you will need for your production needs. diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_affinity.tpl b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_affinity.tpl new file mode 100755 index 000000000..bf6a9aee5 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_affinity.tpl @@ -0,0 +1,92 @@ +{{/* affinity - https://kubernetes.io/docs/concepts/configuration/assign-pod-node/ */}} +{{- define "nodeAffinity" }} + nodeAffinity: + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityRequiredDuringScheduling" . }} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "nodeAffinityPreferredDuringScheduling" . }} +{{- end }} + +{{- define "nodeAffinityRequiredDuringScheduling" }} + nodeSelectorTerms: + - matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - {{ $key | quote }} + {{- end }} + {{- end }} + {{- $nodeSelector := default .Values.global.defaultNodeSelector .Values.nodeSelector -}} + {{- range $key, $val := $nodeSelector }} + - key: {{ $key }} + operator: In + values: + - {{ $val | quote }} + {{- end }} +{{- end }} + +{{- define "nodeAffinityPreferredDuringScheduling" }} + {{- range $key, $val := .Values.global.arch }} + {{- if gt ($val | int) 0 }} + - weight: {{ $val | int }} + preference: + matchExpressions: + - key: beta.kubernetes.io/arch + operator: In + values: + - {{ $key | quote }} + {{- end }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinity" }} +{{- if or .Values.podAntiAffinityLabelSelector .Values.podAntiAffinityTermLabelSelector}} + podAntiAffinity: + {{- if .Values.podAntiAffinityLabelSelector }} + requiredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityRequiredDuringScheduling" . }} + {{- end }} + {{- if or .Values.podAntiAffinityTermLabelSelector}} + preferredDuringSchedulingIgnoredDuringExecution: + {{- include "podAntiAffinityPreferredDuringScheduling" . }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "podAntiAffinityRequiredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityLabelSelector }} + - labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + {{- end }} +{{- end }} + +{{- define "podAntiAffinityPreferredDuringScheduling" }} + {{- range $index, $item := .Values.podAntiAffinityTermLabelSelector }} + - podAffinityTerm: + labelSelector: + matchExpressions: + - key: {{ $item.key }} + operator: {{ $item.operator }} + {{- if $item.values }} + values: + {{- $vals := split "," $item.values }} + {{- range $i, $v := $vals }} + - {{ $v | quote }} + {{- end }} + {{- end }} + topologyKey: {{ $item.topologyKey }} + weight: 100 + {{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_helpers.tpl b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_helpers.tpl new file mode 100755 index 000000000..56cfa7335 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/_helpers.tpl @@ -0,0 +1,32 @@ +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "tracing.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" -}} +{{- end -}} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "tracing.fullname" -}} +{{- if .Values.fullnameOverride -}} +{{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- $name := default .Chart.Name .Values.nameOverride -}} +{{- if contains $name .Release.Name -}} +{{- .Release.Name | trunc 63 | trimSuffix "-" -}} +{{- else -}} +{{- printf "%s-%s" .Release.Name $name | trunc 63 | trimSuffix "-" -}} +{{- end -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/deployment.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/deployment.yaml new file mode 100755 index 000000000..25bb67fd3 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/deployment.yaml @@ -0,0 +1,86 @@ +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + selector: + matchLabels: + app: {{ .Values.provider }} + template: + metadata: + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} + annotations: + sidecar.istio.io/inject: "false" + prometheus.io/scrape: "true" + prometheus.io/port: "14269" +{{- if .Values.jaeger.podAnnotations }} +{{ toYaml .Values.jaeger.podAnnotations | indent 8 }} +{{- end }} + spec: + containers: + - name: jaeger + image: "{{ template "system_default_registry" . }}{{ .Values.jaeger.repository }}:{{ .Values.jaeger.tag }}" + imagePullPolicy: {{ .Values.global.imagePullPolicy }} + env: + {{- if eq .Values.jaeger.spanStorageType "badger" }} + - name: BADGER_EPHEMERAL + value: "false" + - name: SPAN_STORAGE_TYPE + value: "badger" + - name: BADGER_DIRECTORY_VALUE + value: "/badger/data" + - name: BADGER_DIRECTORY_KEY + value: "/badger/key" + {{- end }} + - name: COLLECTOR_ZIPKIN_HTTP_PORT + value: "9411" + - name: MEMORY_MAX_TRACES + value: "{{ .Values.jaeger.memory.max_traces }}" + - name: QUERY_BASE_PATH + value: {{ if .Values.contextPath }} {{ .Values.contextPath }} {{ else }} /{{ .Values.provider }} {{ end }} + livenessProbe: + httpGet: + path: / + port: 14269 + readinessProbe: + httpGet: + path: / + port: 14269 +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumeMounts: + - name: data + mountPath: /badger +{{- end }} + resources: +{{- if .Values.jaeger.resources }} +{{ toYaml .Values.jaeger.resources | indent 12 }} +{{- else }} +{{ toYaml .Values.global.defaultResources | indent 12 }} +{{- end }} + affinity: + {{- include "nodeAffinity" . | indent 6 }} + {{- include "podAntiAffinity" . | indent 6 }} + {{- if .Values.global.rbac.pspEnabled }} + securityContext: + runAsNonRoot: true + runAsUser: 1000 + serviceAccountName: {{ include "tracing.fullname" . }} + {{- end }} +{{- if eq .Values.jaeger.spanStorageType "badger" }} + volumes: + - name: data +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} + persistentVolumeClaim: + claimName: istio-jaeger-pvc +{{- else }} + emptyDir: {} +{{- end }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/psp.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/psp.yaml new file mode 100755 index 000000000..44b230492 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/psp.yaml @@ -0,0 +1,86 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "tracing.fullname" . }} +subjects: + - kind: ServiceAccount + name: {{ include "tracing.fullname" . }} +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "tracing.fullname" . }} + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "tracing.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - emptyDir + - secret + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/pvc.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/pvc.yaml new file mode 100755 index 000000000..9b4c55e4f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/pvc.yaml @@ -0,0 +1,16 @@ +{{- if .Values.jaeger.persistentVolumeClaim.enabled }} +kind: PersistentVolumeClaim +apiVersion: v1 +metadata: + name: istio-jaeger-pvc + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} +spec: + storageClassName: {{ .Values.jaeger.storageClassName }} + accessModes: + - {{ .Values.jaeger.accessMode }} + resources: + requests: + storage: {{.Values.jaeger.persistentVolumeClaim.storage }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/service.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/service.yaml new file mode 100755 index 000000000..4210a9b5f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/templates/service.yaml @@ -0,0 +1,63 @@ +apiVersion: v1 +kind: Service +metadata: + name: tracing + namespace: {{ .Release.Namespace }} + annotations: + {{- range $key, $val := .Values.service.annotations }} + {{ $key }}: {{ $val | quote }} + {{- end }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: {{ .Values.service.type }} + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.service.externalPort }} + protocol: TCP + targetPort: 16686 + selector: + app: {{ .Values.provider }} +--- +# Jaeger implements the Zipkin API. To support swapping out the tracing backend, we use a Service named Zipkin. +apiVersion: v1 +kind: Service +metadata: + name: zipkin + namespace: {{ .Release.Namespace }} + labels: + name: zipkin + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + ports: + - name: {{ .Values.service.name }} + port: {{ .Values.zipkin.queryPort }} + targetPort: {{ .Values.zipkin.queryPort }} + selector: + app: {{ .Values.provider }} +--- +apiVersion: v1 +kind: Service +metadata: + name: jaeger-collector + namespace: {{ .Release.Namespace }} + labels: + app: {{ .Values.provider }} + heritage: {{ .Release.Service }} + release: {{ .Release.Name }} +spec: + type: ClusterIP + ports: + - name: jaeger-collector-http + port: 14268 + targetPort: 14268 + protocol: TCP + - name: jaeger-collector-grpc + port: 14250 + targetPort: 14250 + protocol: TCP + selector: + app: {{ .Values.provider }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/values.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/values.yaml new file mode 100755 index 000000000..18ff81c3c --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/charts/tracing/values.yaml @@ -0,0 +1,44 @@ +provider: jaeger +contextPath: "" +nodeSelector: {} +podAntiAffinityLabelSelector: [] +podAntiAffinityTermLabelSelector: [] +nameOverride: "" +fullnameOverride: "" + +global: + cattle: + systemDefaultRegistry: "" + defaultResources: {} + imagePullPolicy: IfNotPresent + imagePullSecrets: [] + arch: + amd64: 2 + s390x: 2 + ppc64le: 2 + defaultNodeSelector: {} + rbac: + pspEnabled: false + +jaeger: + repository: rancher/mirrored-jaegertracing-all-in-one + tag: 1.20.0 + # spanStorageType value can be "memory" and "badger" for all-in-one image + spanStorageType: badger + resources: + requests: + cpu: 10m + persistentVolumeClaim: + enabled: false + storage: 5Gi + storageClassName: "" + accessMode: ReadWriteMany + memory: + max_traces: 50000 +zipkin: + queryPort: 9411 +service: + annotations: {} + name: http-query + type: ClusterIP + externalPort: 16686 diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/configs/istio-base.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/configs/istio-base.yaml new file mode 100755 index 000000000..7ff972e2d --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/configs/istio-base.yaml @@ -0,0 +1,89 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + addonComponents: + istiocoredns: + enabled: {{ .Values.istiocoredns.enabled }} + components: + base: + enabled: {{ .Values.base.enabled }} + cni: + enabled: {{ .Values.cni.enabled }} + egressGateways: + - enabled: {{ .Values.egressGateways.enabled }} + name: istio-egressgateway + ingressGateways: + - enabled: {{ .Values.ingressGateways.enabled }} + name: istio-ingressgateway + k8s: + service: + ports: + - name: status-port + port: 15021 + targetPort: 15021 + - name: http2 + port: 80 + targetPort: 8080 + nodePort: 31380 + - name: https + port: 443 + targetPort: 8443 + nodePort: 31390 + - name: tcp + port: 31400 + targetPort: 31400 + nodePort: 31400 + - name: tls + port: 15443 + targetPort: 15443 + istiodRemote: + enabled: {{ .Values.istiodRemote.enabled }} + pilot: + enabled: {{ .Values.pilot.enabled }} + hub: {{ .Values.systemDefaultRegistry | default "docker.io" }} + profile: default + tag: {{ .Values.tag }} + revision: {{ .Values.revision }} + meshConfig: + defaultConfig: + proxyMetadata: + {{- if .Values.dns.enabled }} + ISTIO_META_DNS_CAPTURE: "true" + {{- end }} + values: + gateways: + istio-egressgateway: + name: istio-egressgateway + type: {{ .Values.egressGateways.type }} + istio-ingressgateway: + name: istio-ingressgateway + type: {{ .Values.ingressGateways.type }} + global: + istioNamespace: {{ template "istio.namespace" . }} + proxy: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy.repository }}:{{ .Values.global.proxy.tag }} + proxy_init: + image: {{ template "system_default_registry" . }}{{ .Values.global.proxy_init.repository }}:{{ .Values.global.proxy_init.tag }} + {{- if .Values.global.defaultPodDisruptionBudget.enabled }} + defaultPodDisruptionBudget: + enabled: {{ .Values.global.defaultPodDisruptionBudget.enabled }} + {{- end }} + istiocoredns: + coreDNSImage: {{ template "system_default_registry" . }}{{ .Values.istiocoredns.image.repository }} + coreDNSPluginImage: {{ template "system_default_registry" . }}{{ .Values.istiocoredns.pluginImage.repository }}:{{ .Values.istiocoredns.pluginImage.tag }} + coreDNSTag: {{ .Values.istiocoredns.image.tag }} + {{- if .Values.pilot.enabled }} + pilot: + image: {{ template "system_default_registry" . }}{{ .Values.pilot.repository }}:{{ .Values.pilot.tag }} + {{- end }} + telemetry: + enabled: {{ .Values.telemetry.enabled }} + v2: + enabled: {{ .Values.telemetry.v2.enabled }} + {{- if .Values.cni.enabled }} + cni: + image: {{ template "system_default_registry" . }}{{ .Values.cni.repository }}:{{ .Values.cni.tag }} + excludeNamespaces: + {{- toYaml .Values.cni.excludeNamespaces | nindent 8 }} + logLevel: {{ .Values.cni.logLevel }} + {{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/requirements.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/requirements.yaml new file mode 100755 index 000000000..b60745780 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/requirements.yaml @@ -0,0 +1,17 @@ +dependencies: +- name: kiali + version: "" + repository: file://./charts/kiali + condition: kiali.enabled + tags: [] + enabled: false + importvalues: [] + alias: "" +- name: tracing + version: "" + repository: file://./charts/tracing + condition: tracing.enabled + tags: [] + enabled: false + importvalues: [] + alias: "" diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/samples/overlay-example.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/samples/overlay-example.yaml new file mode 100755 index 000000000..5cf3cf3b0 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/samples/overlay-example.yaml @@ -0,0 +1,37 @@ +apiVersion: install.istio.io/v1alpha1 +kind: IstioOperator +spec: + components: + ingressGateways: + - enabled: true + name: ilb-gateway + namespace: user-ingressgateway-ns + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal + - enabled: true + name: other-gateway + namespace: cattle-istio-system + k8s: + resources: + requests: + cpu: 200m + service: + ports: + - name: tcp-citadel-grpc-tls + port: 8060 + targetPort: 8060 + - name: tcp-dns + port: 5353 + serviceAnnotations: + cloud.google.com/load-balancer-type: internal diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/_helpers.tpl b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/_helpers.tpl new file mode 100755 index 000000000..3f7af953a --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/_helpers.tpl @@ -0,0 +1,12 @@ +{{/* Ensure namespace is set the same everywhere */}} +{{- define "istio.namespace" -}} + {{- .Release.Namespace | default "istio-system" -}} +{{- end -}} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/admin-role.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/admin-role.yaml new file mode 100755 index 000000000..ad1313c4f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/admin-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-admin: "true" + name: istio-admin + namespace: {{ template "istio.namespace" . }} +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/base-config-map.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/base-config-map.yaml new file mode 100755 index 000000000..5323917bc --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/base-config-map.yaml @@ -0,0 +1,7 @@ +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-base + namespace: {{ template "istio.namespace" . }} +data: +{{ tpl (.Files.Glob "configs/*").AsConfig . | indent 2 }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrole.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrole.yaml new file mode 100755 index 000000000..a93b3df95 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrole.yaml @@ -0,0 +1,120 @@ +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: istio-installer +rules: +# istio groups +- apiGroups: + - authentication.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - config.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - install.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - networking.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - rbac.istio.io + resources: + - '*' + verbs: + - '*' +- apiGroups: + - security.istio.io + resources: + - '*' + verbs: + - '*' +# k8s groups +- apiGroups: + - admissionregistration.k8s.io + resources: + - mutatingwebhookconfigurations + - validatingwebhookconfigurations + verbs: + - '*' +- apiGroups: + - apiextensions.k8s.io + resources: + - customresourcedefinitions.apiextensions.k8s.io + - customresourcedefinitions + verbs: + - '*' +- apiGroups: + - apps + - extensions + resources: + - daemonsets + - deployments + - deployments/finalizers + - ingresses + - replicasets + - statefulsets + verbs: + - '*' +- apiGroups: + - autoscaling + resources: + - horizontalpodautoscalers + verbs: + - '*' +- apiGroups: + - monitoring.coreos.com + resources: + - servicemonitors + verbs: + - get + - create +- apiGroups: + - policy + resources: + - poddisruptionbudgets + verbs: + - '*' +- apiGroups: + - rbac.authorization.k8s.io + resources: + - clusterrolebindings + - clusterroles + - roles + - rolebindings + verbs: + - '*' +- apiGroups: + - "" + resources: + - configmaps + - endpoints + - events + - namespaces + - pods + - pods/exec + - persistentvolumeclaims + - secrets + - services + - serviceaccounts + verbs: + - '*' +- apiGroups: + - policy + resourceNames: + - istio-installer + resources: + - podsecuritypolicies + verbs: + - use diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrolebinding.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrolebinding.yaml new file mode 100755 index 000000000..9d74a0434 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/clusterrolebinding.yaml @@ -0,0 +1,12 @@ +kind: ClusterRoleBinding +apiVersion: rbac.authorization.k8s.io/v1 +metadata: + name: istio-installer +subjects: +- kind: ServiceAccount + name: istio-installer + namespace: {{ template "istio.namespace" . }} +roleRef: + kind: ClusterRole + name: istio-installer + apiGroup: rbac.authorization.k8s.io diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/edit-role.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/edit-role.yaml new file mode 100755 index 000000000..d1059d58d --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/edit-role.yaml @@ -0,0 +1,43 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-edit: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-edit +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: + - '*' + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: + - '*' diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-cni-psp.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-cni-psp.yaml new file mode 100755 index 000000000..5b94c8503 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-cni-psp.yaml @@ -0,0 +1,51 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: true + fsGroup: + rule: RunAsAny + hostNetwork: true + runAsUser: + rule: RunAsAny + seLinux: + rule: RunAsAny + supplementalGroups: + rule: RunAsAny + volumes: + - secret + - configMap + - emptyDir + - hostPath +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: psp-istio-cni +subjects: + - kind: ServiceAccount + name: istio-cni +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: psp-istio-cni + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - psp-istio-cni + resources: + - podsecuritypolicies + verbs: + - use +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-job.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-job.yaml new file mode 100755 index 000000000..9a13f5698 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-job.yaml @@ -0,0 +1,50 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-installer + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": post-install,post-upgrade + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": before-hook-creation,hook-succeeded +spec: + backoffLimit: 1 + template: + spec: + containers: + - name: istioctl-installer + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + - name: FORCE_INSTALL + value: {{ .Values.forceInstall | default "false" | quote }} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/run.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{- end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{- end }} + serviceAccountName: istio-installer + {{- if .Values.global.rbac.pspEnabled }} + securityContext: + runAsUser: 101 + runAsGroup: 101 + {{- end }} + restartPolicy: Never diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-psp.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-psp.yaml new file mode 100755 index 000000000..f0b5ee565 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-install-psp.yaml @@ -0,0 +1,30 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} +spec: + privileged: false + hostNetwork: false + hostIPC: false + hostPID: false + runAsUser: + rule: 'MustRunAsNonRoot' + seLinux: + rule: 'RunAsAny' + supplementalGroups: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + fsGroup: + rule: 'MustRunAs' + ranges: + - min: 1 + max: 65535 + readOnlyRootFilesystem: false + volumes: + - 'configMap' + - 'secret' +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-psp.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-psp.yaml new file mode 100755 index 000000000..b3758b74f --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-psp.yaml @@ -0,0 +1,81 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: istio-psp +subjects: + - kind: ServiceAccount + name: istio-egressgateway-service-account + - kind: ServiceAccount + name: istio-ingressgateway-service-account + - kind: ServiceAccount + name: istio-mixer-service-account + - kind: ServiceAccount + name: istio-operator-authproxy + - kind: ServiceAccount + name: istiod-service-account + - kind: ServiceAccount + name: istio-sidecar-injector-service-account + - kind: ServiceAccount + name: istiocoredns-service-account + - kind: ServiceAccount + name: default +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +rules: +- apiGroups: + - policy + resourceNames: + - istio-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: istio-psp + namespace: {{ template "istio.namespace" . }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-uninstall-job.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-uninstall-job.yaml new file mode 100755 index 000000000..a7f156325 --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/istio-uninstall-job.yaml @@ -0,0 +1,45 @@ +apiVersion: batch/v1 +kind: Job +metadata: + name: istioctl-uninstaller + namespace: {{ template "istio.namespace" . }} + annotations: + "helm.sh/hook": pre-delete + "helm.sh/hook-weight": "-5" + "helm.sh/hook-delete-policy": hook-succeeded +spec: + template: + spec: + containers: + - name: istioctl-uninstaller + image: {{ template "system_default_registry" . }}{{ .Values.installer.repository }}:{{ .Values.installer.tag }} + env: + - name: RELEASE_NAME + value: {{ .Release.Name }} + - name: ISTIO_NAMESPACE + value: {{ template "istio.namespace" . }} + command: ["/bin/sh","-c"] + args: ["/usr/local/app/scripts/uninstall_istio_system.sh"] + volumeMounts: + - name: config-volume + mountPath: /app/istio-base.yaml + subPath: istio-base.yaml + {{- if .Values.overlayFile }} + - name: overlay-volume + mountPath: /app/overlay-config.yaml + subPath: overlay-config.yaml + {{ end }} + volumes: + - name: config-volume + configMap: + name: istio-installer-base + {{- if .Values.overlayFile }} + - name: overlay-volume + configMap: + name: istio-installer-overlay + {{ end }} + serviceAccountName: istio-installer + securityContext: + runAsUser: 101 + runAsGroup: 101 + restartPolicy: OnFailure diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/overlay-config-map.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/overlay-config-map.yaml new file mode 100755 index 000000000..287d26b2c --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/overlay-config-map.yaml @@ -0,0 +1,9 @@ +{{- if .Values.overlayFile }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: istio-installer-overlay + namespace: {{ template "istio.namespace" . }} +data: + overlay-config.yaml: {{ toYaml .Values.overlayFile | indent 2 }} +{{- end }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/service-monitors.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/service-monitors.yaml new file mode 100755 index 000000000..c3d60c4fc --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/service-monitors.yaml @@ -0,0 +1,51 @@ +{{- if .Values.kiali.enabled }} +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: envoy-stats-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-proxies +spec: + selector: + matchExpressions: + - {key: istio-prometheus-ignore, operator: DoesNotExist} + namespaceSelector: + any: true + jobLabel: envoy-stats + endpoints: + - path: /stats/prometheus + targetPort: 15090 + interval: 15s + relabelings: + - sourceLabels: [__meta_kubernetes_pod_container_port_name] + action: keep + regex: '.*-envoy-prom' + - action: labeldrop + regex: "__meta_kubernetes_pod_label_(.+)" + - sourceLabels: [__meta_kubernetes_namespace] + action: replace + targetLabel: namespace + - sourceLabels: [__meta_kubernetes_pod_name] + action: replace + targetLabel: pod_name +--- +apiVersion: monitoring.coreos.com/v1 +kind: ServiceMonitor +metadata: + name: istio-component-monitor + namespace: {{ template "istio.namespace" . }} + labels: + monitoring: istio-components +spec: + jobLabel: istio + targetLabels: [app] + selector: + matchExpressions: + - {key: istio, operator: In, values: [pilot]} + namespaceSelector: + any: true + endpoints: + - port: http-monitoring + interval: 15s +{{- end -}} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/serviceaccount.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/serviceaccount.yaml new file mode 100755 index 000000000..82b6cbb7e --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/serviceaccount.yaml @@ -0,0 +1,5 @@ +apiVersion: v1 +kind: ServiceAccount +metadata: + name: istio-installer + namespace: {{ template "istio.namespace" . }} diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/view-role.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/view-role.yaml new file mode 100755 index 000000000..5947d3eba --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/templates/view-role.yaml @@ -0,0 +1,41 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + labels: + rbac.authorization.k8s.io/aggregate-to-view: "true" + namespace: {{ template "istio.namespace" . }} + name: istio-view +rules: + - apiGroups: + - config.istio.io + resources: + - adapters + - attributemanifests + - handlers + - httpapispecbindings + - httpapispecs + - instances + - quotaspecbindings + - quotaspecs + - rules + - templates + verbs: ["get", "watch", "list"] + - apiGroups: + - networking.istio.io + resources: + - destinationrules + - envoyfilters + - gateways + - serviceentries + - sidecars + - virtualservices + - workloadentries + verbs: ["get", "watch", "list"] + - apiGroups: + - security.istio.io + resources: + - authorizationpolicies + - peerauthentications + - requestauthentications + verbs: ["get", "watch", "list"] diff --git a/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/values.yaml b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/values.yaml new file mode 100755 index 000000000..d4909e15a --- /dev/null +++ b/charts/rancher-istio-1.9/rancher-istio/1.9.200-rc02/values.yaml @@ -0,0 +1,95 @@ +overlayFile: "" +tag: 1.9.2 +##Setting forceInstall: true will remove the check for istio version < 1.6.x and will not analyze your install cluster prior to install +forceInstall: false + +installer: + repository: rancher/istio-installer + tag: 1.9.2-rancher1 + +##Deprecated as of 1.8, native support provided by enabling `dns.enabled=true` +istiocoredns: + enabled: false + image: + repository: rancher/mirrored-coredns-coredns + tag: 1.6.2 + pluginImage: + repository: rancher/mirrored-istio-coredns-plugin + tag: 0.2-istio-1.1 + +##Native support for dns added in 1.8 +dns: + enabled: false + +base: + enabled: true + +cni: + enabled: false + repository: rancher/mirrored-istio-install-cni + tag: 1.9.2 + logLevel: info + excludeNamespaces: + - istio-system + - kube-system + +egressGateways: + enabled: false + type: NodePort + +ingressGateways: + enabled: true + type: NodePort + +istiodRemote: + enabled: false + +pilot: + enabled: true + repository: rancher/mirrored-istio-pilot + tag: 1.9.2 + +telemetry: + enabled: true + v2: + enabled: true + +global: + cattle: + systemDefaultRegistry: "" + proxy: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.9.2 + proxy_init: + repository: rancher/mirrored-istio-proxyv2 + tag: 1.9.2 + defaultPodDisruptionBudget: + enabled: true + rbac: + pspEnabled: false + +# Kiali subchart from rancher-kiali-server +kiali: + enabled: true + auth: + strategy: anonymous + deployment: + ingress_enabled: false + repository: rancher/mirrored-kiali-kiali + tag: v1.32.0 + external_services: + prometheus: + custom_metrics_url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + url: "http://rancher-monitoring-prometheus.cattle-monitoring-system.svc:9090" + tracing: + in_cluster_url: "http://tracing.istio-system.svc:16686/jaeger" + grafana: + in_cluster_url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + url: "http://rancher-monitoring-grafana.cattle-monitoring-system.svc:80" + +tracing: + enabled: false + contextPath: "/jaeger" + jaeger: + repository: rancher/mirrored-jaegertracing-all-in-one + tag: 1.20.0 diff --git a/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/Chart.yaml b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/Chart.yaml new file mode 100755 index 000000000..bb51d1a42 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/Chart.yaml @@ -0,0 +1,7 @@ +annotations: + catalog.cattle.io/hidden: "true" +apiVersion: v2 +description: Installs the CRDs for rancher-kiali-server. +name: rancher-kiali-server-crd +type: application +version: 1.32.100-rc01 diff --git a/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/README.md b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/README.md new file mode 100755 index 000000000..3847c18a1 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/README.md @@ -0,0 +1,2 @@ +# rancher-kiali-server-crd +A Rancher chart that installs the CRDs used by rancher-kiali-server. diff --git a/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/templates/crds.yaml b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/templates/crds.yaml new file mode 100755 index 000000000..ae7c49349 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server-crd/1.32.100-rc01/templates/crds.yaml @@ -0,0 +1,22 @@ +--- +apiVersion: apiextensions.k8s.io/v1 +kind: CustomResourceDefinition +metadata: + name: monitoringdashboards.monitoring.kiali.io +spec: + group: monitoring.kiali.io + names: + kind: MonitoringDashboard + listKind: MonitoringDashboardList + plural: monitoringdashboards + singular: monitoringdashboard + scope: Namespaced + versions: + - name: v1alpha1 + served: true + storage: true + schema: + openAPIV3Schema: + type: object + x-kubernetes-preserve-unknown-fields: true +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/Chart.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/Chart.yaml new file mode 100755 index 000000000..16a169a6a --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/Chart.yaml @@ -0,0 +1,31 @@ +annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=match + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1 + catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1 + catalog.rancher.io/namespace: cattle-istio-system + catalog.rancher.io/release-name: rancher-kiali-server +apiVersion: v2 +appVersion: v1.32.0 +description: Kiali is an open source project for service mesh observability, refer + to https://www.kiali.io for details. This is installed as sub-chart with customized + values in Rancher's Istio. +home: https://github.com/kiali/kiali +icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png +keywords: +- istio +- kiali +- networking +- infrastructure +maintainers: +- email: kiali-users@googlegroups.com + name: Kiali + url: https://kiali.io +name: rancher-kiali-server +sources: +- https://github.com/kiali/kiali +- https://github.com/kiali/kiali-ui +- https://github.com/kiali/kiali-operator +- https://github.com/kiali/helm-charts +version: 1.32.100-rc01 diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/NOTES.txt b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/NOTES.txt new file mode 100755 index 000000000..751019401 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/NOTES.txt @@ -0,0 +1,5 @@ +Welcome to Kiali! For more details on Kiali, see: https://kiali.io + +The Kiali Server [{{ .Chart.AppVersion }}] has been installed in namespace [{{ .Release.Namespace }}]. It will be ready soon. + +(Helm: Chart=[{{ .Chart.Name }}], Release=[{{ .Release.Name }}], Version=[{{ .Chart.Version }}]) diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/_helpers.tpl b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/_helpers.tpl new file mode 100755 index 000000000..dd33bbe48 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/_helpers.tpl @@ -0,0 +1,192 @@ +{{/* vim: set filetype=mustache: */}} + +{{/* +Expand the name of the chart. +*/}} +{{- define "kiali-server.name" -}} +{{- default .Chart.Name .Values.nameOverride | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Create a default fully qualified app name. +We truncate at 63 chars because some Kubernetes name fields are limited to this (by the DNS naming spec). +If release name contains chart name it will be used as a full name. +*/}} +{{- define "kiali-server.fullname" -}} +{{- if .Values.fullnameOverride }} + {{- .Values.fullnameOverride | trunc 63 | trimSuffix "-" }} +{{- else }} + {{- $name := default .Chart.Name .Values.nameOverride }} + {{- printf "%s" $name | trunc 63 | trimSuffix "-" }} +{{- end }} +{{- end }} + +{{/* +Create chart name and version as used by the chart label. +*/}} +{{- define "kiali-server.chart" -}} +{{- printf "%s-%s" .Chart.Name .Chart.Version | replace "+" "_" | trunc 63 | trimSuffix "-" }} +{{- end }} + +{{/* +Identifies the log_level with the old verbose_mode and the new log_level considered. +*/}} +{{- define "kiali-server.logLevel" -}} +{{- if .Values.deployment.verbose_mode -}} +{{- .Values.deployment.verbose_mode -}} +{{- else -}} +{{- .Values.deployment.logger.log_level -}} +{{- end -}} +{{- end }} + +{{/* +Common labels +*/}} +{{- define "kiali-server.labels" -}} +helm.sh/chart: {{ include "kiali-server.chart" . }} +app: {{ include "kiali-server.name" . }} +{{ include "kiali-server.selectorLabels" . }} +version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/version: {{ .Values.deployment.version_label | default .Chart.AppVersion | quote }} +app.kubernetes.io/managed-by: {{ .Release.Service }} +app.kubernetes.io/part-of: "kiali" +{{- end }} + +{{/* +Selector labels +*/}} +{{- define "kiali-server.selectorLabels" -}} +app.kubernetes.io/name: {{ include "kiali-server.name" . }} +app.kubernetes.io/instance: {{ .Release.Name }} +{{- end }} + +{{/* +Used to determine if a custom dashboard (defined in .Template.Name) should be deployed. +*/}} +{{- define "kiali-server.isDashboardEnabled" -}} +{{- if .Values.external_services.custom_dashboards.enabled }} + {{- $includere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.includes }} + {{- if $s }} + {{- if $includere }} + {{- $includere = printf "%s|^%s$" $includere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $includere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- $excludere := "" }} + {{- range $_, $s := .Values.deployment.custom_dashboards.excludes }} + {{- if $s }} + {{- if $excludere }} + {{- $excludere = printf "%s|^%s$" $excludere ($s | replace "*" ".*" | replace "?" ".") }} + {{- else }} + {{- $excludere = printf "^%s$" ($s | replace "*" ".*" | replace "?" ".") }} + {{- end }} + {{- end }} + {{- end }} + {{- if (and (mustRegexMatch (default "no-matches" $includere) (base .Template.Name)) (not (mustRegexMatch (default "no-matches" $excludere) (base .Template.Name)))) }} + {{- print "enabled" }} + {{- else }} + {{- print "" }} + {{- end }} +{{- else }} + {{- print "" }} +{{- end }} +{{- end }} + +{{/* +Determine the default login token signing key. +*/}} +{{- define "kiali-server.login_token.signing_key" -}} +{{- if .Values.login_token.signing_key }} + {{- .Values.login_token.signing_key }} +{{- else }} + {{- randAlphaNum 16 }} +{{- end }} +{{- end }} + +{{/* +Determine the default web root. +*/}} +{{- define "kiali-server.server.web_root" -}} +{{- if .Values.server.web_root }} + {{- .Values.server.web_root | trimSuffix "/" }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/" }} + {{- else }} + {{- "/kiali" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity cert file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.cert_file" -}} +{{- if hasKey .Values.identity "cert_file" }} + {{- .Values.identity.cert_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.crt" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the default identity private key file. There is no default if on k8s; only on OpenShift. +*/}} +{{- define "kiali-server.identity.private_key_file" -}} +{{- if hasKey .Values.identity "private_key_file" }} + {{- .Values.identity.private_key_file }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- "/kiali-cert/tls.key" }} + {{- else }} + {{- "" }} + {{- end }} +{{- end }} +{{- end }} + +{{/* +Determine the istio namespace - default is where Kiali is installed. +*/}} +{{- define "kiali-server.istio_namespace" -}} +{{- if .Values.istio_namespace }} + {{- .Values.istio_namespace }} +{{- else }} + {{- .Release.Namespace }} +{{- end }} +{{- end }} + +{{/* +Determine the auth strategy to use - default is "token" on Kubernetes and "openshift" on OpenShift. +*/}} +{{- define "kiali-server.auth.strategy" -}} +{{- if .Values.auth.strategy }} + {{- if (and (eq .Values.auth.strategy "openshift") (not .Values.kiali_route_url)) }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or use a different auth strategy via the --set auth.strategy=... option." }} + {{- end }} + {{- .Values.auth.strategy }} +{{- else }} + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + {{- if not .Values.kiali_route_url }} + {{- fail "You did not define what the Kiali Route URL will be (--set kiali_route_url=...). Without this set, the openshift auth strategy will not work. Either set that or explicitly indicate another auth strategy you want via the --set auth.strategy=... option." }} + {{- end }} + {{- "openshift" }} + {{- else }} + {{- "token" }} + {{- end }} +{{- end }} +{{- end }} + +{{- define "system_default_registry" -}} +{{- if .Values.global.cattle.systemDefaultRegistry -}} +{{- printf "%s/" .Values.global.cattle.systemDefaultRegistry -}} +{{- else -}} +{{- "" -}} +{{- end -}} +{{- end -}} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/cabundle.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/cabundle.yaml new file mode 100755 index 000000000..7462b95a7 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/cabundle.yaml @@ -0,0 +1,13 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }}-cabundle + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + service.beta.openshift.io/inject-cabundle: "true" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/configmap.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/configmap.yaml new file mode 100755 index 000000000..b1bf53173 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/configmap.yaml @@ -0,0 +1,24 @@ +--- +apiVersion: v1 +kind: ConfigMap +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + config.yaml: | + {{- /* Most of .Values is simply the ConfigMap - strip out the keys that are not part of the ConfigMap */}} + {{- $cm := omit .Values "nameOverride" "fullnameOverride" "kiali_route_url" }} + {{- /* The helm chart defines namespace for us, but pass it to the ConfigMap in case the server needs it */}} + {{- $_ := set $cm.deployment "namespace" .Release.Namespace }} + {{- /* Some values of the ConfigMap are generated, but might not be identical, from .Values */}} + {{- $_ := set $cm "istio_namespace" (include "kiali-server.istio_namespace" .) }} + {{- $_ := set $cm.auth "strategy" (include "kiali-server.auth.strategy" .) }} + {{- $_ := set $cm.auth.openshift "client_id_prefix" (include "kiali-server.fullname" .) }} + {{- $_ := set $cm.identity "cert_file" (include "kiali-server.identity.cert_file" .) }} + {{- $_ := set $cm.identity "private_key_file" (include "kiali-server.identity.private_key_file" .) }} + {{- $_ := set $cm.login_token "signing_key" (include "kiali-server.login_token.signing_key" .) }} + {{- $_ := set $cm.server "web_root" (include "kiali-server.server.web_root" .) }} + {{- toYaml $cm | nindent 4 }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/envoy.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/envoy.yaml new file mode 100755 index 000000000..85b402017 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/envoy.yaml @@ -0,0 +1,56 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: envoy + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Envoy Metrics + discoverOn: "envoy_server_uptime" + items: + - chart: + name: "Pods uptime" + spans: 4 + metricName: "envoy_server_uptime" + dataType: "raw" + - chart: + name: "Allocated memory" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_allocated" + dataType: "raw" + min: 0 + - chart: + name: "Heap size" + unit: "bytes" + spans: 4 + metricName: "envoy_server_memory_heap_size" + dataType: "raw" + min: 0 + - chart: + name: "Upstream active connections" + spans: 6 + metricName: "envoy_cluster_upstream_cx_active" + dataType: "raw" + - chart: + name: "Upstream total requests" + spans: 6 + metricName: "envoy_cluster_upstream_rq_total" + unit: "rps" + dataType: "rate" + - chart: + name: "Downstream active connections" + spans: 6 + metricName: "envoy_listener_downstream_cx_active" + dataType: "raw" + - chart: + name: "Downstream HTTP requests" + spans: 6 + metricName: "envoy_listener_http_downstream_rq" + unit: "rps" + dataType: "rate" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/go.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/go.yaml new file mode 100755 index 000000000..2d2f42a93 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/go.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: go + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Go Metrics + runtime: Go + discoverOn: "go_info" + items: + - chart: + name: "CPU ratio" + spans: 6 + metricName: "process_cpu_seconds_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "RSS Memory" + unit: "bytes" + spans: 6 + metricName: "process_resident_memory_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Goroutines" + spans: 6 + metricName: "go_goroutines" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Heap allocation rate" + unit: "bytes/s" + spans: 6 + metricName: "go_memstats_alloc_bytes_total" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "GC rate" + spans: 6 + metricName: "go_gc_duration_seconds_count" + dataType: "rate" + aggregations: + - label: "pod_name" + displayName: "Pod" + - chart: + name: "Next GC" + unit: "bytes" + spans: 6 + metricName: "go_memstats_next_gc_bytes" + dataType: "raw" + aggregations: + - label: "pod_name" + displayName: "Pod" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/kiali.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/kiali.yaml new file mode 100755 index 000000000..b1f011b4f --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/kiali.yaml @@ -0,0 +1,44 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: kiali + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Kiali Internal Metrics + items: + - chart: + name: "API processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_api_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "route" + displayName: "Route" + - chart: + name: "Functions processing duration" + unit: "seconds" + spans: 6 + metricName: "kiali_go_function_processing_duration_seconds" + dataType: "histogram" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" + - chart: + name: "Failures" + spans: 12 + metricName: "kiali_go_function_failures_total" + dataType: "raw" + aggregations: + - label: "function" + displayName: "Function" + - label: "package" + displayName: "Package" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml new file mode 100755 index 000000000..2e1ed5cff --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm-pool.yaml @@ -0,0 +1,43 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Pool Metrics + discoverOn: "jvm_buffer_total_capacity_bytes" + items: + - chart: + name: "Pool buffer memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer capacity" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_total_capacity_bytes" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" + - chart: + name: "Pool buffer count" + unit: "bytes" + spans: 4 + metricName: "jvm_buffer_count" + dataType: "raw" + aggregations: + - label: "id" + displayName: "Pool" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm.yaml new file mode 100755 index 000000000..d64596882 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.0.6-jvm.yaml @@ -0,0 +1,65 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.0.6-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live" + items: + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon" + dataType: "raw" + - chart: + name: "Loaded classes" + spans: 4 + metricName: "jvm_classes_loaded" + dataType: "raw" + + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.1-jvm.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.1-jvm.yaml new file mode 100755 index 000000000..76e8d0a4a --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/micrometer-1.1-jvm.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: micrometer-1.1-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: JVM + title: JVM Metrics + discoverOn: "jvm_threads_live_threads" + items: + - chart: + name: "Memory used" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_used_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory commited" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_committed_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + - chart: + name: "Memory max" + unit: "bytes" + spans: 4 + metricName: "jvm_memory_max_bytes" + dataType: "raw" + aggregations: + - label: "area" + displayName: "Area" + - label: "id" + displayName: "Space" + + - chart: + name: "Total live threads" + spans: 4 + metricName: "jvm_threads_live_threads" + dataType: "raw" + - chart: + name: "Daemon threads" + spans: 4 + metricName: "jvm_threads_daemon_threads" + dataType: "raw" + - chart: + name: "Threads states" + spans: 4 + metricName: "jvm_threads_states_threads" + dataType: "raw" + aggregations: + - label: "state" + displayName: "State" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-1.1.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-1.1.yaml new file mode 100755 index 000000000..1d4951196 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-1.1.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-1.1 + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:thread_count" + items: + - chart: + name: "Current loaded classes" + spans: 6 + metricName: "base:classloader_current_loaded_class_count" + dataType: "raw" + - chart: + name: "Unloaded classes" + spans: 6 + metricName: "base:classloader_total_unloaded_class_count" + dataType: "raw" + - chart: + name: "Thread count" + spans: 4 + metricName: "base:thread_count" + dataType: "raw" + - chart: + name: "Thread max count" + spans: 4 + metricName: "base:thread_max_count" + dataType: "raw" + - chart: + name: "Thread daemon count" + spans: 4 + metricName: "base:thread_daemon_count" + dataType: "raw" + - chart: + name: "Committed heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_committed_heap_bytes" + dataType: "raw" + - chart: + name: "Max heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_max_heap_bytes" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "base:memory_used_heap_bytes" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-x.y.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-x.y.yaml new file mode 100755 index 000000000..57ddc60ef --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/microprofile-x.y.yaml @@ -0,0 +1,38 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: microprofile-x.y + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: MicroProfile Metrics + runtime: MicroProfile + discoverOn: "base:gc_complete_scavenger_count" + items: + - chart: + name: "Young GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_young_generation_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Young GC count" + spans: 3 + metricName: "base:gc_young_generation_scavenger_count" + dataType: "raw" + - chart: + name: "Total GC time" + unit: "seconds" + spans: 3 + metricName: "base:gc_complete_scavenger_time_seconds" + dataType: "raw" + - chart: + name: "Total GC count" + spans: 3 + metricName: "base:gc_complete_scavenger_count" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/nodejs.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/nodejs.yaml new file mode 100755 index 000000000..1ffe0aa10 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/nodejs.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: nodejs + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Node.js + title: Node.js Metrics + discoverOn: "nodejs_active_handles_total" + items: + - chart: + name: "Active handles" + spans: 4 + metricName: "nodejs_active_handles_total" + dataType: "raw" + - chart: + name: "Active requests" + spans: 4 + metricName: "nodejs_active_requests_total" + dataType: "raw" + - chart: + name: "Event loop lag" + unit: "seconds" + spans: 4 + metricName: "nodejs_eventloop_lag_seconds" + dataType: "raw" + - chart: + name: "Total heap size" + unit: "bytes" + spans: 12 + metricName: "nodejs_heap_space_size_total_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Used heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_used_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" + - chart: + name: "Available heap size" + unit: "bytes" + spans: 6 + metricName: "nodejs_heap_space_size_available_bytes" + dataType: "raw" + aggregations: + - label: "space" + displayName: "Space" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/quarkus.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/quarkus.yaml new file mode 100755 index 000000000..cef5f3dce --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/quarkus.yaml @@ -0,0 +1,33 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: quarkus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + title: Quarkus Metrics + runtime: Quarkus + items: + - chart: + name: "Thread count" + spans: 4 + metricName: "vendor:thread_count" + dataType: "raw" + - chart: + name: "Used heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_heap_usage_bytes" + dataType: "raw" + - chart: + name: "Used non-heap" + unit: "bytes" + spans: 4 + metricName: "vendor:memory_non_heap_usage_bytes" + dataType: "raw" + - include: "microprofile-x.y" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm-pool.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm-pool.yaml new file mode 100755 index 000000000..42d87d890 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm-pool.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Pool Metrics + items: + - include: "micrometer-1.0.6-jvm-pool" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm.yaml new file mode 100755 index 000000000..ced3acdd9 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: JVM Metrics + items: + - include: "micrometer-1.0.6-jvm" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-tomcat.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-tomcat.yaml new file mode 100755 index 000000000..c07016aa2 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/springboot-tomcat.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: springboot-tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Spring Boot + title: Tomcat Metrics + items: + - include: "tomcat" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/thorntail.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/thorntail.yaml new file mode 100755 index 000000000..6bd85e6f5 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/thorntail.yaml @@ -0,0 +1,22 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: thorntail + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Thorntail + title: Thorntail Metrics + discoverOn: "vendor:loaded_modules" + items: + - include: "microprofile-1.1" + - chart: + name: "Loaded modules" + spans: 6 + metricName: "vendor:loaded_modules" + dataType: "raw" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/tomcat.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/tomcat.yaml new file mode 100755 index 000000000..9a803342f --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/tomcat.yaml @@ -0,0 +1,67 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: tomcat + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Tomcat + title: Tomcat Metrics + discoverOn: "tomcat_sessions_created_total" + items: + - chart: + name: "Sessions created" + spans: 4 + metricName: "tomcat_sessions_created_total" + dataType: "raw" + - chart: + name: "Active sessions" + spans: 4 + metricName: "tomcat_sessions_active_current" + dataType: "raw" + - chart: + name: "Sessions rejected" + spans: 4 + metricName: "tomcat_sessions_rejected_total" + dataType: "raw" + + - chart: + name: "Bytes sent" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_sent_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Bytes received" + unit: "bitrate" + spans: 6 + metricName: "tomcat_global_received_bytes_total" + dataType: "rate" + aggregations: + - label: "name" + displayName: "Name" + + - chart: + name: "Global errors" + spans: 6 + metricName: "tomcat_global_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" + - chart: + name: "Servlet errors" + spans: 6 + metricName: "tomcat_servlet_error_total" + dataType: "raw" + aggregations: + - label: "name" + displayName: "Name" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-client.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-client.yaml new file mode 100755 index 000000000..2d591d6b0 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-client.yaml @@ -0,0 +1,60 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-client + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Client Metrics + discoverOn: "vertx_http_client_connections" + items: + - chart: + name: "Client response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_client_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_client_requestCount_total" + dataType: "rate" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Client active connections" + spans: 6 + metricName: "vertx_http_client_connections" + dataType: "raw" + - chart: + name: "Client active websockets" + spans: 6 + metricName: "vertx_http_client_wsConnections" + dataType: "raw" + - chart: + name: "Client bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesSent" + dataType: "histogram" + - chart: + name: "Client bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_client_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-eventbus.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-eventbus.yaml new file mode 100755 index 000000000..65f9ee2ec --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-eventbus.yaml @@ -0,0 +1,59 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-eventbus + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Eventbus Metrics + discoverOn: "vertx_eventbus_handlers" + items: + - chart: + name: "Event bus handlers" + spans: 6 + metricName: "vertx_eventbus_handlers" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus pending messages" + spans: 6 + metricName: "vertx_eventbus_pending" + dataType: "raw" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus processing time" + unit: "seconds" + spans: 6 + metricName: "vertx_eventbus_processingTime_seconds" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes read" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesRead" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" + - chart: + name: "Event bus bytes written" + unit: "bytes" + spans: 6 + metricName: "vertx_eventbus_bytesWritten" + dataType: "histogram" + aggregations: + - label: "address" + displayName: "Eventbus address" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-jvm.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-jvm.yaml new file mode 100755 index 000000000..2663186f3 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-jvm.yaml @@ -0,0 +1,16 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-jvm + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: JVM Metrics + items: + - include: "micrometer-1.1-jvm" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-pool.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-pool.yaml new file mode 100755 index 000000000..f6af921b3 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-pool.yaml @@ -0,0 +1,68 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-pool + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Pools Metrics + discoverOn: "vertx_pool_ratio" + items: + - chart: + name: "Usage duration" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_usage_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Usage ratio" + spans: 6 + metricName: "vertx_pool_ratio" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Queue size" + spans: 6 + metricName: "vertx_pool_queue_size" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Time in queue" + unit: "seconds" + spans: 6 + metricName: "vertx_pool_queue_delay_seconds" + dataType: "histogram" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" + - chart: + name: "Resources used" + spans: 6 + metricName: "vertx_pool_inUse" + dataType: "raw" + aggregations: + - label: "pool_name" + displayName: "Name" + - label: "pool_type" + displayName: "Type" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-server.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-server.yaml new file mode 100755 index 000000000..de6b89df9 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/dashboards/vertx-server.yaml @@ -0,0 +1,62 @@ +{{- if (include "kiali-server.isDashboardEnabled" .) }} +--- +apiVersion: "monitoring.kiali.io/v1alpha1" +kind: MonitoringDashboard +metadata: + name: vertx-server + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + runtime: Vert.x + title: Vert.x Server Metrics + discoverOn: "vertx_http_server_connections" + items: + - chart: + name: "Server response time" + unit: "seconds" + spans: 6 + metricName: "vertx_http_server_responseTime_seconds" + dataType: "histogram" + aggregations: + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server request count rate" + unit: "ops" + spans: 6 + metricName: "vertx_http_server_requestCount_total" + dataType: "rate" + aggregations: + - label: "code" + displayName: "Error code" + - label: "path" + displayName: "Path" + - label: "method" + displayName: "Method" + - chart: + name: "Server active connections" + spans: 6 + metricName: "vertx_http_server_connections" + dataType: "raw" + - chart: + name: "Server active websockets" + spans: 6 + metricName: "vertx_http_server_wsConnections" + dataType: "raw" + - chart: + name: "Server bytes sent" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesSent" + dataType: "histogram" + - chart: + name: "Server bytes received" + unit: "bytes" + spans: 6 + metricName: "vertx_http_server_bytesReceived" + dataType: "histogram" +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/deployment.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/deployment.yaml new file mode 100755 index 000000000..100c57922 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/deployment.yaml @@ -0,0 +1,174 @@ +--- +apiVersion: apps/v1 +kind: Deployment +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + replicas: {{ .Values.deployment.replicas }} + selector: + matchLabels: + {{- include "kiali-server.selectorLabels" . | nindent 6 }} + strategy: + rollingUpdate: + maxSurge: 1 + maxUnavailable: 1 + type: RollingUpdate + template: + metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 8 }} + {{- if .Values.deployment.pod_labels }} + {{- toYaml .Values.deployment.pod_labels | nindent 8 }} + {{- end }} + annotations: + {{- if .Values.server.metrics_enabled }} + prometheus.io/scrape: "true" + prometheus.io/port: {{ .Values.server.metrics_port | quote }} + {{- else }} + prometheus.io/scrape: "false" + prometheus.io/port: "" + {{- end }} + kiali.io/runtimes: go,kiali + {{- if .Values.deployment.pod_annotations }} + {{- toYaml .Values.deployment.pod_annotations | nindent 8 }} + {{- end }} + spec: + serviceAccountName: {{ include "kiali-server.fullname" . }} + {{- if .Values.deployment.priority_class_name }} + priorityClassName: {{ .Values.deployment.priority_class_name | quote }} + {{- end }} + {{- if .Values.deployment.image_pull_secrets }} + imagePullSecrets: + {{- range .Values.deployment.image_pull_secrets }} + - name: {{ . }} + {{- end }} + {{- end }} + containers: + - image: "{{ template "system_default_registry" . }}{{ .Values.deployment.repository }}:{{ .Values.deployment.tag }}" + imagePullPolicy: {{ .Values.deployment.image_pull_policy | default "Always" }} + name: {{ include "kiali-server.fullname" . }} + command: + - "/opt/kiali/kiali" + - "-config" + - "/kiali-configuration/config.yaml" + ports: + - name: api-port + containerPort: {{ .Values.server.port | default 20001 }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + containerPort: {{ .Values.server.metrics_port | default 9090 }} + {{- end }} + readinessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + livenessProbe: + httpGet: + path: {{ include "kiali-server.server.web_root" . | trimSuffix "/" }}/healthz + port: api-port + {{- if (include "kiali-server.identity.cert_file" .) }} + scheme: HTTPS + {{- else }} + scheme: HTTP + {{- end }} + initialDelaySeconds: 5 + periodSeconds: 30 + env: + - name: ACTIVE_NAMESPACE + valueFrom: + fieldRef: + fieldPath: metadata.namespace + - name: LOG_LEVEL + value: "{{ include "kiali-server.logLevel" . }}" + - name: LOG_FORMAT + value: "{{ .Values.deployment.logger.log_format }}" + - name: LOG_TIME_FIELD_FORMAT + value: "{{ .Values.deployment.logger.time_field_format }}" + - name: LOG_SAMPLER_RATE + value: "{{ .Values.deployment.logger.sampler_rate }}" + volumeMounts: + {{- if .Values.web_root_override }} + - name: kiali-console + subPath: env.js + mountPath: /opt/kiali/console/env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + mountPath: "/kiali-configuration" + - name: {{ include "kiali-server.fullname" . }}-cert + mountPath: "/kiali-cert" + - name: {{ include "kiali-server.fullname" . }}-secret + mountPath: "/kiali-secret" + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + mountPath: "/kiali-cabundle" + {{- end }} + {{- if .Values.deployment.resources }} + resources: + {{- toYaml .Values.deployment.resources | nindent 10 }} + {{- end }} + volumes: + {{- if .Values.web_root_override }} + - name: kiali-console + configMap: + name: kiali-console + items: + - key: env.js + path: env.js + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-configuration + configMap: + name: {{ include "kiali-server.fullname" . }} + - name: {{ include "kiali-server.fullname" . }}-cert + secret: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + secretName: {{ include "kiali-server.fullname" . }}-cert-secret + {{- else }} + secretName: istio.{{ include "kiali-server.fullname" . }}-service-account + {{- end }} + {{- if not (include "kiali-server.identity.cert_file" .) }} + optional: true + {{- end }} + - name: {{ include "kiali-server.fullname" . }}-secret + secret: + secretName: {{ .Values.deployment.secret_name }} + optional: true + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + - name: {{ include "kiali-server.fullname" . }}-cabundle + configMap: + name: {{ include "kiali-server.fullname" . }}-cabundle + {{- end }} + {{- if or (.Values.deployment.affinity.node) (or (.Values.deployment.pod) (.Values.deployment.pod_anti)) }} + affinity: + {{- if .Values.deployment.affinity.node }} + nodeAffinity: + {{- toYaml .Values.deployment.affinity.node | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod }} + podAffinity: + {{- toYaml .Values.deployment.affinity.pod | nindent 10 }} + {{- end }} + {{- if .Values.deployment.affinity.pod_anti }} + podAntiAffinity: + {{- toYaml .Values.deployment.affinity.pod_anti | nindent 10 }} + {{- end }} + {{- end }} + {{- if .Values.deployment.tolerations }} + tolerations: + {{- toYaml .Values.deployment.tolerations | nindent 8 }} + {{- end }} + {{- if .Values.deployment.node_selector }} + nodeSelector: + {{- toYaml .Values.deployment.node_selector | nindent 8 }} + {{- end }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/hpa.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/hpa.yaml new file mode 100755 index 000000000..934c4c1e9 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/hpa.yaml @@ -0,0 +1,17 @@ +{{- if .Values.deployment.hpa.spec }} +--- +apiVersion: {{ .Values.deployment.hpa.api_version }} +kind: HorizontalPodAutoscaler +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +spec: + scaleTargetRef: + apiVersion: apps/v1 + kind: Deployment + name: {{ include "kiali-server.fullname" . }} + {{- toYaml .Values.deployment.hpa.spec | nindent 2 }} +... +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/ingress.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/ingress.yaml new file mode 100755 index 000000000..e4c98db1b --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/ingress.yaml @@ -0,0 +1,40 @@ +{{- if not (.Capabilities.APIVersions.Has "route.openshift.io/v1") }} +{{- if .Values.deployment.ingress_enabled }} +--- +apiVersion: networking.k8s.io/v1beta1 +kind: Ingress +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }} + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- else }} + # For ingress-nginx versions older than 0.20.0 use secure-backends. + # (see: https://github.com/kubernetes/ingress-nginx/issues/3416#issuecomment-438247948) + # For ingress-nginx versions 0.20.0 and later use backend-protocol. + {{- if (include "kiali-server.identity.cert_file" .) }} + nginx.ingress.kubernetes.io/secure-backends: "true" + nginx.ingress.kubernetes.io/backend-protocol: "HTTPS" + {{- else }} + nginx.ingress.kubernetes.io/secure-backends: "false" + nginx.ingress.kubernetes.io/backend-protocol: "HTTP" + {{- end }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + rules: + - http: + paths: + - path: {{ include "kiali-server.server.web_root" . }} + backend: + serviceName: {{ include "kiali-server.fullname" . }} + servicePort: {{ .Values.server.port }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/oauth.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/oauth.yaml new file mode 100755 index 000000000..a178bb85e --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/oauth.yaml @@ -0,0 +1,17 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.kiali_route_url }} +--- +apiVersion: oauth.openshift.io/v1 +kind: OAuthClient +metadata: + name: {{ include "kiali-server.fullname" . }}-{{ .Release.Namespace }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +redirectURIs: +- {{ .Values.kiali_route_url }} +grantMethod: auto +allowAnyScope: true +... +{{- end }} +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/psp.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/psp.yaml new file mode 100755 index 000000000..f891892cc --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/psp.yaml @@ -0,0 +1,67 @@ +{{- if .Values.global.rbac.pspEnabled }} +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-psp +subjects: + - kind: ServiceAccount + name: kiali +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +rules: +- apiGroups: + - policy + resourceNames: + - {{ include "kiali-server.fullname" . }}-psp + resources: + - podsecuritypolicies + verbs: + - use +--- +apiVersion: policy/v1beta1 +kind: PodSecurityPolicy +metadata: + name: {{ include "kiali-server.fullname" . }}-psp + namespace: {{ .Release.Namespace }} +spec: + allowPrivilegeEscalation: false + forbiddenSysctls: + - '*' + fsGroup: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + requiredDropCapabilities: + - ALL + runAsUser: + rule: MustRunAsNonRoot + runAsGroup: + rule: MustRunAs + ranges: + - min: 1 + max: 65535 + seLinux: + rule: RunAsAny + supplementalGroups: + ranges: + - max: 65535 + min: 1 + rule: MustRunAs + volumes: + - configMap + - emptyDir + - projected + - secret + - downwardAPI + - persistentVolumeClaim +{{- end }} \ No newline at end of file diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-controlplane.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-controlplane.yaml new file mode 100755 index 000000000..a22c76756 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-controlplane.yaml @@ -0,0 +1,15 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: Role +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - secrets + verbs: + - list +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-viewer.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-viewer.yaml new file mode 100755 index 000000000..9fdd9fd1d --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role-viewer.yaml @@ -0,0 +1,97 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }}-viewer + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - get + - list + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - get + - list +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role.yaml new file mode 100755 index 000000000..8444bc753 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/role.yaml @@ -0,0 +1,108 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRole +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +rules: +- apiGroups: [""] + resources: + - configmaps + - endpoints + - namespaces + - nodes + - pods + - pods/log + - pods/proxy + - replicationcontrollers + - services + verbs: + - get + - list + - patch + - watch +- apiGroups: [""] + resources: + - pods/portforward + verbs: + - create + - post +- apiGroups: ["extensions", "apps"] + resources: + - daemonsets + - deployments + - replicasets + - statefulsets + verbs: + - get + - list + - patch + - watch +- apiGroups: ["autoscaling"] + resources: + - horizontalpodautoscalers + verbs: + - get + - list + - watch +- apiGroups: ["batch"] + resources: + - cronjobs + - jobs + verbs: + - get + - list + - patch + - watch +- apiGroups: + - networking.istio.io + - security.istio.io + resources: ["*"] + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["apps.openshift.io"] + resources: + - deploymentconfigs + verbs: + - get + - list + - patch + - watch +- apiGroups: ["project.openshift.io"] + resources: + - projects + verbs: + - get +- apiGroups: ["route.openshift.io"] + resources: + - routes + verbs: + - get +- apiGroups: ["monitoring.kiali.io"] + resources: + - monitoringdashboards + verbs: + - get + - list +- apiGroups: ["iter8.tools"] + resources: + - experiments + verbs: + - create + - delete + - get + - list + - patch + - watch +- apiGroups: ["authentication.k8s.io"] + resources: + - tokenreviews + verbs: + - create +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding-controlplane.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding-controlplane.yaml new file mode 100755 index 000000000..5a0015836 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding-controlplane.yaml @@ -0,0 +1,17 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: RoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }}-controlplane + namespace: {{ include "kiali-server.istio_namespace" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: Role + name: {{ include "kiali-server.fullname" . }}-controlplane +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding.yaml new file mode 100755 index 000000000..1eaabd65f --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/rolebinding.yaml @@ -0,0 +1,20 @@ +--- +apiVersion: rbac.authorization.k8s.io/v1 +kind: ClusterRoleBinding +metadata: + name: {{ include "kiali-server.fullname" . }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +roleRef: + apiGroup: rbac.authorization.k8s.io + kind: ClusterRole + {{- if .Values.deployment.view_only_mode }} + name: {{ include "kiali-server.fullname" . }}-viewer + {{- else }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +subjects: +- kind: ServiceAccount + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/route.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/route.yaml new file mode 100755 index 000000000..27940dc96 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/route.yaml @@ -0,0 +1,30 @@ +{{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} +{{- if .Values.deployment.ingress_enabled }} +# As of OpenShift 4.5, need to use --disable-openapi-validation when installing via Helm +--- +apiVersion: route.openshift.io/v1 +kind: Route +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + {{- if hasKey .Values.deployment.override_ingress_yaml.metadata "annotations" }}} + annotations: + {{- toYaml .Values.deployment.override_ingress_yaml.metadata.annotations | nindent 4 }} + {{- end }} +spec: + {{- if hasKey .Values.deployment.override_ingress_yaml "spec" }} + {{- toYaml .Values.deployment.override_ingress_yaml.spec | nindent 2 }} + {{- else }} + tls: + termination: reencrypt + insecureEdgeTerminationPolicy: Redirect + to: + kind: Service + targetPort: {{ .Values.server.port }} + name: {{ include "kiali-server.fullname" . }} + {{- end }} +... +{{- end }} +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/service.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/service.yaml new file mode 100755 index 000000000..9ccf4f388 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/service.yaml @@ -0,0 +1,47 @@ +--- +apiVersion: v1 +kind: Service +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} + annotations: + {{- if .Capabilities.APIVersions.Has "route.openshift.io/v1" }} + service.beta.openshift.io/serving-cert-secret-name: {{ include "kiali-server.fullname" . }}-cert-secret + {{- end }} + kiali.io/api-spec: https://kiali.io/api + kiali.io/api-type: rest + {{- if and (not (empty .Values.server.web_fqdn)) (not (empty .Values.server.web_schema)) }} + {{- if empty .Values.server.web_port }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}{{ default "" .Values.server.web_root }} + {{- else }} + kiali.io/external-url: {{ .Values.server.web_schema }}://{{ .Values.server.web_fqdn }}:{{ .Values.server.web_port }}{{(default "" .Values.server.web_root) }} + {{- end }} + {{- end }} + {{- if .Values.deployment.service_annotations }} + {{- toYaml .Values.deployment.service_annotations | nindent 4 }} + {{- end }} +spec: + {{- if .Values.deployment.service_type }} + type: {{ .Values.deployment.service_type }} + {{- end }} + ports: + {{- if (include "kiali-server.identity.cert_file" .) }} + - name: tcp + {{- else }} + - name: http + {{- end }} + protocol: TCP + port: {{ .Values.server.port }} + {{- if .Values.server.metrics_enabled }} + - name: http-metrics + protocol: TCP + port: {{ .Values.server.metrics_port }} + {{- end }} + selector: + {{- include "kiali-server.selectorLabels" . | nindent 4 }} + {{- if .Values.deployment.additional_service_yaml }} + {{- toYaml .Values.deployment.additional_service_yaml | nindent 2 }} + {{- end }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/serviceaccount.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/serviceaccount.yaml new file mode 100755 index 000000000..9151b6f6a --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/serviceaccount.yaml @@ -0,0 +1,9 @@ +--- +apiVersion: v1 +kind: ServiceAccount +metadata: + name: {{ include "kiali-server.fullname" . }} + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +... diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/validate-install-crd.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/validate-install-crd.yaml new file mode 100755 index 000000000..b42eeb266 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/validate-install-crd.yaml @@ -0,0 +1,14 @@ +#{{- if gt (len (lookup "rbac.authorization.k8s.io/v1" "ClusterRole" "" "")) 0 -}} +# {{- $found := dict -}} +# {{- set $found "monitoring.kiali.io/v1alpha1/MonitoringDashboard" false -}} +# {{- range .Capabilities.APIVersions -}} +# {{- if hasKey $found (toString .) -}} +# {{- set $found (toString .) true -}} +# {{- end -}} +# {{- end -}} +# {{- range $_, $exists := $found -}} +# {{- if (eq $exists false) -}} +# {{- required "Required CRDs are missing. Please install the corresponding CRD chart before installing this chart." "" -}} +# {{- end -}} +# {{- end -}} +#{{- end -}} \ No newline at end of file diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/web-root-configmap.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/web-root-configmap.yaml new file mode 100755 index 000000000..970d4e4f5 --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/templates/web-root-configmap.yaml @@ -0,0 +1,12 @@ +{{- if .Values.web_root_override }} +apiVersion: v1 +kind: ConfigMap +metadata: + name: kiali-console + namespace: {{ .Release.Namespace }} + labels: + {{- include "kiali-server.labels" . | nindent 4 }} +data: + env.js: | + window.WEB_ROOT='/k8s/clusters/{{ .Values.global.cattle.clusterId }}/api/v1/namespaces/{{ .Release.Namespace }}/services/http:kiali:20001/proxy/kiali'; +{{- end }} diff --git a/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/values.yaml b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/values.yaml new file mode 100755 index 000000000..aada4e09a --- /dev/null +++ b/charts/rancher-kiali-server/rancher-kiali-server/1.32.100-rc01/values.yaml @@ -0,0 +1,93 @@ +nameOverride: "kiali" +fullnameOverride: "kiali" + +# This is required for "openshift" auth strategy. +# You have to know ahead of time what your Route URL will be because +# right now the helm chart can't figure this out at runtime (it would +# need to wait for the Kiali Route to be deployed and for OpenShift +# to start it up). If someone knows how to update this helm chart to +# do this, a PR would be welcome. +kiali_route_url: "" + +# rancher specific override that allows proxy access to kiali url +web_root_override: true + +# +# Settings that mimic the Kiali CR which are placed in the ConfigMap. +# Note that only those values used by the Helm Chart will be here. +# + +istio_namespace: "" # default is where Kiali is installed + +auth: + openid: {} + openshift: {} + strategy: "" + +deployment: + # This only limits what Kiali will attempt to see, but Kiali Service Account has permissions to see everything. + # For more control over what the Kial Service Account can see, use the Kiali Operator + accessible_namespaces: + - "**" + additional_service_yaml: {} + affinity: + node: {} + pod: {} + pod_anti: {} + custom_dashboards: + excludes: [''] + includes: ['*'] + hpa: + api_version: "autoscaling/v2beta2" + spec: {} + repository: rancher/mirrored-kiali-kiali + image_pull_policy: "Always" + image_pull_secrets: [] + tag: v1.32.0 + ingress_enabled: true + logger: + log_format: "text" + log_level: "info" + time_field_format: "2006-01-02T15:04:05Z07:00" + sampler_rate: "1" + node_selector: {} + override_ingress_yaml: + metadata: {} + pod_annotations: {} + pod_labels: {} + priority_class_name: "" + replicas: 1 + resources: {} + secret_name: "kiali" + service_annotations: {} + service_type: "" + tolerations: [] + version_label: v1.32.0 + view_only_mode: false + +external_services: + custom_dashboards: + enabled: true + +identity: {} + #cert_file: + #private_key_file: + +login_token: + signing_key: "" + +server: + port: 20001 + metrics_enabled: true + metrics_port: 9090 + web_root: "" + +# Common settings used among istio subcharts. +global: + # Specify rancher clusterId of external tracing config + # https://github.com/istio/istio.io/issues/4146#issuecomment-493543032 + cattle: + systemDefaultRegistry: "" + clusterId: + rbac: + pspEnabled: false diff --git a/index.yaml b/index.yaml index 2639e844e..fd35a2206 100755 --- a/index.yaml +++ b/index.yaml @@ -2803,6 +2803,38 @@ entries: - assets/rancher-grafana/rancher-grafana-6.6.401-rc00.tgz version: 6.6.401-rc00 rancher-istio: + - annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/ui-component: istio + apiVersion: v1 + appVersion: 1.9.2 + created: "2021-04-12T16:14:37.187576445Z" + dependencies: + - condition: kiali.enabled + name: kiali + repository: file://./charts/kiali + - condition: tracing.enabled + name: tracing + repository: file://./charts/tracing + description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. + digest: f39804b9943d63c7b43b1774f3273426214a2fb2373a132d8ef0c415230d6a95 + icon: https://charts.rancher.io/assets/logos/istio.svg + keywords: + - networking + - infrastructure + name: rancher-istio + urls: + - assets/rancher-istio-1.9/rancher-istio-1.9.200-rc02.tgz + version: 1.9.200-rc02 - annotations: catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100-rc01 catalog.cattle.io/certified: rancher @@ -2835,6 +2867,38 @@ entries: urls: - assets/rancher-istio-1.9/rancher-istio-1.9.200-rc01.tgz version: 1.9.200-rc01 + - annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.32.100-rc01 + catalog.cattle.io/certified: rancher + catalog.cattle.io/display-name: Istio + catalog.cattle.io/namespace: istio-system + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: networking.istio.io.virtualservice/v1beta1 + catalog.cattle.io/release-name: rancher-istio + catalog.cattle.io/requests-cpu: 710m + catalog.cattle.io/requests-memory: 2314Mi + catalog.cattle.io/ui-component: istio + apiVersion: v1 + appVersion: 1.8.4 + created: "2021-04-12T16:14:37.181381913Z" + dependencies: + - condition: kiali.enabled + name: kiali + repository: file://./charts/kiali + - condition: tracing.enabled + name: tracing + repository: file://./charts/tracing + description: A basic Istio setup that installs with the istioctl. Refer to https://istio.io/latest/ + for details. + digest: b3eedae2aa3e4fec03cdd6c9cfe9b5f054dc99ba59f850f51cf3776df55c970a + icon: https://charts.rancher.io/assets/logos/istio.svg + keywords: + - networking + - infrastructure + name: rancher-istio + urls: + - assets/rancher-istio-1.8/rancher-istio-1.8.400-rc02.tgz + version: 1.8.400-rc02 - annotations: catalog.cattle.io/auto-install: rancher-kiali-server-crd=1.29.100-rc01 catalog.cattle.io/certified: rancher @@ -3119,6 +3183,41 @@ entries: - released/assets/rancher-istio/rancher-istio-1.7.100.tgz version: 1.7.100 rancher-kiali-server: + - annotations: + catalog.cattle.io/auto-install: rancher-kiali-server-crd=match + catalog.cattle.io/hidden: "true" + catalog.cattle.io/os: linux + catalog.cattle.io/provides-gvr: monitoringdashboards.monitoring.kiali.io/v1alpha1 + catalog.cattle.io/requires-gvr: monitoring.coreos.com.prometheus/v1 + catalog.rancher.io/namespace: cattle-istio-system + catalog.rancher.io/release-name: rancher-kiali-server + apiVersion: v2 + appVersion: v1.32.0 + created: "2021-04-12T16:14:37.192155169Z" + description: Kiali is an open source project for service mesh observability, refer + to https://www.kiali.io for details. This is installed as sub-chart with customized + values in Rancher's Istio. + digest: 81bb3b2c9dd79d17143c17c190413a9c87fbdf2c8899987531d87047d8ae4fe7 + home: https://github.com/kiali/kiali + icon: https://raw.githubusercontent.com/kiali/kiali.io/master/themes/kiali/static/img/kiali_logo_masthead.png + keywords: + - istio + - kiali + - networking + - infrastructure + maintainers: + - email: kiali-users@googlegroups.com + name: Kiali + url: https://kiali.io + name: rancher-kiali-server + sources: + - https://github.com/kiali/kiali + - https://github.com/kiali/kiali-ui + - https://github.com/kiali/kiali-operator + - https://github.com/kiali/helm-charts + urls: + - assets/rancher-kiali-server/rancher-kiali-server-1.32.100-rc01.tgz + version: 1.32.100-rc01 - annotations: catalog.cattle.io/auto-install: rancher-kiali-server-crd=match catalog.cattle.io/hidden: "true" @@ -3400,6 +3499,17 @@ entries: - released/assets/rancher-kiali-server/rancher-kiali-server-1.23.001.tgz version: 1.23.001 rancher-kiali-server-crd: + - annotations: + catalog.cattle.io/hidden: "true" + apiVersion: v2 + created: "2021-04-12T16:14:37.192658571Z" + description: Installs the CRDs for rancher-kiali-server. + digest: 2a426e9755c8d279c778f2638618c7c417e99298a7db79fa0e198140993aab8e + name: rancher-kiali-server-crd + type: application + urls: + - assets/rancher-kiali-server/rancher-kiali-server-crd-1.32.100-rc01.tgz + version: 1.32.100-rc01 - annotations: catalog.cattle.io/hidden: "true" apiVersion: v2